Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233382e302f32342d3234203d3e20383334.roa
File: 3134332e32302e3233382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WjuB2Mk2lBe91BoMcZD4NBaRkhTRiq2/b0r94XWVm3Y=
Subject key identifier: 07:04:04:B4:6B:06:78:82:27:24:DD:E9:B8:52:8E:37:F6:A4:2A:20
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5C66BF617356CB7F5C7F1FD249380CF9D2E3125F
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233382e302f32342d3234203d3e20383334.roa
Signing time: Tue 06 May 2025 06:35:03 +0000
ROA not before: Tue 06 May 2025 06:30:03 +0000
ROA not after: Tue 05 May 2026 06:35:03 +0000
asID: 834
IP address blocks: 143.20.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:66:bf:61:73:56:cb:7f:5c:7f:1f:d2:49:38:0c:f9:d2:e3:12:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:03 2025 GMT
Not After : May 5 06:35:03 2026 GMT
Subject: CN=070404B46B0678822724DDE9B8528E37F6A42A20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:00:dd:cd:e1:91:3c:78:72:1f:34:29:a7:
78:b5:6d:06:a8:0b:98:d3:ba:65:a7:0c:ea:b3:5a:
5a:53:8f:e4:47:fa:d6:f3:1a:66:34:22:54:34:90:
e4:e8:05:fb:6e:e1:7f:2e:91:70:bf:55:47:26:f1:
a7:4e:00:50:6e:23:e0:f1:08:11:a7:d8:1d:a3:de:
2f:28:42:b5:1a:c3:9f:ab:62:b8:e8:fd:07:fa:7a:
bd:1f:a1:8c:e8:a6:ae:db:53:90:81:be:57:24:d2:
90:ca:f4:b2:03:e4:20:88:24:38:ab:d6:9b:6d:3e:
94:7b:44:63:04:aa:48:46:82:b7:ae:59:d9:81:90:
dd:c3:e2:c6:bb:33:97:d2:d4:cb:24:c0:1d:68:88:
ba:49:05:31:17:e3:63:81:db:3f:2d:15:29:a7:fe:
b1:52:58:16:5e:e1:05:02:fa:f7:97:7b:e9:0a:cc:
2d:34:5c:9f:70:aa:9d:db:c6:da:20:e4:e7:a1:24:
69:f8:85:f4:fa:5e:db:05:0f:4e:7c:32:c7:e8:a3:
3c:f6:78:47:b4:84:35:76:2f:60:9e:b1:db:85:15:
fd:e8:04:07:54:5d:7e:c9:c1:44:53:52:90:e3:09:
4a:51:0f:1d:10:20:36:6d:1f:c4:52:db:b3:70:9d:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:04:04:B4:6B:06:78:82:27:24:DD:E9:B8:52:8E:37:F6:A4:2A:20
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3233382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.238.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4c:f2:97:91:64:ce:f7:f9:eb:dd:8f:d7:47:99:21:bf:99:
dc:17:3a:f3:86:0a:a5:af:95:35:62:7e:a1:50:1b:2f:62:6e:
81:44:79:ed:e4:f4:c1:eb:f3:e0:d5:c4:83:69:0d:f8:ad:d5:
90:be:4b:20:a5:71:06:1d:1a:48:ad:69:26:1e:7b:c0:28:cd:
09:9f:23:c1:42:87:9b:6c:db:b3:c6:ae:95:4b:f3:9d:87:31:
23:fc:93:a7:9d:6d:54:73:7a:90:ac:37:07:ea:8e:ea:58:51:
c3:4c:88:f5:0c:47:ae:22:ad:80:93:e4:8a:ee:9f:77:e7:2c:
c9:3a:a3:72:a8:0b:39:df:38:42:20:5c:29:4f:c1:7c:42:aa:
49:9c:53:eb:bd:79:de:68:ba:c6:27:a1:8b:3e:6e:79:e0:6d:
00:35:4f:a4:34:88:19:84:9f:69:01:e6:9a:08:0b:80:6b:5a:
2d:79:f9:5f:78:20:a6:fa:2f:33:09:54:c5:eb:ec:4a:de:b8:
b0:fd:e2:4f:2b:de:71:f4:d7:6c:7b:74:04:56:97:d4:1f:70:
be:c6:1a:7a:ff:96:3c:01:86:5e:93:40:ff:a4:be:ed:25:19:
57:5a:a0:c0:f5:a8:eb:f2:9f:78:8c:79:c3:03:02:fa:bb:33:
a1:45:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:02:54 2025 by rpki-client