Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3136382e302f32312d3231203d3e2035363530.roa
File: 3134332e32302e3136382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: A5v6J0cw4m/+v3vaH1BAc8JDL7ThcfybXJQ+53jgEIU=
Subject key identifier: C2:43:66:F7:AC:37:68:61:92:77:5E:F7:3C:3D:5E:54:F7:1C:7E:01
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 497E558C0D59E4201C8326553A5D0DD3B7D8DA80
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3136382e302f32312d3231203d3e2035363530.roa
Signing time: Tue 06 May 2025 06:35:43 +0000
ROA not before: Tue 06 May 2025 06:30:43 +0000
ROA not after: Tue 05 May 2026 06:35:43 +0000
asID: 5650
IP address blocks: 143.20.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7e:55:8c:0d:59:e4:20:1c:83:26:55:3a:5d:0d:d3:b7:d8:da:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:43 2025 GMT
Not After : May 5 06:35:43 2026 GMT
Subject: CN=C24366F7AC37686192775EF73C3D5E54F71C7E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:d4:32:7e:8d:db:b3:4a:35:15:ab:ad:ab:
ef:87:10:07:b9:f8:2f:1c:18:52:22:fa:b2:5d:c0:
ca:43:f9:13:d4:26:a9:3d:cd:00:a1:21:90:d4:84:
2b:a9:91:71:82:0f:88:dc:8f:38:10:e5:eb:cd:5e:
b2:bc:3f:58:7a:d4:00:ec:8b:2f:c0:93:a7:da:93:
1c:92:c5:1b:0c:6b:56:7d:c9:a0:62:37:e7:42:e6:
c0:a4:d5:a4:72:01:51:7b:b5:9f:0a:f8:ff:53:69:
fa:43:0f:02:f8:db:03:f1:51:fd:45:24:9c:a6:23:
95:2d:d8:c3:08:5d:a1:86:96:d9:3d:68:48:a7:fc:
77:be:30:62:28:1b:fe:70:d9:6c:60:bf:04:55:16:
97:04:2e:d7:44:bb:39:84:fa:7e:aa:c9:f5:08:83:
38:b8:68:d8:54:29:b6:25:0a:a4:7a:ee:1f:bf:a0:
ee:8d:ac:0e:0d:8a:ec:4c:09:b3:c8:c1:52:51:45:
02:ca:8b:2e:d0:06:f1:f3:5c:b5:f5:5e:20:db:a1:
ef:7d:46:48:50:42:7b:e8:d9:6d:11:fa:c4:b9:7d:
ed:58:0d:49:ba:6c:6f:12:84:ff:5b:a1:7c:52:04:
15:3e:3e:33:61:ee:d6:62:01:9e:66:67:bc:5a:b8:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:43:66:F7:AC:37:68:61:92:77:5E:F7:3C:3D:5E:54:F7:1C:7E:01
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3136382e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.168.0/21
Signature Algorithm: sha256WithRSAEncryption
57:6d:87:4a:23:6d:04:84:d3:0b:2b:a7:7f:b7:16:c0:18:74:
ad:79:a9:88:f3:4e:35:86:84:40:c1:05:dd:4d:69:c9:ba:72:
ea:0d:b6:48:63:6c:c4:9b:7f:3c:5a:88:6c:07:c9:63:16:24:
b4:aa:5d:da:e7:39:a9:11:d3:96:1d:27:b5:25:66:ce:fe:fb:
a2:1e:62:e9:27:33:24:4a:e6:30:b7:c9:9a:3e:29:87:13:97:
5e:78:9b:8d:59:e6:49:1f:d8:26:ba:e2:39:3f:eb:cc:89:2f:
69:80:1a:46:78:6c:37:16:ff:8e:51:88:68:b0:4c:21:23:b0:
fc:d7:26:fa:47:10:1e:cb:2a:ea:01:0b:61:6f:09:be:90:2d:
35:21:15:63:70:c0:e4:95:dc:23:e2:00:ad:51:a7:7f:db:a7:
d2:a2:56:78:b3:ec:73:bc:ea:f8:b2:4c:e1:f7:4c:75:91:66:
d8:74:6c:d1:66:dd:fe:3d:cc:df:a8:83:36:cf:1f:ba:11:7f:
2a:80:88:84:5b:cd:72:7f:e2:4f:79:27:7e:80:d0:85:88:b6:
06:ef:7b:04:23:ac:7f:0e:40:f0:df:06:bb:32:da:1f:a7:8c:
8c:b5:29:e0:4a:6b:f7:99:c0:76:fe:8f:07:2b:e6:c9:c8:c7:
e7:4b:86:94
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUSX5VjA1Z5CAcgyZVOl0N07fY2oAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA1MDYwNjMwNDNaFw0yNjA1MDUwNjM1NDNaMDMxMTAvBgNV
BAMTKEMyNDM2NkY3QUMzNzY4NjE5Mjc3NUVGNzNDM0Q1RTU0RjcxQzdFMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu59Qyfo3bs0o1Fautq++HEAe5
+C8cGFIi+rJdwMpD+RPUJqk9zQChIZDUhCupkXGCD4jcjzgQ5evNXrK8P1h61ADs
iy/Ak6fakxySxRsMa1Z9yaBiN+dC5sCk1aRyAVF7tZ8K+P9TafpDDwL42wPxUf1F
JJymI5Ut2MMIXaGGltk9aEin/He+MGIoG/5w2WxgvwRVFpcELtdEuzmE+n6qyfUI
gzi4aNhUKbYlCqR67h+/oO6NrA4NiuxMCbPIwVJRRQLKiy7QBvHzXLX1XiDboe99
RkhQQnvo2W0R+sS5fe1YDUm6bG8ShP9boXxSBBU+PjNh7tZiAZ5mZ7xauM4DAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUwkNm96w3aGGSd173PD1eVPccfgEwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjIt
ZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2MmUwLzAvMzEzNDMzMmUzMjMwMmUzMTM2
MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA48U
qDANBgkqhkiG9w0BAQsFAAOCAQEAV22HSiNtBITTCyunf7cWwBh0rXmpiPNONYaE
QMEF3U1pybpy6g22SGNsxJt/PFqIbAfJYxYktKpd2uc5qRHTlh0ntSVmzv77oh5i
6SczJErmMLfJmj4phxOXXnibjVnmSR/YJrriOT/rzIkvaYAaRnhsNxb/jlGIaLBM
ISOw/Ncm+kcQHssq6gELYW8JvpAtNSEVY3DA5JXcI+IArVGnf9un0qJWeLPsc7zq
+LJM4fdMdZFm2HRs0Wbd/j3M36iDNs8fuhF/KoCIhFvNcn/iT3knfoDQhYi2Bu97
BCOsfw5A8N8GuzLaH6eMjLUp4Epr95nAdv6PByvmycjH50uGlA==
-----END CERTIFICATE-----
Generated at Thu May 8 13:06:24 2025 by rpki-client