Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3235322e302f32342d3234203d3e2035303635.roa
File: 3134332e32302e3235322e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: h4yUawssrMOyqVc6foN+fB7JK0Ek2JFcZK+1gSDABlU=
Subject key identifier: 29:3D:65:B4:B9:D3:76:4E:06:BE:94:1C:11:7A:EE:4C:38:8A:47:55
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 310D598867DCF739F4D1E8F444A50B55AB3F9EDD
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3235322e302f32342d3234203d3e2035303635.roa
Signing time: Tue 06 May 2025 06:35:31 +0000
ROA not before: Tue 06 May 2025 06:30:31 +0000
ROA not after: Tue 05 May 2026 06:35:31 +0000
asID: 5065
IP address blocks: 143.20.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 00:27:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0d:59:88:67:dc:f7:39:f4:d1:e8:f4:44:a5:0b:55:ab:3f:9e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 6 06:30:31 2025 GMT
Not After : May 5 06:35:31 2026 GMT
Subject: CN=293D65B4B9D3764E06BE941C117AEE4C388A4755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:06:e7:54:16:b5:b6:d6:50:bd:c5:2e:2f:
c0:64:7a:4c:d6:d3:33:ce:a0:8a:73:f5:34:56:41:
36:d1:19:1a:e3:cb:92:a9:55:95:a6:e9:ca:8f:5a:
ab:5c:79:7d:84:62:d8:d9:fc:eb:c2:cd:75:43:54:
f7:43:60:15:d4:38:a5:99:91:93:79:59:81:de:95:
ba:61:2c:2e:86:fe:bf:82:84:16:00:b6:33:42:73:
de:75:a2:c7:a5:9e:2f:a6:c5:7e:ee:5d:7e:25:41:
cb:19:ac:35:27:92:68:da:4d:0d:57:44:f5:35:68:
ef:56:21:48:25:7b:c1:4e:af:d2:d0:d5:ec:cc:55:
df:c2:75:d3:bf:d8:6d:ea:b7:ff:be:0d:43:b2:10:
df:7d:82:88:13:15:53:e5:9b:f3:bc:43:7e:46:66:
31:bf:26:43:8f:06:f6:1c:e0:f3:09:e0:11:37:a7:
10:a0:1b:7e:9c:49:90:ea:d9:b3:fc:e6:8f:40:9e:
07:5a:fe:30:29:58:04:09:f2:ef:7a:9d:f5:20:0c:
f7:84:91:a8:20:f3:57:61:3c:fc:9f:72:ed:f2:67:
33:6c:65:c0:ab:64:68:8e:b2:c7:17:29:b8:e0:fb:
13:62:5e:74:6a:82:54:2c:18:6b:e9:8f:d7:22:f5:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3D:65:B4:B9:D3:76:4E:06:BE:94:1C:11:7A:EE:4C:38:8A:47:55
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/3134332e32302e3235322e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.252.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7f:01:e4:88:16:b2:b0:28:d3:84:2b:60:90:3c:b0:f3:17:
ae:41:3d:54:a8:de:81:9a:5b:95:f6:c6:a4:16:7e:a5:dd:3a:
99:fc:32:a5:e5:09:de:7d:9d:bb:f7:40:6c:9f:ec:98:1b:20:
2e:d0:b2:a5:bf:3c:d9:0b:9b:5b:9d:f4:48:c1:6a:19:87:38:
37:04:76:84:af:e8:ce:16:f7:be:17:9b:6a:36:60:28:b0:fe:
c9:43:f0:7f:ea:e9:6a:42:5f:7d:94:1b:2b:20:48:bb:cc:eb:
bc:b1:de:6b:e2:8b:79:0e:a8:50:ea:bd:50:03:79:00:ab:a6:
3c:cb:4f:80:14:3d:a3:59:b7:28:13:73:17:33:ef:e7:61:28:
91:92:b3:be:a9:5f:a1:c3:d8:4a:4e:79:a3:95:39:51:51:b0:
4e:b3:ff:4e:e1:9e:56:87:bf:c8:cf:2d:08:bb:32:83:ff:43:
63:30:24:eb:0c:dc:f7:b2:63:68:d1:97:d0:a9:40:a8:a3:6d:
6e:83:49:7c:c3:bc:81:d8:75:ac:cb:75:98:e5:12:33:a6:4a:
86:8b:67:03:f0:a0:7a:fb:37:df:79:db:48:24:06:ec:af:7a:
63:2f:09:44:24:6f:98:7e:b8:a0:eb:48:15:72:8d:9d:e2:f4:
5a:d8:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:54:01 2025 by rpki-client