Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa
File: 3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa (raw, json)
Hash identifier: gr03GWP2J+mWH8BIdz3eIQefsBxaCm+3XV9JFI2iBPA=
Subject key identifier: A3:05:A8:2C:43:A4:AE:34:17:08:4B:09:D3:C2:FB:70:6D:B2:2E:4E
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 34CA1FF8CE9FBAD8DADC15E4A28234A16704A024
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa
Signing time: Fri 02 May 2025 13:54:05 +0000
ROA not before: Fri 02 May 2025 13:49:05 +0000
ROA not after: Fri 01 May 2026 13:54:05 +0000
asID: 31103
IP address blocks: 217.114.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ca:1f:f8:ce:9f:ba:d8:da:dc:15:e4:a2:82:34:a1:67:04:a0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 2 13:49:05 2025 GMT
Not After : May 1 13:54:05 2026 GMT
Subject: CN=A305A82C43A4AE3417084B09D3C2FB706DB22E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:de:fd:90:5b:f2:ce:b9:5b:2b:88:0a:67:
8a:13:65:ac:b1:d3:f9:5d:a0:1c:69:bd:16:f8:3a:
82:a9:19:0e:e9:c0:0a:f6:13:57:79:ba:65:62:85:
14:c8:e8:24:d6:15:4c:f7:8f:b4:02:3e:27:63:b3:
f9:34:d3:f0:3f:86:ff:ee:23:61:04:12:20:99:be:
72:df:93:20:07:b8:24:10:8d:1d:71:f4:44:1c:6c:
7f:a0:8b:30:f9:ab:9b:26:ba:7f:c4:22:ed:c6:b1:
aa:52:82:65:5b:e1:52:d5:68:f8:d2:12:ce:ea:80:
ef:dc:f0:5d:12:a3:20:1d:a8:64:8c:02:30:b3:08:
dc:c6:48:3a:0c:a0:b6:57:4a:41:dd:74:0c:72:02:
70:07:f6:08:ba:09:24:d5:9c:a0:1b:21:07:3c:ce:
c9:e5:6d:fa:2a:56:5f:a1:1a:6d:8b:ee:45:03:c2:
d2:07:8c:4b:7e:52:16:26:f1:e1:b2:b4:d1:fb:51:
5f:1f:94:f4:1b:12:d8:e5:4a:3d:54:cf:82:5c:c7:
bb:2b:e1:0b:dd:17:7e:51:d7:97:b9:08:45:0b:f1:
ef:7d:6d:d0:d5:5d:6e:6f:47:2a:d1:af:2b:bf:7e:
97:38:83:b3:b6:3a:0b:e3:9b:1c:f0:87:32:1d:02:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:05:A8:2C:43:A4:AE:34:17:08:4B:09:D3:C2:FB:70:6D:B2:2E:4E
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/3231372e3131342e3230382e302f32302d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.208.0/20
Signature Algorithm: sha256WithRSAEncryption
34:1d:04:91:a8:c3:88:9b:8f:2b:71:87:c5:25:c1:96:8b:fd:
1a:a1:42:22:1c:cd:1c:e2:e5:e0:a9:6d:c6:77:2f:26:a9:54:
fc:c8:1c:af:59:66:61:48:df:59:50:ae:3d:02:52:dc:81:d7:
7b:f3:9a:d0:7b:e9:e6:d9:3c:95:46:e8:5e:2c:f3:78:22:cc:
8a:7a:ec:ab:75:5b:80:0f:76:9d:65:61:57:1d:f5:f5:98:4a:
b4:c3:b1:3d:5a:36:90:4e:0a:b0:92:71:77:5c:ca:5d:7d:ba:
7b:01:5b:72:86:73:4c:cb:8a:95:df:86:d2:a6:70:c3:91:c1:
aa:f8:4a:fd:70:90:7a:94:32:ba:4a:26:f1:00:85:e9:2c:e1:
a6:20:d4:74:41:1f:ba:cd:89:07:77:6d:c9:a0:ac:b3:8b:80:
15:95:c9:62:42:4c:a4:ce:e7:46:fb:35:a0:4c:af:5f:fd:61:
6b:63:8f:fa:d8:37:66:d8:08:9a:05:b3:ca:cb:e2:7c:5b:02:
54:93:1e:60:28:8f:eb:de:4c:63:b4:f2:dc:d3:b8:75:61:ed:
e4:97:77:05:2a:a5:9f:fc:3f:b1:1d:74:50:df:96:d6:5e:65:
ed:de:6c:5f:f7:ea:5c:13:09:a8:56:04:c9:47:fb:7d:c6:72:
41:51:fb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:36:37 2025 by rpki-client