Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa
File: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=
Subject key identifier: F6:80:B8:DF:72:98:BB:33:D1:EA:E8:28:57:E2:EE:4F:47:14:48:6F
Certificate issuer: /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial: 26054B44E8BFA5DED62FD5795CD00E92F4053CEB
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa
Signing time: Tue 06 May 2025 08:45:05 +0000
ROA not before: Tue 06 May 2025 08:40:05 +0000
ROA not after: Tue 05 May 2026 08:45:05 +0000
asID: 212609
IP address blocks: 217.198.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:05:4b:44:e8:bf:a5:de:d6:2f:d5:79:5c:d0:0e:92:f4:05:3c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Validity
Not Before: May 6 08:40:05 2025 GMT
Not After : May 5 08:45:05 2026 GMT
Subject: CN=F680B8DF7298BB33D1EAE82857E2EE4F4714486F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:1a:7e:fd:27:ce:8a:90:b9:26:fc:5d:d0:
a3:fb:ab:92:a2:1b:c6:30:8d:bf:cf:32:3c:01:e7:
f9:47:1b:4c:d0:c2:43:9e:73:b2:e2:5d:18:2c:dd:
cc:41:51:3b:cd:8e:1c:3f:dc:b0:8c:ad:84:37:83:
01:c0:ab:e2:72:e8:b0:b5:a9:6c:13:ce:48:64:14:
f2:61:c3:bd:51:46:e4:b5:0d:4e:3d:a6:7d:c6:35:
e4:8f:31:94:46:09:4e:50:41:70:28:4d:5f:9f:dd:
50:df:17:ae:9f:21:06:86:a8:f0:3e:b0:ce:03:9c:
d5:f0:2b:e6:7a:d4:96:7f:1b:11:d5:a7:d5:aa:4a:
06:cd:07:63:9a:06:bb:83:30:7c:e6:51:6f:c2:cf:
cf:44:09:02:dc:e7:1b:45:68:ad:5a:e3:cf:ef:c7:
6d:41:68:cb:54:45:e5:e2:fb:7b:66:24:a8:57:ba:
d2:c2:0e:47:2b:74:df:b8:ab:01:f0:5c:a9:7d:62:
2e:e7:23:3e:33:f4:3b:21:30:0a:28:c5:e6:32:1c:
33:57:ab:82:07:de:fe:50:2d:70:6b:9f:99:e3:9e:
84:e9:11:a1:e6:c4:22:12:3a:5a:15:37:0d:bd:3b:
4a:22:49:c5:14:9e:48:b7:0e:2b:17:31:4b:b9:b3:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:80:B8:DF:72:98:BB:33:D1:EA:E8:28:57:E2:EE:4F:47:14:48:6F
X509v3 Authority Key Identifier:
keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.187.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:66:78:d7:96:f0:df:6b:67:fd:6a:59:19:07:35:d7:a5:a6:
62:50:fc:83:d6:5a:ff:77:bf:b3:e7:fb:a2:db:38:47:92:34:
fc:f4:50:9e:57:fd:6f:53:ec:4d:8a:5c:4c:0b:0c:ce:6a:14:
d6:cd:ce:d1:55:de:b4:8d:c9:85:de:7c:86:04:51:71:82:a4:
8f:ba:20:85:19:28:22:2c:5e:02:6e:3d:e3:a8:b9:ca:e6:30:
27:93:4d:87:7e:4e:d3:ea:7e:22:b5:0c:72:b1:d5:6a:9a:20:
34:ef:65:0f:aa:5e:67:c7:80:6b:9d:08:aa:0b:1e:0c:f1:dc:
7d:cb:f3:93:89:97:61:21:f1:94:ba:21:e9:99:36:1a:62:3e:
67:4f:65:26:f3:70:02:ff:9d:41:16:a0:b4:10:ce:e1:38:7d:
b5:fe:50:38:8a:8c:b2:dc:9e:f2:dd:d7:77:ee:d2:b7:df:f7:
ba:f2:8d:94:c1:5e:3b:54:fe:ce:e1:b8:71:52:d7:6a:fc:8f:
ca:37:50:14:c6:3a:63:e7:1d:c9:a2:8b:10:9f:5e:e8:1e:71:
a6:05:1b:40:d6:b8:8c:66:88:df:a2:a3:7e:ef:fd:86:d9:b4:
36:04:74:46:8b:10:2d:da:8d:62:c5:4b:28:91:fe:9c:93:b3:
f2:de:6a:7a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUJgVLROi/pd7WL9V5XNAOkvQFPOswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc5ZDAyYzYxODg2MWFkNDViYWY3OGNlMzkwMjNjYmNi
NDk0YTdiZjAeFw0yNTA1MDYwODQwMDVaFw0yNjA1MDUwODQ1MDVaMDMxMTAvBgNV
BAMTKEY2ODBCOERGNzI5OEJCMzNEMUVBRTgyODU3RTJFRTRGNDcxNDQ4NkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeoRp+/SfOipC5Jvxd0KP7q5Ki
G8Ywjb/PMjwB5/lHG0zQwkOec7LiXRgs3cxBUTvNjhw/3LCMrYQ3gwHAq+Jy6LC1
qWwTzkhkFPJhw71RRuS1DU49pn3GNeSPMZRGCU5QQXAoTV+f3VDfF66fIQaGqPA+
sM4DnNXwK+Z61JZ/GxHVp9WqSgbNB2OaBruDMHzmUW/Cz89ECQLc5xtFaK1a48/v
x21BaMtUReXi+3tmJKhXutLCDkcrdN+4qwHwXKl9Yi7nIz4z9DshMAooxeYyHDNX
q4IH3v5QLXBrn5njnoTpEaHmxCISOloVNw29O0oiScUUnki3DisXMUu5s1tVAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU9oC433KYuzPR6ugoV+LuT0cUSG8wHwYDVR0j
BBgwFoAUx50CxhiGGtRbr3jOOQI8vLSUp78wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEtYTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0
ZjI4LzAvQzc5RDAyQzYxODg2MUFENDVCQUY3OENFMzkwMjNDQkNCNDk0QTdCRi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3g1MEN4aGlHR3RSYnIzak9PUUk4dkxT
VXA3OC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDkwYTkzNWEt
YTc0ZC00Yjk4LTk0MzAtYmM3YWU1YzI0ZjI4LzAvMzIzMTM3MmUzMTM5MzgyZTMx
MzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjM2MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANnGuzANBgkqhkiG9w0BAQsFAAOCAQEA2GZ415bw32tn/WpZGQc116WmYlD8
g9Za/3e/s+f7ots4R5I0/PRQnlf9b1PsTYpcTAsMzmoU1s3O0VXetI3Jhd58hgRR
cYKkj7oghRkoIixeAm4946i5yuYwJ5NNh35O0+p+IrUMcrHVapogNO9lD6peZ8eA
a50IqgseDPHcfcvzk4mXYSHxlLoh6Zk2GmI+Z09lJvNwAv+dQRagtBDO4Th9tf5Q
OIqMstye8t3Xd+7St9/3uvKNlMFeO1T+zuG4cVLXavyPyjdQFMY6Y+cdyaKLEJ9e
6B5xpgUbQNa4jGaI36Kjfu/9htm0NgR0RosQLdqNYsVLKJH+nJOz8t5qeg==
-----END CERTIFICATE-----
Generated at Thu May 8 04:06:04 2025 by rpki-client