Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3138342e302f32312d3231203d3e2036303739.roa
File: 3134332e32302e3138342e302f32312d3231203d3e2036303739.roa (raw, json)
Hash identifier: RyycZm5r1CyXdku4deA/5/iALrpfeV8HJYAiy3wAunI=
Subject key identifier: D7:A8:B2:E8:7E:5E:8C:27:98:C3:33:55:26:F3:41:58:72:4B:F0:00
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 73FFA1CCD46F66492DD7A4D5B1330BDFCB141F1B
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3138342e302f32312d3231203d3e2036303739.roa
Signing time: Tue 06 May 2025 06:36:58 +0000
ROA not before: Tue 06 May 2025 06:31:58 +0000
ROA not after: Tue 05 May 2026 06:36:58 +0000
asID: 6079
IP address blocks: 143.20.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ff:a1:cc:d4:6f:66:49:2d:d7:a4:d5:b1:33:0b:df:cb:14:1f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:31:58 2025 GMT
Not After : May 5 06:36:58 2026 GMT
Subject: CN=D7A8B2E87E5E8C2798C3335526F34158724BF000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9e:8e:d8:1f:80:53:10:0c:f1:f6:f9:7c:4d:
ef:d9:12:e1:6a:ce:20:34:cb:0f:00:98:ee:04:9d:
ea:32:71:e4:a8:57:8a:0f:a1:27:99:4a:3e:0a:ee:
a8:f3:0b:ae:59:67:26:13:17:ac:81:57:61:e1:08:
d2:05:86:d0:9c:d5:e7:6b:82:08:8a:3d:7e:df:4d:
bd:1e:92:5e:ce:73:8e:13:76:d0:c6:83:71:6f:9e:
21:99:54:a1:07:8f:9a:67:61:ab:9c:1a:ed:6f:bc:
aa:00:a4:90:21:7f:1d:da:a8:48:3a:2f:24:5f:3b:
24:ca:cb:3a:db:73:fc:e8:ab:93:ad:65:da:12:31:
6b:57:c3:8a:5a:2c:09:9d:e4:28:b2:d1:06:17:d8:
68:6c:a3:3a:51:51:a3:66:5c:80:e9:e5:9b:a2:95:
d6:61:bd:ca:0c:d0:90:96:e9:ee:85:f1:f4:8d:8e:
bb:ad:14:23:48:6f:d6:41:c7:66:18:dd:1e:3d:35:
a5:93:83:a6:79:8f:4a:24:a8:e6:04:c5:2a:e3:99:
62:5b:7c:33:fc:ca:c2:84:69:75:34:4a:3c:a7:e4:
3d:ec:72:63:6d:1b:76:d5:53:6a:3a:d5:3d:65:7c:
0e:5b:fc:3b:54:3f:f1:71:5c:92:13:cb:10:66:be:
0d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:B2:E8:7E:5E:8C:27:98:C3:33:55:26:F3:41:58:72:4B:F0:00
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3138342e302f32312d3231203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.184.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:0b:e4:54:27:59:10:b2:e8:b5:65:81:ba:2b:05:f9:17:49:
72:53:0a:f1:ca:2b:f8:0c:7d:5a:c1:da:a6:5c:f3:31:8b:af:
29:57:12:88:3d:49:af:c0:10:77:a3:4a:07:53:83:2c:6a:18:
b0:da:09:18:11:8d:2a:47:fa:33:c2:e0:c5:fc:23:e1:f9:17:
79:52:46:74:8e:43:e1:4e:77:f1:b6:b9:57:0a:a4:a6:59:5c:
8c:52:26:ce:e4:da:76:d2:73:1a:14:d5:6c:03:79:eb:88:d4:
e1:b7:49:e8:93:f8:78:c9:b4:42:ed:5f:85:48:4a:7f:4d:bf:
26:7c:7d:75:3f:20:99:2a:f6:34:ce:bc:3a:c0:6c:20:b8:51:
12:f3:67:9c:80:05:89:3c:f6:9f:f1:85:8b:be:98:ee:b7:1b:
e5:95:c8:5f:3d:aa:6d:9e:4e:5a:fa:7e:2f:0f:82:8f:aa:e5:
b1:e2:2e:2c:72:5b:78:dd:99:9b:36:60:30:83:c5:dc:e8:78:
5b:fd:64:75:7c:a3:18:15:1d:e3:10:b9:83:17:5b:09:41:72:
f6:50:ec:51:ef:f9:5e:91:0d:a8:e5:20:88:0d:d1:a8:d9:f4:
c4:69:7a:1d:4a:8c:5f:c1:cc:56:7f:bb:d8:cf:d9:62:1f:ec:
7f:30:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:01:03 2025 by rpki-client