Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3234342e302f32342d3234203d3e2035303635.roa
File: 3134332e32302e3234342e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: Cn07VU00CF9snVcBZpcBJ3kIfp01i3CbYvVKH94XAWc=
Subject key identifier: 33:E4:DC:99:E6:5A:40:CE:EC:1E:AA:F9:45:7F:31:65:29:45:78:4A
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 2CC1C6125C57CD599CFE332862F56EDDEE91626A
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3234342e302f32342d3234203d3e2035303635.roa
Signing time: Tue 06 May 2025 06:35:20 +0000
ROA not before: Tue 06 May 2025 06:30:20 +0000
ROA not after: Tue 05 May 2026 06:35:20 +0000
asID: 5065
IP address blocks: 143.20.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c1:c6:12:5c:57:cd:59:9c:fe:33:28:62:f5:6e:dd:ee:91:62:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:20 2025 GMT
Not After : May 5 06:35:20 2026 GMT
Subject: CN=33E4DC99E65A40CEEC1EAAF9457F31652945784A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:34:c6:94:ec:a6:e8:90:80:66:39:17:96:
f1:0c:00:72:1e:ba:db:6a:b6:10:c4:f4:73:d2:14:
58:b0:b7:5e:d2:69:8c:43:f2:b0:3c:72:f5:ef:79:
51:80:36:10:09:35:2c:02:ce:f8:31:57:59:68:85:
1a:56:62:37:1b:d6:59:3a:c8:e5:f1:b0:c0:ff:8e:
20:23:2d:ea:4a:7c:50:62:d5:b7:9f:e3:eb:e4:9f:
23:fb:02:28:00:35:34:26:ac:ae:37:08:ec:97:f1:
a0:dd:3b:7c:60:ca:7f:c7:25:88:03:4c:40:75:d4:
c7:45:49:d4:61:58:c0:1b:42:28:5c:5d:af:63:f6:
00:c8:d4:c9:b4:88:e1:c8:11:24:b9:b5:3a:85:b0:
8a:4a:33:4a:cc:ef:ce:ba:f6:6b:82:df:3f:12:de:
1d:04:ec:01:bb:73:bd:70:9e:22:81:98:ff:2a:98:
19:a7:37:b3:13:0e:11:2e:4a:66:dd:12:52:73:2a:
f6:84:e0:77:44:96:5a:42:e6:8e:4f:d2:68:bc:04:
16:69:fd:07:c9:e9:db:c2:21:39:dc:e2:c4:22:bd:
0a:a6:db:56:9b:8d:86:a9:e4:9c:d6:37:91:06:1f:
06:d0:94:5d:63:ca:5a:9e:2a:d7:47:0f:12:ae:46:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:DC:99:E6:5A:40:CE:EC:1E:AA:F9:45:7F:31:65:29:45:78:4A
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3234342e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.244.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8f:35:2c:d7:c6:ae:cd:b9:5f:73:f4:94:9d:25:8a:9a:aa:
52:f2:9c:75:a5:2c:35:3b:56:17:8b:1d:63:68:b6:c1:1d:70:
d5:37:9c:7c:87:8f:26:da:41:5c:b0:57:7b:36:8a:09:dd:dc:
6e:d3:2a:24:2e:14:eb:80:d4:1f:7b:dc:af:16:3e:86:35:06:
68:d0:d5:25:c0:58:88:c9:8f:a8:15:57:e2:55:f0:9e:bc:4f:
d4:ff:72:59:d7:22:24:e3:6d:7e:bf:bb:b5:71:b4:df:4b:ec:
6d:99:99:f4:b4:49:c3:ee:20:b1:69:ed:2d:37:bf:5c:7d:66:
5d:4b:20:63:49:43:44:46:bd:d9:3e:d6:b8:95:d7:f5:f5:a4:
8e:98:80:2e:67:c8:a7:fd:4a:3c:14:14:cc:d6:8c:5c:03:0f:
ce:d4:c2:44:69:8a:50:16:67:d6:e7:d9:58:50:8f:cd:2e:57:
d7:9a:c3:2b:d4:4a:a1:39:75:42:c5:d7:d2:d7:51:e1:b0:b7:
f5:8c:6a:11:e4:49:d0:18:58:f1:4e:ba:82:7a:ce:8d:4b:35:
24:62:79:fc:2d:32:5e:a4:e7:a1:4e:9e:6a:34:c2:64:8a:e4:
55:51:f1:93:e8:4c:c0:0b:75:35:70:5e:db:04:46:70:c6:bc:
cc:08:f9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:21:19 2025 by rpki-client