Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e2039333034.roa
File: 37382e33312e3234382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: FGJkL6fQfpvRngTEqYrylam5lEHv8YwV5wQfAeBc6gU=
Subject key identifier: 83:07:75:FB:1E:F2:5F:3C:84:63:CE:4D:A1:33:C3:20:B4:C6:EC:53
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 377925A11C63663AF64CD5C085C04C2EFFE3AB42
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e2039333034.roa
Signing time: Fri 20 Jun 2025 10:28:15 +0000
ROA not before: Fri 20 Jun 2025 10:23:15 +0000
ROA not after: Fri 19 Jun 2026 10:28:15 +0000
asID: 9304
IP address blocks: 78.31.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:79:25:a1:1c:63:66:3a:f6:4c:d5:c0:85:c0:4c:2e:ff:e3:ab:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Jun 20 10:23:15 2025 GMT
Not After : Jun 19 10:28:15 2026 GMT
Subject: CN=830775FB1EF25F3C8463CE4DA133C320B4C6EC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:0e:8c:99:74:8a:59:17:9c:99:5f:47:d6:
b8:1a:e2:82:b1:52:99:49:ff:70:ed:73:5f:8f:ca:
73:df:7c:8c:92:9a:b9:41:c8:ac:66:a9:3d:fb:d1:
df:8b:da:d2:06:e9:3d:8b:e3:94:b0:4e:f8:e7:40:
ce:5f:1d:ff:c6:cb:7e:aa:d8:4d:2e:c6:93:3a:56:
f6:8a:c8:5f:d3:f8:55:5f:bd:97:16:03:6d:ae:b6:
87:25:56:1b:d2:0b:ad:24:17:e0:fe:4c:e2:1e:e4:
b7:2f:f3:e6:83:e9:b5:87:c1:72:44:8a:fc:76:4f:
3a:57:69:6f:ff:3a:35:8b:02:cc:11:66:3d:38:4e:
a1:73:38:22:db:54:df:7f:b3:fd:47:7e:4e:c4:62:
70:49:41:39:53:5c:23:aa:d1:b1:24:d0:ac:8e:85:
84:3b:ea:5a:18:42:9d:c2:aa:c8:0e:a1:62:87:32:
5a:dc:79:d2:1d:6a:e2:de:7a:93:aa:4a:b1:6d:2b:
c5:70:0d:e4:14:8f:7b:08:3d:6e:cd:05:55:f3:de:
e2:90:ab:cd:86:c9:f6:19:9e:79:d1:33:87:fd:49:
e1:cc:e7:ff:51:53:46:a6:8f:04:55:fc:6c:f3:ac:
79:0c:70:c8:2b:ec:5e:a9:5d:be:67:5c:1f:b2:b4:
3f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:07:75:FB:1E:F2:5F:3C:84:63:CE:4D:A1:33:C3:20:B4:C6:EC:53
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234382e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.248.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:97:39:ea:e6:46:21:63:f6:94:43:9f:7f:c0:9b:20:9b:a3:
bd:c5:8a:c7:8f:77:b8:78:18:a1:2a:b1:bb:c8:d2:1d:b2:09:
d1:aa:91:7b:52:56:42:c2:69:72:3a:f4:61:20:04:49:b1:38:
69:2b:31:e4:2a:89:b8:d6:0b:dc:7d:2f:56:17:c7:65:76:b6:
ec:52:de:9f:34:24:1f:8f:1d:4d:f5:e5:7c:39:f9:b7:3e:88:
d6:e2:9f:c1:f7:f3:a6:d9:72:b9:4f:99:d0:61:ac:72:70:b0:
0d:9b:e9:21:db:08:bf:65:c4:62:3e:4e:6d:c5:89:03:68:b1:
1e:6f:d8:89:12:1e:19:9c:48:84:a6:15:dc:5f:2e:a5:72:c1:
27:56:91:87:5e:60:40:1c:fa:6e:05:8f:3d:08:11:01:2a:41:
f2:4a:f8:ff:22:93:89:26:31:41:ec:5a:72:54:4e:61:14:a3:
fa:43:bc:a3:a0:9e:ba:d6:4c:07:6a:82:8b:35:13:83:ac:53:
2a:dd:6d:ef:28:8a:1d:fa:4b:6a:f2:8d:c4:3d:3b:b1:0a:f1:
08:fe:66:a5:c8:a9:af:e4:91:ea:7a:e7:5f:67:9d:71:a2:33:
5e:b2:5f:10:b8:07:bb:f2:05:cd:d0:3c:8d:1d:12:09:94:23:
43:e0:bc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:05 2025 by rpki-client