Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134342e302f32312d3231203d3e2035363530.roa
File: 3134332e32302e3134342e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: xT553EUSjgFnyeUchMXuWZUEEVeettilptWanUZFpf8=
Subject key identifier: BA:01:68:92:D1:BF:14:4D:D8:3E:C7:79:6E:18:D3:C9:2C:AF:15:D1
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 35F8E8BA0238ABC7E37E6C3B03306837D1AEA43E
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134342e302f32312d3231203d3e2035363530.roa
Signing time: Tue 06 May 2025 06:35:38 +0000
ROA not before: Tue 06 May 2025 06:30:38 +0000
ROA not after: Tue 05 May 2026 06:35:38 +0000
asID: 5650
IP address blocks: 143.20.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:f8:e8:ba:02:38:ab:c7:e3:7e:6c:3b:03:30:68:37:d1:ae:a4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:38 2025 GMT
Not After : May 5 06:35:38 2026 GMT
Subject: CN=BA016892D1BF144DD83EC7796E18D3C92CAF15D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:57:e8:fe:b8:30:16:da:44:58:b9:55:8c:
62:05:31:8c:e9:5a:e7:d2:2f:f7:71:b5:18:e0:8e:
25:b7:71:9b:7c:04:35:6c:3e:36:c8:55:38:7a:5f:
80:a9:ef:f0:f3:b0:26:40:15:a8:67:1f:84:52:51:
26:18:a8:9b:4d:32:44:d9:cb:78:f9:7f:bf:c5:4c:
07:b5:1c:b1:69:ea:57:5a:c2:2e:9d:de:41:66:ac:
44:6c:81:ee:5c:da:13:e7:06:60:a7:16:a4:61:15:
8c:b5:40:bb:d5:7e:2a:7f:4e:98:d0:c9:69:de:4c:
93:ef:48:db:1f:a8:1e:e8:c7:2d:2f:41:e5:e9:ee:
bb:50:3b:0b:ed:29:ba:dd:e9:92:37:70:01:b5:3f:
59:80:34:81:2d:06:8b:03:5d:0f:c2:3b:1f:35:e5:
90:f5:f5:84:e8:c3:ca:59:dc:07:bc:54:f7:88:dc:
b2:0f:5c:b9:f4:ad:02:57:10:f9:36:3c:62:15:b7:
5a:7a:98:f9:1a:d6:4e:14:b4:6b:74:06:5d:5a:a3:
b0:62:90:39:bb:14:c3:51:79:4e:9b:0a:33:e5:fa:
36:c2:69:f9:d4:17:1f:f0:08:43:29:ea:e1:23:8d:
a9:8d:db:a9:c9:0e:b2:e5:c7:f6:00:eb:4e:6c:88:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:01:68:92:D1:BF:14:4D:D8:3E:C7:79:6E:18:D3:C9:2C:AF:15:D1
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3134342e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.144.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:7d:3e:36:bb:af:0f:fe:80:89:d0:79:f6:4a:ac:3d:d5:54:
27:8f:46:f9:c7:ee:85:be:c6:93:33:49:52:5b:bb:b7:63:7c:
29:e7:41:a4:6c:16:61:10:29:4d:d4:7a:aa:ad:25:8b:b2:52:
67:04:9e:6f:d7:b5:3a:e4:98:ee:af:74:f8:66:f9:31:ca:2f:
d5:31:f9:c8:97:9a:f4:78:76:15:20:2a:bb:76:bd:03:da:75:
63:b3:3f:c2:0c:76:21:ce:ac:2d:df:f9:14:71:a4:0d:f4:97:
91:03:08:e3:93:79:08:e1:67:2f:45:16:3f:c5:6f:de:54:76:
69:4a:8b:05:49:7e:5d:ba:0a:2b:df:c9:4c:4d:7c:8c:62:ab:
2e:cd:fb:9f:8c:33:ec:ff:31:b5:28:eb:bc:cf:90:f7:29:1b:
f7:08:cd:53:88:8f:c3:e7:ab:ef:6d:f2:f8:41:ea:76:39:c6:
cc:6d:5a:40:52:e6:4c:ad:b2:d9:c1:ed:ce:92:2c:b9:19:97:
71:b0:05:62:8c:b2:11:6f:6b:89:2b:ac:8b:de:42:a5:db:98:
98:7b:ba:b5:93:63:59:6e:4b:d5:54:19:2b:d8:db:73:0a:16:
69:00:cc:f7:ab:22:ee:bd:fd:3d:4b:c4:25:78:32:bd:24:c9:
f5:6b:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:13:13 2025 by rpki-client