Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230362e302f32342d3234203d3e20313337323335.roa
File: 3134332e32302e3230362e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier: L2F2dGYNFvtfIwwjLA95g73FYPLbDZL4+t3YcjHUF6Y=
Subject key identifier: 96:98:1E:FE:5C:2F:A9:05:E4:C1:1B:25:21:01:46:27:67:80:AE:35
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2C2DFB55751129F90A24841D56D927799C5150AF
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230362e302f32342d3234203d3e20313337323335.roa
Signing time: Tue 06 May 2025 09:19:22 +0000
ROA not before: Tue 06 May 2025 09:14:22 +0000
ROA not after: Tue 05 May 2026 09:19:22 +0000
asID: 137235
IP address blocks: 143.20.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2d:fb:55:75:11:29:f9:0a:24:84:1d:56:d9:27:79:9c:51:50:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 09:14:22 2025 GMT
Not After : May 5 09:19:22 2026 GMT
Subject: CN=96981EFE5C2FA905E4C11B25210146276780AE35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:70:d3:8e:32:dd:36:78:ab:7c:05:54:40:
a3:a0:2b:bb:bd:e8:61:91:20:94:a9:2a:25:99:a4:
66:d3:97:a2:73:d9:74:5e:3a:d8:a7:83:e7:3d:d1:
ec:f0:18:02:f8:ee:a3:3d:41:f9:49:f4:f1:9f:32:
3e:3e:6a:fe:8b:8c:db:73:9f:34:60:fe:dc:e1:43:
f1:68:e7:1b:81:f8:2b:a3:1b:80:09:ba:f0:37:10:
73:02:62:39:ca:e5:72:05:6e:41:c3:79:5d:f4:13:
83:44:5c:9e:9c:e4:75:ab:55:8b:62:28:a8:2d:01:
17:d7:bb:60:a2:50:58:4f:f5:29:77:7c:56:db:e9:
d4:d5:08:5c:f1:6c:8e:15:d7:fa:62:48:0b:8a:03:
4e:22:ba:f0:b8:c4:e9:10:18:29:c9:11:b2:b2:4e:
a4:f6:db:aa:22:e7:02:d9:88:5c:e0:90:52:41:35:
be:02:10:1e:07:74:c7:a3:05:fd:88:4b:6f:39:99:
00:3a:c4:25:7e:82:08:d4:a5:de:47:13:65:cf:3f:
70:f5:b1:d0:56:cc:e5:2a:b8:6f:84:84:4f:ad:ed:
5c:08:8c:9c:57:eb:f6:c9:1e:83:29:d7:ec:93:76:
62:03:44:f7:97:13:f5:5f:81:96:3e:6d:43:d8:e0:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:1E:FE:5C:2F:A9:05:E4:C1:1B:25:21:01:46:27:67:80:AE:35
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230362e302f32342d3234203d3e20313337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.206.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:06:41:d5:2a:4c:0b:09:f0:0f:84:d9:1e:ba:20:06:97:79:
3d:ce:ca:f9:ff:94:61:68:dc:af:3a:64:a8:bd:7e:cd:8d:c7:
24:aa:9e:a0:79:2a:04:75:33:38:8e:97:aa:50:9b:51:85:60:
07:5f:d0:38:9f:d1:08:67:d7:a1:ba:c0:9c:1c:39:db:e3:44:
fc:94:ef:0b:8d:ae:9c:dc:7c:dd:73:5c:43:f2:6a:58:0c:d2:
9b:b8:5c:61:32:f1:79:67:ac:43:d4:4c:ef:59:3b:1d:26:3e:
10:3a:38:c7:a8:7f:73:e7:c5:c8:be:a6:27:9b:4e:7b:4f:d1:
66:a5:d1:3f:18:ab:06:40:67:c9:5c:7f:f8:99:65:13:b7:9d:
d9:c1:03:0d:8a:ea:6e:b4:39:61:cf:f9:4c:22:48:33:12:0c:
5e:27:92:81:7d:5a:fe:b9:75:09:6f:87:72:4a:d3:6e:33:8e:
dc:d3:f7:31:f7:98:20:a0:69:03:6a:24:9c:eb:7e:46:89:de:
3d:71:95:fc:27:d4:69:54:8c:04:3c:4c:79:37:21:fb:ac:62:
ba:1d:fb:e1:4e:e6:b3:13:50:6d:ee:f4:eb:cc:7b:6d:65:0c:
be:42:90:4c:01:d9:81:6d:b6:7c:20:72:a4:41:64:45:ab:45:
af:0f:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:59:24 2025 by rpki-client