Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233302e302f32332d3233203d3e2036303739.roa
File: 3134332e32302e3233302e302f32332d3233203d3e2036303739.roa (raw, json)
Hash identifier: xvc/vWfzjO3NWVVuyf5yJ1qhwMkQai3cqtI9o7v0+pQ=
Subject key identifier: F3:73:2C:2E:3F:2E:2B:A9:1D:A7:86:1A:F4:A2:C1:C7:B3:8F:0A:9F
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 3A5E0F8CD5BAA1DD627D4B05CD0F297A078EB056
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233302e302f32332d3233203d3e2036303739.roa
Signing time: Tue 06 May 2025 06:37:13 +0000
ROA not before: Tue 06 May 2025 06:32:13 +0000
ROA not after: Tue 05 May 2026 06:37:13 +0000
asID: 6079
IP address blocks: 143.20.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5e:0f:8c:d5:ba:a1:dd:62:7d:4b:05:cd:0f:29:7a:07:8e:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:32:13 2025 GMT
Not After : May 5 06:37:13 2026 GMT
Subject: CN=F3732C2E3F2E2BA91DA7861AF4A2C1C7B38F0A9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:ce:ed:b8:95:21:d0:de:b1:67:77:d3:fd:
25:19:f5:d7:a5:62:3b:b0:ac:0d:78:64:a3:08:b6:
7c:cf:80:07:b0:28:32:a4:dd:ff:4e:4a:30:ce:80:
2d:f9:01:cd:a4:9f:7a:3d:c9:0e:d2:8a:78:68:f5:
f2:ec:ad:cf:8f:67:b2:6d:e9:91:28:fe:b2:02:fb:
b4:fc:2e:03:e8:09:c0:22:07:fb:7b:1e:a0:06:1f:
cb:51:b4:05:ed:b5:9f:2f:e2:64:9b:c7:7e:4f:28:
3a:aa:88:7d:d3:db:c0:c6:a3:72:41:a3:93:7b:e6:
6b:d0:06:97:eb:24:4a:a4:c9:5c:57:72:48:e0:86:
98:5e:0e:85:1b:c1:63:67:11:3f:92:de:e5:c5:64:
e7:43:99:46:07:33:1d:9f:c2:37:02:d0:e9:d1:fe:
3d:4d:a3:3d:88:42:d1:51:6b:28:a8:6c:91:b1:90:
f9:76:f8:18:f9:47:f2:34:22:59:80:0c:74:77:f2:
a8:96:5b:5f:37:bc:d3:ba:2a:6d:9f:0d:69:df:fd:
04:04:68:b7:e5:76:03:32:d8:99:fd:23:f2:93:d1:
8b:b4:ca:ff:42:aa:98:58:24:07:84:1d:48:2c:b7:
54:65:7f:c8:83:3f:43:d0:3f:f8:8a:f7:b9:eb:f4:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:2C:2E:3F:2E:2B:A9:1D:A7:86:1A:F4:A2:C1:C7:B3:8F:0A:9F
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233302e302f32332d3233203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:cf:0f:67:3d:3e:6a:6f:f6:61:65:82:7e:92:ec:73:59:c7:
9e:9e:1d:bc:d5:2b:91:06:55:20:d8:b4:8b:5a:f7:a8:3d:2e:
71:d1:5b:91:23:fd:47:a7:98:61:43:ff:e1:be:63:a1:bc:ed:
1c:26:95:e1:e9:23:2b:f4:4d:2b:cc:b4:c5:05:01:7a:00:b1:
44:ce:c9:cd:23:c7:d1:da:e5:ea:1b:81:aa:b7:4a:4b:51:69:
b1:31:8e:d8:20:78:46:de:1b:38:c0:28:9b:24:66:6d:ba:b7:
b3:ee:4d:de:97:42:52:0a:ea:bf:e2:ba:22:ce:c2:c3:3d:7d:
09:c1:db:96:d0:07:7e:ce:00:45:ab:da:09:ca:9d:8c:ac:61:
39:5a:08:6f:e9:cc:5b:a3:24:9a:d4:25:f5:ca:bf:73:74:1c:
8b:23:1d:5d:04:a5:e2:fe:0c:cd:90:12:3a:a1:32:e3:1d:eb:
80:69:5d:18:f8:da:ad:18:32:f4:01:0e:ef:b8:f2:50:0a:c2:
57:01:32:48:b9:03:8d:09:d5:66:d6:f4:02:23:e0:b1:d1:93:
40:7a:d7:46:da:ac:05:ba:5c:9e:90:b9:cb:7b:e1:8f:33:c3:
87:74:8c:ac:19:df:df:dd:a0:39:7f:81:bb:b3:bd:40:88:dd:
df:c4:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:54:55 2025 by rpki-client