Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3234302e302f32342d3234203d3e2035303635.roa
File: 3134332e32302e3234302e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: wrJXy1Qj6Kx3hLYOPghuTX516l838Hh99FLg7VIFLgk=
Subject key identifier: 81:61:82:85:12:BB:26:D4:24:B3:36:4D:B7:A1:16:99:91:2B:A9:83
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 5F78600EEEFEFAFE4D2AEE16AEAA135757125105
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3234302e302f32342d3234203d3e2035303635.roa
Signing time: Tue 06 May 2025 06:35:12 +0000
ROA not before: Tue 06 May 2025 06:30:12 +0000
ROA not after: Tue 05 May 2026 06:35:12 +0000
asID: 5065
IP address blocks: 143.20.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:78:60:0e:ee:fe:fa:fe:4d:2a:ee:16:ae:aa:13:57:57:12:51:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:12 2025 GMT
Not After : May 5 06:35:12 2026 GMT
Subject: CN=8161828512BB26D424B3364DB7A11699912BA983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:8a:88:03:50:24:3f:d5:ec:86:f3:99:72:
4a:18:18:5d:61:00:6e:2e:09:73:cf:c1:60:87:6f:
41:34:68:31:8c:23:e3:61:73:ce:7b:04:4a:7c:bd:
72:bb:bd:78:d4:94:a8:60:e4:e6:c9:d6:0e:bd:2b:
8e:17:43:91:63:88:65:41:e6:cb:87:09:49:6c:22:
c4:bf:a4:66:dc:5e:08:69:68:6a:db:7e:5f:75:17:
d6:cc:39:c1:47:0b:fe:01:f2:90:54:3e:c1:85:b0:
bd:b2:d1:1b:e7:46:11:47:6e:a4:8b:33:aa:1c:80:
cd:da:8d:89:7e:87:e5:81:11:e4:97:b4:48:1b:9a:
23:19:69:03:db:ae:c4:a3:ff:45:60:e7:af:91:80:
19:a6:ca:ff:70:80:81:d9:55:1d:63:ea:e1:f9:b2:
2b:55:72:26:5b:5e:e0:1a:2b:5b:82:32:e6:f4:b6:
9f:27:ad:4f:32:42:14:f5:3e:26:aa:d6:41:8a:88:
8a:7c:f1:dd:ac:9c:05:9b:8d:33:1c:ce:f2:61:58:
e1:4a:16:c7:01:ef:eb:b2:c3:d5:b3:2f:e4:ce:c5:
83:17:ac:f7:86:0e:d7:8f:53:b0:f2:98:13:cc:0b:
27:cd:60:a1:a0:ad:a5:ea:44:08:df:0f:1b:f3:0a:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:82:85:12:BB:26:D4:24:B3:36:4D:B7:A1:16:99:91:2B:A9:83
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3234302e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.240.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8b:2a:40:bd:95:86:b1:a8:8e:5b:df:ad:a1:f5:f5:b0:49:
d2:63:71:e4:d2:4a:d5:cf:64:ce:58:a5:36:10:7c:b3:88:50:
c7:3c:f0:f4:b7:ad:6e:2c:bc:3a:68:cb:7c:bf:15:6f:c4:5b:
52:98:57:35:a1:39:67:87:17:f1:e3:1b:55:2a:2d:5e:7b:83:
92:d9:68:30:fe:12:87:d0:2c:ba:c4:e3:28:d4:f4:9a:4d:fa:
79:c6:69:4a:7c:81:d9:5c:30:8d:a5:de:9d:e2:89:53:16:52:
e7:18:e7:5a:06:6b:8b:9e:3a:5a:c1:80:e0:b4:d9:cb:b6:85:
86:04:1c:d0:f1:00:53:7c:e9:05:22:24:af:0e:ae:36:c5:f3:
a6:66:90:85:80:a8:62:6e:e9:00:04:e2:35:68:dc:a2:14:4a:
b1:84:ad:3e:aa:a1:6a:c1:e0:a7:88:ee:af:e8:a6:98:c2:ef:
0f:92:0f:61:45:e7:09:46:c4:f3:b7:37:18:91:63:97:a2:0c:
32:d0:9d:87:12:2a:1a:10:dc:f0:34:a8:d9:12:31:9b:88:eb:
a6:aa:cc:d2:d2:98:29:19:12:5b:4d:af:e6:9c:49:04:29:f8:
d7:10:8b:e8:57:fd:67:7d:12:eb:72:fe:d6:5d:69:6a:4c:a7:
ba:d6:2a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:09:32 2025 by rpki-client