Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134322e302f32342d3234203d3e2037303239.roa
File: 3134332e32302e3134322e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: QMrO6/b3S96GE0gq/lXoO3pH64b9B/51S/N4+uzvWJw=
Subject key identifier: 54:61:6E:40:38:00:5C:68:02:5D:82:04:34:4A:36:71:8F:78:1C:E5
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 51E91817965647D497631912F06BE1A4BB5F8CFF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134322e302f32342d3234203d3e2037303239.roa
Signing time: Tue 06 May 2025 06:36:32 +0000
ROA not before: Tue 06 May 2025 06:31:32 +0000
ROA not after: Tue 05 May 2026 06:36:32 +0000
asID: 7029
IP address blocks: 143.20.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 05:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e9:18:17:96:56:47:d4:97:63:19:12:f0:6b:e1:a4:bb:5f:8c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:31:32 2025 GMT
Not After : May 5 06:36:32 2026 GMT
Subject: CN=54616E4038005C68025D8204344A36718F781CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:16:f9:ab:20:d5:72:c9:36:f6:4d:69:a7:
be:de:22:09:12:b9:c5:e4:bb:6a:e8:63:93:bb:f7:
60:7d:03:ab:e3:e4:a4:ad:fa:1b:3e:ec:7d:31:92:
05:c1:13:b3:5d:af:02:fd:f6:ff:76:db:7b:64:8d:
f2:e7:9e:f6:46:07:2b:a2:c1:70:e1:0a:d1:39:1c:
48:21:16:b9:dd:b1:64:e9:8f:6e:25:f2:37:a1:93:
43:55:1c:33:43:f9:a2:0c:68:f2:79:35:e2:17:e8:
cb:cf:e0:39:49:00:bd:f5:11:75:e0:0c:c8:f1:0c:
a2:d1:03:be:fd:99:1e:58:f3:d3:43:e2:d9:22:04:
9b:64:89:df:21:e9:f2:9d:eb:62:a7:55:d1:64:9b:
01:c4:d3:17:91:16:81:80:21:bb:47:a7:8c:7a:ef:
81:ce:c3:25:a5:ad:dd:bf:67:e3:ae:b4:1d:3c:04:
ff:ea:bd:ec:9e:53:14:e1:f8:00:14:af:08:f8:7c:
e5:42:9e:a2:45:a7:66:c1:8d:6b:3f:ec:20:94:6f:
24:24:66:00:cf:df:8e:de:d1:34:8c:7e:72:6d:f9:
3f:5c:5d:33:31:9c:51:5f:96:b1:ce:80:29:b7:fc:
9d:d4:41:70:88:80:9e:25:cd:42:0e:f5:58:4d:d5:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:6E:40:38:00:5C:68:02:5D:82:04:34:4A:36:71:8F:78:1C:E5
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134322e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.142.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c1:b9:90:ec:45:6b:3a:04:cb:14:b8:e5:87:be:68:2b:81:
dc:a4:52:f3:45:46:6e:cf:e4:43:9d:32:9f:50:bc:69:4f:3b:
55:fa:f4:90:a6:3e:f3:e0:15:13:1d:4e:52:fe:db:fd:3d:3f:
50:14:a1:54:85:91:d7:9a:47:17:d3:6a:d2:c2:79:1b:0f:b2:
bd:03:5b:71:c0:86:e2:59:eb:30:8d:31:99:8e:ba:cb:8b:48:
d3:a4:76:36:f3:79:4f:0c:c0:84:5b:39:4e:25:71:19:b1:36:
51:0a:5e:d7:81:9a:d7:89:2f:08:b9:34:0f:73:fa:d2:18:6e:
cb:0c:98:76:ec:1f:f9:14:d8:6b:c5:5b:54:14:3d:87:98:88:
61:f6:d0:3b:21:46:53:78:bd:dd:13:ff:3b:d6:6e:d4:34:0b:
e8:1b:fc:cf:ee:52:48:32:ee:8d:42:34:74:50:7d:bb:d2:a4:
f4:8c:b9:1e:25:5f:02:2e:67:d3:62:e3:23:5e:d3:f7:99:5b:
d5:ae:a6:02:76:2a:9c:c8:6a:99:cb:59:10:aa:3a:fe:e1:03:
d5:08:48:bf:8f:15:f9:bc:a6:c6:90:ad:18:ad:8d:7a:fd:25:
19:05:e3:cf:29:00:30:5f:e2:fb:8f:ee:3a:8e:bd:f3:1b:91:
57:34:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:39:52 2025 by rpki-client