Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230372e302f32342d3234203d3e2037303239.roa
File: 3134332e32302e3230372e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier: N4bWr6Nv+ueLexGZHni6r2gUngap1V9+nU06X1caiZk=
Subject key identifier: A8:E7:AF:CB:F6:5D:E5:2E:2C:C8:F1:02:71:75:99:3D:C7:0D:7D:96
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: A237526E7F82597E826F27ACBFE113900393F4
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230372e302f32342d3234203d3e2037303239.roa
Signing time: Tue 06 May 2025 06:36:19 +0000
ROA not before: Tue 06 May 2025 06:31:19 +0000
ROA not after: Tue 05 May 2026 06:36:19 +0000
asID: 7029
IP address blocks: 143.20.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 12:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a2:37:52:6e:7f:82:59:7e:82:6f:27:ac:bf:e1:13:90:03:93:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:31:19 2025 GMT
Not After : May 5 06:36:19 2026 GMT
Subject: CN=A8E7AFCBF65DE52E2CC8F1027175993DC70D7D96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:91:03:db:c5:93:d0:da:ad:2f:6b:f9:d3:
42:6d:d2:3d:81:41:a0:93:dc:06:f4:1c:eb:57:4e:
e4:53:53:5e:1d:02:99:a9:18:4a:db:c7:87:34:b7:
6e:20:82:b5:1c:96:08:5b:ca:bf:ba:7c:73:a0:18:
6d:2a:78:7f:73:b9:8f:70:5d:6d:32:47:a9:68:e7:
75:72:17:24:0f:a2:2a:ff:db:90:f9:92:eb:d4:03:
f1:0a:39:97:80:90:2b:a6:65:66:ce:2b:16:5b:eb:
42:05:30:cb:83:ac:94:1c:aa:15:1f:11:21:94:3b:
2f:04:f3:61:55:82:b3:78:09:de:2d:63:9a:eb:0d:
48:a9:33:a1:e0:ea:bc:41:ec:1a:a3:63:ef:2b:9f:
ab:c8:46:89:bd:57:8a:58:88:dd:6b:9d:e4:f7:b1:
0b:15:cf:40:90:a3:d6:f1:23:ce:e6:e2:c9:94:8b:
9b:0c:10:d8:7b:a1:3d:27:3c:f0:52:b9:ac:82:98:
e8:68:b7:aa:f5:c0:92:ba:1c:d8:0e:b2:37:8f:8d:
eb:ca:2f:b9:38:28:ef:10:23:c8:0a:64:60:01:e1:
fc:6e:76:47:f1:cd:73:86:24:5f:ca:50:c5:db:31:
9f:40:eb:39:0c:c1:c1:01:d0:29:09:62:a0:a0:38:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:AF:CB:F6:5D:E5:2E:2C:C8:F1:02:71:75:99:3D:C7:0D:7D:96
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3230372e302f32342d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:91:ae:c0:85:f0:a4:cb:ca:d6:52:a0:e8:ab:db:39:70:bf:
8a:6c:0a:59:66:5f:86:e0:bc:bc:dc:15:ea:62:2e:6c:b7:46:
92:ec:3f:9a:6d:d2:75:6b:8b:48:52:d1:d2:0a:11:8d:90:f1:
09:c1:a7:04:af:29:a9:e5:22:4a:9c:03:2b:e4:d5:4b:2a:a2:
21:18:9d:31:a9:c4:d0:b9:bf:83:7f:79:17:ea:36:f4:78:e3:
8c:e8:42:71:60:e8:31:59:44:76:64:67:aa:11:a9:97:53:98:
e5:88:e9:a4:7b:66:4d:95:aa:b9:24:76:61:7c:84:97:e8:c3:
f7:d9:9a:4e:ff:0d:6c:02:d4:77:5e:e6:6a:3c:0f:09:c3:c2:
78:03:1a:1e:0e:74:ed:de:da:ea:94:40:24:0b:03:f1:d0:b8:
a2:82:62:79:c9:f3:54:2d:f0:1b:a8:bc:c8:f3:51:21:70:7a:
66:d4:4f:3a:ba:50:70:50:cc:ac:a8:b4:64:78:8c:a3:e4:74:
c3:ec:9f:54:55:8f:fa:db:92:98:84:da:e6:a3:d8:6f:96:bf:
15:c9:4b:65:51:0f:b2:0a:e1:5a:ee:b5:72:32:59:94:ba:b9:
9b:11:f8:a7:7a:db:97:f1:79:f4:11:07:32:0f:36:d4:ab:ab:
e3:c4:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:07:40 2025 by rpki-client