Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137392e302f32342d3234203d3e2036303739.roa
File: 3134332e32302e3137392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: 6VaTUHJqzuF4dTzfinj48Sy/hLMp3EVG6itxFtcAwaQ=
Subject key identifier: F8:C0:77:A1:3B:7C:D5:2C:8D:4B:56:BE:CC:50:77:72:31:CE:EE:C1
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 7BEC764C24E8839D706200F85696F991680C9AC7
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137392e302f32342d3234203d3e2036303739.roa
Signing time: Tue 06 May 2025 06:36:54 +0000
ROA not before: Tue 06 May 2025 06:31:54 +0000
ROA not after: Tue 05 May 2026 06:36:54 +0000
asID: 6079
IP address blocks: 143.20.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ec:76:4c:24:e8:83:9d:70:62:00:f8:56:96:f9:91:68:0c:9a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:31:54 2025 GMT
Not After : May 5 06:36:54 2026 GMT
Subject: CN=F8C077A13B7CD52C8D4B56BECC50777231CEEEC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:cc:b1:6d:33:1a:ad:c1:7d:4b:22:ab:7d:
5f:f5:aa:ec:0d:3f:a4:9b:f7:39:07:af:29:8e:37:
ed:ee:a3:15:0f:27:36:a1:dc:8f:e1:53:00:dc:43:
ec:9a:b4:48:a4:e0:94:c2:23:cf:ec:1c:7b:05:f3:
92:a2:2d:99:b5:8e:52:0d:55:b2:48:17:05:5a:49:
59:bb:cf:4b:b3:87:c3:99:7f:13:4c:5a:13:c2:56:
8c:5b:55:aa:26:e1:e5:cd:ca:68:90:57:df:a0:66:
40:f0:e7:41:ef:62:77:11:2e:bc:40:88:f8:b6:8b:
53:df:10:18:15:9d:91:d7:02:56:6f:19:b6:7a:d2:
ae:83:ca:a6:46:c8:10:92:80:ef:0c:e5:65:ad:61:
2a:ad:0d:22:57:3f:35:75:5a:89:8e:6b:4a:bd:cc:
c7:38:52:0b:b8:72:48:d2:04:3f:f2:07:a4:3e:bc:
e3:ea:93:cb:bb:a7:0b:42:b7:11:61:d4:97:8b:49:
24:36:04:91:50:ce:dc:c8:33:f1:d2:6b:d5:16:28:
18:61:19:44:1d:4e:48:99:26:fd:00:dc:c5:7e:18:
08:ed:18:86:ce:f7:28:15:72:0d:6c:bd:51:80:07:
ae:35:aa:71:51:ae:c4:d2:d0:e0:f2:03:23:4a:e4:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:77:A1:3B:7C:D5:2C:8D:4B:56:BE:CC:50:77:72:31:CE:EE:C1
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3137392e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.179.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0a:67:9d:95:76:6c:e7:cf:6c:01:a1:30:b8:90:f3:b6:b8:
ac:78:84:5e:a5:4c:63:be:4d:e0:6d:f4:09:f1:ae:96:35:e6:
98:de:56:a6:88:f2:29:d9:23:c3:0e:21:d3:40:48:7b:63:cf:
9c:b3:d5:22:6a:ea:8e:1a:a6:b3:c1:58:8f:e2:bd:4f:2a:d7:
86:3e:33:13:7a:23:c1:38:8d:8e:c6:4d:91:36:d1:34:20:7a:
05:0a:af:98:10:55:77:9b:72:d1:f0:93:0a:8c:bb:fc:b5:c2:
99:b2:a5:9b:6f:41:16:c0:82:46:c3:ae:da:da:ab:32:6d:19:
95:b3:29:a6:28:98:a2:2d:56:f0:63:42:61:99:dc:1f:6b:58:
7e:fb:93:41:68:56:06:9d:56:57:7c:d9:9c:35:a1:b3:cd:48:
5f:3e:65:58:52:37:24:43:ad:79:13:18:f1:1b:1a:ac:af:ff:
e0:2c:07:d4:25:75:aa:bb:e3:8f:94:df:d2:ae:f9:5d:6b:5b:
61:6c:6f:16:25:f1:16:5a:ee:86:30:b2:2f:e1:29:5a:77:a4:
2f:fa:a8:0f:4c:e2:4c:3b:54:f3:4d:ba:c8:eb:bb:87:ec:fc:
c9:0d:d6:02:56:65:f3:77:17:d7:f2:75:a9:b6:06:68:52:8b:
76:70:89:58
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUe+x2TCTog51wYgD4Vpb5kWgMmscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNTA1MDYwNjMxNTRaFw0yNjA1MDUwNjM2NTRaMDMxMTAvBgNV
BAMTKEY4QzA3N0ExM0I3Q0Q1MkM4RDRCNTZCRUNDNTA3NzcyMzFDRUVFQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UcyxbTMarcF9SyKrfV/1quwN
P6Sb9zkHrymON+3uoxUPJzah3I/hUwDcQ+yatEik4JTCI8/sHHsF85KiLZm1jlIN
VbJIFwVaSVm7z0uzh8OZfxNMWhPCVoxbVaom4eXNymiQV9+gZkDw50HvYncRLrxA
iPi2i1PfEBgVnZHXAlZvGbZ60q6DyqZGyBCSgO8M5WWtYSqtDSJXPzV1WomOa0q9
zMc4Ugu4ckjSBD/yB6Q+vOPqk8u7pwtCtxFh1JeLSSQ2BJFQztzIM/HSa9UWKBhh
GUQdTkiZJv0A3MV+GAjtGIbO9ygVcg1svVGAB641qnFRrsTS0ODyAyNK5ENxAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU+MB3oTt81SyNS1a+zFB3cjHO7sEwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjIt
ZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2MmUwLzAvMzEzNDMzMmUzMjMwMmUzMTM3
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI8U
szANBgkqhkiG9w0BAQsFAAOCAQEAJQpnnZV2bOfPbAGhMLiQ87a4rHiEXqVMY75N
4G30CfGuljXmmN5WpojyKdkjww4h00BIe2PPnLPVImrqjhqms8FYj+K9TyrXhj4z
E3ojwTiNjsZNkTbRNCB6BQqvmBBVd5ty0fCTCoy7/LXCmbKlm29BFsCCRsOu2tqr
Mm0ZlbMppiiYoi1W8GNCYZncH2tYfvuTQWhWBp1WV3zZnDWhs81IXz5lWFI3JEOt
eRMY8RsarK//4CwH1CV1qrvjj5Tf0q75XWtbYWxvFiXxFlruhjCyL+EpWnekL/qo
D0ziTDtU8026yOu7h+z8yQ3WAlZl83cX1/J1qbYGaFKLdnCJWA==
-----END CERTIFICATE-----
Generated at Sat May 10 08:40:06 2025 by rpki-client