Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e203539343332.roa
File: 3134362e31392e32322e302f32342d3234203d3e203539343332.roa (raw, json)
Hash identifier: 3vsKjXcUWEaG7gCbLLzg3h90q6bOIIatOxSfQAiOha4=
Subject key identifier: B3:CC:29:63:CC:EC:DF:81:5C:63:22:EB:53:F7:48:BB:04:1C:5B:5B
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 227BA7AFD76D14B4CBD2B7A3197DBF964287B66D
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e203539343332.roa
Signing time: Mon 21 Apr 2025 06:27:34 +0000
ROA not before: Mon 21 Apr 2025 06:22:34 +0000
ROA not after: Mon 20 Apr 2026 06:27:34 +0000
asID: 59432
IP address blocks: 146.19.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:7b:a7:af:d7:6d:14:b4:cb:d2:b7:a3:19:7d:bf:96:42:87:b6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 21 06:22:34 2025 GMT
Not After : Apr 20 06:27:34 2026 GMT
Subject: CN=B3CC2963CCECDF815C6322EB53F748BB041C5B5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:12:78:47:2c:80:42:1d:85:c5:c2:7d:d0:
01:72:b2:e2:f6:5f:63:7f:7f:6c:0b:26:2d:08:42:
7b:d1:19:33:82:91:5c:53:0b:34:17:fc:57:f9:00:
f6:9b:39:20:cf:ae:14:d2:fa:ce:5d:a5:cb:ad:a3:
f8:eb:ab:78:b8:f2:32:69:4b:2d:d3:ed:26:8f:e2:
a9:09:d9:44:03:24:73:60:55:e6:db:d4:04:41:43:
3e:51:69:5a:b3:01:c7:43:12:d2:66:db:5e:14:7a:
d1:a2:d5:2f:65:9d:d5:d4:62:ba:85:4b:a7:08:79:
c8:2c:1e:a3:74:14:83:3c:bb:28:86:5e:21:ec:b1:
db:34:59:a7:12:66:8d:6f:55:07:65:89:36:3a:9a:
b0:ae:28:d1:45:53:29:28:e2:9f:52:1f:29:0d:2d:
2f:1b:d8:c6:aa:f0:47:b3:b8:30:6d:14:44:62:d2:
f1:d6:5d:70:a1:8c:85:81:2c:ea:4c:89:24:2d:8c:
f5:0c:77:37:8c:b2:e0:0d:dd:54:7e:ce:31:f6:05:
37:9e:d7:9c:92:a6:99:1c:31:ce:07:36:f5:32:ac:
bf:b5:45:59:d5:69:ca:77:7b:92:d6:20:35:c0:6d:
e9:11:ea:c3:fc:f4:d5:1c:89:2e:90:5f:30:f9:78:
44:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CC:29:63:CC:EC:DF:81:5C:63:22:EB:53:F7:48:BB:04:1C:5B:5B
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e32322e302f32342d3234203d3e203539343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.22.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fe:1b:7b:12:ab:56:b7:a4:55:de:e0:cd:29:d0:df:4c:c5:
c1:b2:19:c3:e2:c5:ae:1c:6c:40:c2:f2:91:ae:1d:76:72:64:
bb:68:88:20:5e:74:59:eb:c6:a2:b8:94:ce:c0:50:b5:7d:67:
9c:52:6e:b9:6e:92:14:c9:95:a6:2d:e6:ab:3d:8b:37:c0:3c:
a7:25:8a:66:cc:eb:68:a0:e8:0d:04:3f:94:1b:21:de:48:e9:
58:d5:c4:25:7a:74:32:60:99:1d:56:2d:15:39:9a:4f:6b:a6:
3b:86:27:7f:2d:ac:b2:6a:ee:98:42:59:0d:0f:5f:d9:9a:96:
d8:ba:93:8b:20:90:8a:d6:77:94:f8:93:83:d2:30:2e:89:e8:
a0:7c:0e:92:c6:2d:b9:34:9f:8c:f6:c3:ad:32:7e:50:26:bb:
e4:77:91:b4:d1:91:d2:cc:b2:fb:a0:ba:1d:69:d4:62:49:76:
0a:02:bb:40:67:85:0d:a3:2c:13:f9:a3:c5:6b:2d:55:cf:99:
00:3b:6b:82:c4:96:98:38:fa:ab:37:49:e6:85:7b:60:f1:7e:
60:4f:19:63:58:6d:57:c2:32:7c:3d:4d:8d:59:22:5f:03:2e:
c3:de:d1:b7:01:53:c8:c9:5d:59:1c:fd:10:88:99:be:6e:87:
f8:6a:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:17:30 2025 by rpki-client