Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3136302e302f32312d3231203d3e2035363530.roa
File: 3134332e32302e3136302e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: ctrI8clyQN4FIbwVlEoSYtdm4MEtdnF7tuKeSAa1UaQ=
Subject key identifier: 4F:F3:13:55:6C:BA:30:90:4E:8D:DC:F8:C5:27:09:BC:C1:B6:0E:38
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2EE0699D318319FE20160C3EDEC38FA6340A9C96
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3136302e302f32312d3231203d3e2035363530.roa
Signing time: Tue 06 May 2025 06:35:42 +0000
ROA not before: Tue 06 May 2025 06:30:42 +0000
ROA not after: Tue 05 May 2026 06:35:42 +0000
asID: 5650
IP address blocks: 143.20.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:e0:69:9d:31:83:19:fe:20:16:0c:3e:de:c3:8f:a6:34:0a:9c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:42 2025 GMT
Not After : May 5 06:35:42 2026 GMT
Subject: CN=4FF313556CBA30904E8DDCF8C52709BCC1B60E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:60:61:b4:9c:2f:12:a5:cd:d5:09:63:2a:2f:
2f:19:a0:8f:ef:12:31:3e:06:97:fc:da:fc:f6:10:
1f:15:dd:67:4d:0e:22:5e:54:56:39:84:00:45:1c:
0d:f8:f9:04:2d:a4:99:1e:a2:0e:2e:25:66:1a:d2:
a1:3d:d6:07:f8:84:37:64:70:c6:7f:20:5d:32:ea:
10:76:51:9d:13:e5:54:7c:80:03:65:41:fd:61:e6:
59:23:15:38:cc:0c:cc:5b:f7:21:87:c7:4a:05:b6:
f1:be:2d:ec:c9:cd:66:d7:d9:63:5a:2e:90:77:a6:
e9:05:91:02:5b:ea:41:1d:05:e3:43:ab:4f:6c:52:
5f:45:c7:29:b4:06:fb:78:c8:79:67:7c:db:db:fc:
de:19:be:67:78:22:93:9c:13:25:34:66:d0:d5:6d:
91:79:99:8c:dd:ae:bb:96:4b:cc:0d:72:38:40:c6:
a6:fc:3b:79:64:06:28:e8:78:17:d1:4b:aa:8a:5a:
0a:ea:3f:84:04:d3:4c:97:fc:0e:d8:b0:3d:34:ba:
4d:bc:c3:99:f5:db:35:c6:87:00:1d:b8:e6:f8:17:
95:39:f4:d4:a6:f7:c3:4c:d5:e0:c1:c7:2e:ba:af:
ea:18:f8:96:e6:51:5b:b2:21:84:6b:f6:6c:42:64:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F3:13:55:6C:BA:30:90:4E:8D:DC:F8:C5:27:09:BC:C1:B6:0E:38
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3136302e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.160.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:44:e1:f9:df:18:bd:8c:21:cb:59:03:24:21:08:2e:c4:e8:
22:2e:ef:6a:e1:78:25:4f:af:f3:93:2c:37:3d:b5:3a:75:17:
82:e0:e9:bc:16:e5:b3:b7:b8:cb:0f:47:a3:2f:45:03:93:99:
7a:ff:ec:a4:60:36:65:05:7c:ff:f9:a4:d0:ca:c9:fb:8f:42:
cd:96:ce:77:33:75:9e:e4:fb:6f:86:25:aa:9f:4d:eb:9e:b5:
1a:39:3d:3e:f7:07:13:b4:d4:51:fa:35:e7:2d:b6:95:90:7e:
4b:ee:72:ff:e7:94:2b:91:fa:9f:10:0a:72:ea:9c:02:2b:07:
34:77:c5:eb:13:18:3e:36:03:f3:57:8c:b0:6e:fb:94:5a:14:
0a:0a:cb:9d:b0:9e:65:30:b5:73:5c:61:58:4b:53:1d:44:ca:
32:74:88:f0:ad:01:e2:a8:05:30:88:09:9e:ff:a8:16:2d:4e:
0a:ee:8c:1e:d2:10:9b:78:96:17:2d:84:4e:06:fa:32:cb:ad:
cf:60:90:cc:ca:87:99:97:b5:c7:91:de:48:f4:ef:f3:b9:68:
31:f1:d0:90:7f:f1:56:72:de:73:2b:36:81:25:d6:2a:83:00:
e9:c2:b6:e3:8b:b0:65:66:f8:e4:5c:9e:b6:77:21:98:d6:d8:
9c:3b:88:f4
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIULuBpnTGDGf4gFgw+3sOPpjQKnJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA1MDYwNjMwNDJaFw0yNjA1MDUwNjM1NDJaMDMxMTAvBgNV
BAMTKDRGRjMxMzU1NkNCQTMwOTA0RThERENGOEM1MjcwOUJDQzFCNjBFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaYGG0nC8Spc3VCWMqLy8ZoI/v
EjE+Bpf82vz2EB8V3WdNDiJeVFY5hABFHA34+QQtpJkeog4uJWYa0qE91gf4hDdk
cMZ/IF0y6hB2UZ0T5VR8gANlQf1h5lkjFTjMDMxb9yGHx0oFtvG+LezJzWbX2WNa
LpB3pukFkQJb6kEdBeNDq09sUl9Fxym0Bvt4yHlnfNvb/N4Zvmd4IpOcEyU0ZtDV
bZF5mYzdrruWS8wNcjhAxqb8O3lkBijoeBfRS6qKWgrqP4QE00yX/A7YsD00uk28
w5n12zXGhwAduOb4F5U59NSm98NM1eDBxy66r+oY+JbmUVuyIYRr9mxCZAI9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUT/MTVWy6MJBOjdz4xScJvMG2DjgwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjIt
ZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2MmUwLzAvMzEzNDMzMmUzMjMwMmUzMTM2
MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA48U
oDANBgkqhkiG9w0BAQsFAAOCAQEAC0Th+d8YvYwhy1kDJCEILsToIi7vauF4JU+v
85MsNz21OnUXguDpvBbls7e4yw9Hoy9FA5OZev/spGA2ZQV8//mk0MrJ+49CzZbO
dzN1nuT7b4Ylqp9N6561Gjk9PvcHE7TUUfo15y22lZB+S+5y/+eUK5H6nxAKcuqc
AisHNHfF6xMYPjYD81eMsG77lFoUCgrLnbCeZTC1c1xhWEtTHUTKMnSI8K0B4qgF
MIgJnv+oFi1OCu6MHtIQm3iWFy2ETgb6Msutz2CQzMqHmZe1x5HeSPTv87loMfHQ
kH/xVnLecys2gSXWKoMA6cK244uwZWb45FyetnchmNbYnDuI9A==
-----END CERTIFICATE-----
Generated at Thu May 8 05:54:46 2025 by rpki-client