Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/323030313a316236303a3a2f32392d3239203d3e203331313033.roa
File: 323030313a316236303a3a2f32392d3239203d3e203331313033.roa (raw, json)
Hash identifier: 43AsOxL4a9I10GSthDJXGbWZWADf4GGnRt4Iz5iDl5w=
Subject key identifier: 7B:7E:E8:E0:A5:A8:62:EA:D5:80:BD:2E:52:CF:27:04:F3:49:80:12
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 626FFF9FB61DA6533C75DC842A3A1E3271B3B35D
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/323030313a316236303a3a2f32392d3239203d3e203331313033.roa
Signing time: Fri 02 May 2025 09:54:04 +0000
ROA not before: Fri 02 May 2025 09:49:04 +0000
ROA not after: Fri 01 May 2026 09:54:04 +0000
asID: 31103
IP address blocks: 2001:1b60::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 18:41:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6f:ff:9f:b6:1d:a6:53:3c:75:dc:84:2a:3a:1e:32:71:b3:b3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 2 09:49:04 2025 GMT
Not After : May 1 09:54:04 2026 GMT
Subject: CN=7B7EE8E0A5A862EAD580BD2E52CF2704F3498012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:69:fb:b0:6c:ba:7d:eb:b8:2d:b1:8b:64:
78:9e:13:f7:c3:58:bf:58:20:c0:4d:41:de:df:6e:
4b:bd:a7:1e:29:1f:23:1e:53:60:11:45:1f:b3:91:
93:74:23:fe:72:d3:42:ed:db:e3:8f:af:21:da:6d:
91:47:64:fe:e5:29:85:4c:00:57:90:7c:66:a5:34:
70:e1:be:f3:70:cc:1b:2f:1f:10:c0:fe:63:c1:0c:
c7:b0:53:44:74:b0:51:6c:ca:20:4f:40:10:39:f7:
b6:e8:b8:f8:51:2d:c3:3e:f9:bc:6a:9c:48:46:ae:
d3:ee:7b:d2:4a:33:80:d9:a1:ca:8c:64:c0:14:78:
48:f5:aa:53:19:73:8d:ab:37:a3:84:8a:57:61:44:
6d:79:ee:d3:5a:dc:0f:41:45:f2:e4:79:53:e8:83:
cd:7f:36:94:00:cb:26:ae:45:29:9f:e8:3e:a3:04:
22:da:0f:83:7f:b8:fd:46:43:b3:eb:84:7a:48:ce:
9d:68:50:58:9c:3f:3a:57:91:38:48:32:3d:fb:87:
ee:13:25:c3:c7:73:17:13:3a:68:9a:8a:fc:be:c8:
59:7a:36:19:95:c1:07:7f:1b:4a:21:78:dc:ae:6d:
08:8f:36:46:e5:b7:ce:b9:c9:2c:fa:c2:84:21:cb:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7E:E8:E0:A5:A8:62:EA:D5:80:BD:2E:52:CF:27:04:F3:49:80:12
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/323030313a316236303a3a2f32392d3239203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1b60::/29
Signature Algorithm: sha256WithRSAEncryption
42:21:22:cb:e2:56:76:d7:e6:77:7d:0d:ce:ec:ee:31:c6:72:
11:3f:93:67:38:81:f3:42:24:48:b6:be:6b:ee:44:20:e3:61:
8e:9f:11:e8:2e:b9:e6:7e:f7:15:c8:d3:61:3c:fb:07:99:42:
6d:59:b0:98:53:0e:b6:f7:16:e0:65:53:aa:4a:71:ae:23:53:
52:bc:c0:3d:6f:e1:5b:d7:9e:c2:38:7e:46:c6:41:01:9b:8d:
82:f9:4a:e8:44:3b:35:b2:f0:34:86:9d:39:e5:3d:00:0a:d1:
a9:3e:0d:8f:71:83:21:33:ab:f1:5e:4c:3f:ad:03:48:df:0f:
19:27:21:19:e7:0a:19:93:8b:e2:70:56:9a:39:e4:0b:b2:38:
b2:98:04:0a:98:f5:4e:e1:4f:c3:54:ed:cd:f4:be:e3:70:af:
2d:56:8c:57:76:0b:0f:a6:39:11:d4:bf:96:33:d0:ac:a9:8f:
47:70:c0:fd:f5:ab:90:11:13:67:6a:d6:84:47:22:ca:9c:82:
5b:c6:53:dc:ee:1a:f2:f0:b0:cf:51:47:9b:61:60:8b:b1:ef:
b6:81:70:6b:11:a6:a1:fc:2d:ea:19:74:d2:9b:52:b2:63:08:
84:70:a4:f5:77:34:1c:47:af:ab:e5:e4:3d:26:72:fc:e8:f6:
19:d7:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:50:52 2025 by rpki-client