Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa
File: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (raw, json)
Hash identifier: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=
Subject key identifier: DA:BB:F2:1B:AC:B4:71:E9:BE:4F:CE:58:6E:A5:66:26:AD:6A:1E:3A
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 1042AE6F33F6523FC4091E48CF0B3AB35FD17E95
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa
Signing time: Fri 09 May 2025 09:37:58 +0000
ROA not before: Fri 09 May 2025 09:32:58 +0000
ROA not after: Fri 08 May 2026 09:37:58 +0000
asID: 13194
IP address blocks: 185.149.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:42:ae:6f:33:f6:52:3f:c4:09:1e:48:cf:0b:3a:b3:5f:d1:7e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: May 9 09:32:58 2025 GMT
Not After : May 8 09:37:58 2026 GMT
Subject: CN=DABBF21BACB471E9BE4FCE586EA56626AD6A1E3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:63:0f:21:c0:0c:da:8b:82:bc:ac:5a:64:
d2:f7:be:1f:ad:de:5b:eb:05:f5:4c:2c:17:1f:94:
62:07:83:47:86:ff:0e:25:7b:07:d0:75:a6:14:4c:
05:43:0f:e8:47:d4:20:0b:fe:26:b3:4d:07:68:ee:
84:53:93:d5:cf:cf:0d:9d:83:a2:54:8e:4a:45:a4:
e5:79:d6:b3:b6:87:73:97:9e:76:a6:4b:d9:dc:b7:
b8:dc:dc:cb:40:76:ea:af:59:af:5e:f3:21:76:80:
8c:68:24:19:5a:96:cd:8c:0a:33:f4:7e:63:56:94:
35:55:7d:39:0c:b5:10:25:ce:e5:d1:3a:e4:c8:02:
e3:c6:55:b2:d4:6a:ac:6a:d2:5d:73:bb:aa:8b:22:
d7:86:be:73:d1:e0:81:96:8b:db:2e:f5:a0:f9:7f:
f6:7b:13:17:ac:2e:7c:4c:60:bf:8c:1c:68:60:d1:
fd:ae:52:d3:e3:f0:f2:42:99:6e:91:cb:c3:2b:48:
38:c2:28:82:43:15:41:70:57:af:1f:0c:22:e5:e8:
5c:81:c3:45:3c:ac:9d:91:6d:21:01:ec:38:11:8a:
82:90:df:f8:66:85:2f:ef:e8:64:eb:7c:30:4f:f4:
82:06:fe:95:cb:10:48:3d:21:41:15:7c:ce:dc:bd:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BB:F2:1B:AC:B4:71:E9:BE:4F:CE:58:6E:A5:66:26:AD:6A:1E:3A
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2d:7e:9d:7c:43:21:26:b4:22:ff:5c:be:2d:64:24:bf:da:
9d:d2:3f:b0:cb:12:77:4a:43:9e:63:b3:ca:95:72:b0:12:a1:
c9:89:c7:4b:31:40:ca:26:1c:5c:9d:6e:e2:13:eb:fb:f0:fa:
4e:25:11:aa:f0:f6:ff:c4:ab:d4:21:ce:34:fd:62:9c:6b:00:
3a:03:2b:71:08:dd:e8:3d:e9:5c:11:cc:ac:64:7e:85:25:fa:
a6:66:d8:17:11:ee:49:09:51:fa:12:63:fb:81:6d:e1:dc:c5:
e1:d9:3f:cd:2e:ea:97:3e:ec:3b:75:84:56:95:ac:ea:2e:e6:
50:7c:9e:2c:94:f3:11:a9:34:5c:48:b4:82:77:56:f7:4b:65:
de:6c:75:7f:d2:62:ca:81:5e:be:9d:a4:47:fb:d5:7d:e4:a7:
f3:6c:82:8e:ff:06:ba:76:7c:36:71:2c:22:14:e4:90:9f:03:
c6:1c:4c:94:95:4f:13:e4:02:ba:ae:9d:ca:38:42:f1:e4:bb:
e8:34:04:38:68:d6:26:52:bb:f2:8b:48:34:b3:89:71:b2:77:
af:cf:c9:66:2d:67:71:0c:d2:49:1c:8d:4c:3c:5d:34:c4:c8:
bf:ac:8a:c3:25:96:d1:7a:21:11:70:31:f2:27:31:af:99:95:
95:61:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:54:10 2025 by rpki-client