Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130342e302f32332d3332203d3e203531313637.roa
File: 39312e3230352e3130342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: KP4iRb2Cr0M+tkKtq/kJ9EV6UBSQNIsgbSUF8mVWfJw=
Subject key identifier: 97:CF:47:05:EF:AB:19:B2:0E:36:4D:28:CA:71:65:0D:7D:EF:8F:3D
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4344ECDDA0DC640C5A02A505944D70751E204D43
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130342e302f32332d3332203d3e203531313637.roa
Signing time: Thu 01 May 2025 20:46:11 +0000
ROA not before: Thu 01 May 2025 20:41:11 +0000
ROA not after: Thu 30 Apr 2026 20:46:11 +0000
asID: 51167
IP address blocks: 91.205.104.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 08:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:44:ec:dd:a0:dc:64:0c:5a:02:a5:05:94:4d:70:75:1e:20:4d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 1 20:41:11 2025 GMT
Not After : Apr 30 20:46:11 2026 GMT
Subject: CN=97CF4705EFAB19B20E364D28CA71650D7DEF8F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:76:ba:24:7a:9e:4c:d4:03:ea:c2:78:69:
a4:21:0f:6c:4f:b4:b2:c0:a0:83:6f:00:b9:b6:1b:
04:72:1d:e7:e8:94:ba:a5:0d:46:84:99:3d:29:1e:
ff:7a:a0:85:ae:a9:cb:96:96:a6:06:8b:13:81:89:
06:f1:3e:6a:3b:18:09:80:84:9e:fe:79:4f:6f:3e:
ed:87:21:44:80:3d:ca:d1:21:1e:d5:d2:6f:69:54:
a4:21:f8:bc:d0:54:14:bb:05:93:b6:dc:e6:97:bc:
3f:ea:8f:9c:10:0c:a0:f2:86:8d:74:8f:91:17:1b:
c8:cc:a3:68:e9:61:fe:cf:fb:98:72:00:7a:a6:8f:
cf:d8:f6:e9:01:ad:84:87:3d:eb:32:d6:27:73:94:
24:5c:4d:d0:ee:8a:3e:1c:0c:05:d2:35:2f:fc:09:
40:88:92:c4:94:8c:ff:98:50:f6:9e:b7:34:f6:88:
a0:16:c0:ea:e3:05:bf:7a:a3:96:3f:56:95:27:6a:
a4:a5:3f:d3:c5:57:73:c7:7e:fa:74:25:13:e1:e9:
52:b7:8c:9e:05:1e:c8:2c:a1:04:67:6a:fb:00:3f:
2f:5a:8f:e5:c9:51:54:45:6d:d8:ce:4c:a5:80:5f:
3e:29:23:67:b2:27:a0:f8:3e:17:ef:07:89:02:be:
42:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:47:05:EF:AB:19:B2:0E:36:4D:28:CA:71:65:0D:7D:EF:8F:3D
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39312e3230352e3130342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.104.0/23
Signature Algorithm: sha256WithRSAEncryption
76:b0:d8:03:33:c8:6c:6f:3c:f9:9c:2a:b7:ee:c9:7e:2f:b3:
da:6f:4d:d1:c3:ab:b2:2f:09:f1:33:5a:1e:0d:34:1e:eb:0c:
ff:5f:dc:3d:0f:a5:ed:92:18:7f:30:f8:14:bd:f5:74:db:e1:
99:29:80:af:8b:77:3e:2f:4f:b2:87:e6:f9:38:24:a6:a6:a3:
05:d5:28:b2:3d:00:b9:44:d3:79:67:86:21:34:74:e6:34:18:
d9:29:2b:13:47:d9:6f:6f:8b:83:d2:fa:73:5e:18:fe:ec:8f:
ad:f3:3f:0c:e3:2e:c8:da:c0:75:ea:d8:9f:38:11:1a:f0:28:
d5:5e:ac:46:f7:ac:8c:60:54:f5:8c:99:a4:4e:08:50:6a:2b:
f6:18:af:b6:df:68:50:fb:c1:87:0f:96:83:71:b1:eb:82:37:
d1:56:9d:dd:25:9e:43:1f:f1:8c:16:45:86:d4:4e:ba:27:94:
ac:f0:56:20:fc:2a:54:4b:4a:7e:b7:17:0d:27:f8:35:64:4c:
08:63:69:00:3f:7a:d8:86:5b:c1:07:cf:0c:f8:4b:e1:fa:32:
26:62:fc:8b:1a:a9:dc:73:7b:7e:3a:af:17:7a:66:70:d9:6e:
67:f9:4b:0c:2c:c3:a3:5c:1a:85:4d:63:a1:67:d5:e3:42:73:
75:88:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:30:23 2025 by rpki-client