Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa
File: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (raw, json)
Hash identifier: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=
Subject key identifier: 6F:B9:E1:DF:07:EB:84:CD:07:06:0C:B7:E9:05:0F:D8:30:4B:E1:E4
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 6287E5160EC343F77B9AF08815FA7668F105E83D
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa
Signing time: Fri 09 May 2025 09:37:53 +0000
ROA not before: Fri 09 May 2025 09:32:53 +0000
ROA not after: Fri 08 May 2026 09:37:53 +0000
asID: 44771
IP address blocks: 185.149.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:87:e5:16:0e:c3:43:f7:7b:9a:f0:88:15:fa:76:68:f1:05:e8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: May 9 09:32:53 2025 GMT
Not After : May 8 09:37:53 2026 GMT
Subject: CN=6FB9E1DF07EB84CD07060CB7E9050FD8304BE1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:35:be:7d:a4:5a:17:6a:70:ca:b3:86:63:
5d:01:07:f4:27:bb:c2:0e:3e:f3:e3:64:3f:86:01:
d2:c4:b1:b0:cd:d3:94:f9:b6:9b:15:6b:f9:39:c1:
fa:03:37:1a:77:7b:b9:56:a4:9b:64:f9:f7:e1:39:
83:e5:70:15:80:7d:e6:c7:32:64:2d:e5:98:48:1f:
e0:c4:8e:f3:77:89:3f:3e:c7:47:35:08:06:06:c8:
c6:c1:0d:5c:2b:23:98:70:8f:7d:e4:e2:55:8a:49:
8f:1f:c6:68:07:a1:39:ec:c7:01:77:81:05:3b:c4:
c2:a6:79:87:90:5c:00:ad:44:66:28:fa:d3:d6:bb:
ac:4d:1a:0a:e3:f1:3b:60:45:ce:ff:b0:f3:35:d3:
86:d9:19:73:8d:69:8b:98:29:4b:f0:fb:bf:51:6e:
ef:67:c2:f4:6e:38:e2:35:ea:6f:5d:b1:29:36:d8:
df:6f:d4:92:75:8c:28:6c:d5:2c:bd:87:e5:37:6f:
ab:85:ea:dd:2a:a3:c2:f4:62:0e:0e:49:ea:f0:fd:
32:b1:7e:80:42:19:8b:f6:57:bb:5d:46:01:02:06:
b2:d3:d1:5f:63:f3:4b:fa:17:75:af:62:24:4f:95:
32:33:bc:13:a3:3e:e5:3f:65:b2:ef:db:68:70:19:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:E1:DF:07:EB:84:CD:07:06:0C:B7:E9:05:0F:D8:30:4B:E1:E4
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
52:24:0f:01:c7:0a:de:6d:5b:32:fa:19:ce:a6:63:3e:46:73:
86:2d:47:12:db:c6:9c:c3:c1:eb:9e:ea:3d:e4:e9:63:a8:34:
57:f7:1c:3a:22:6d:61:a6:df:57:46:fb:0a:45:d8:88:4b:a9:
0a:98:ad:4e:30:1a:2c:34:6e:2e:6a:15:64:96:09:a6:0f:79:
37:0e:5e:92:02:18:1a:e6:99:52:1d:c5:09:c3:26:01:f7:ff:
ba:29:d6:34:be:fd:b3:78:b7:85:94:fc:16:60:43:d3:12:c1:
b7:e2:f9:01:9a:26:2e:32:ee:ae:8a:48:2e:49:47:69:cf:e9:
28:23:43:f4:e1:b2:bb:98:a2:1f:ff:e6:0e:22:47:ca:47:ff:
fd:1a:20:ba:00:da:b9:a8:12:23:e3:7d:d9:89:02:99:ea:28:
1a:3a:03:4b:f5:a8:ef:eb:f3:a0:89:38:30:65:42:f4:1b:c5:
b8:3c:d6:8c:98:16:ef:d1:aa:18:33:42:b8:49:b8:17:39:c7:
3f:fc:58:dd:55:f7:41:53:8a:6a:bc:ba:e9:38:d6:82:db:b8:
86:6e:da:28:7c:d2:61:40:4c:60:91:49:40:53:af:48:6d:23:
fe:70:21:66:34:0f:af:68:07:c0:fe:78:bd:47:a4:42:46:a6:
15:1f:25:b3
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUYoflFg7DQ/d7mvCIFfp2aPEF6D0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWRmODU5OTdiMWI5YjM1OGUxYzQzZjM2NzY1YWEwYTRh
MDIxNDRhZTAeFw0yNTA1MDkwOTMyNTNaFw0yNjA1MDgwOTM3NTNaMDMxMTAvBgNV
BAMTKDZGQjlFMURGMDdFQjg0Q0QwNzA2MENCN0U5MDUwRkQ4MzA0QkUxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfTW+faRaF2pwyrOGY10BB/Qn
u8IOPvPjZD+GAdLEsbDN05T5tpsVa/k5wfoDNxp3e7lWpJtk+ffhOYPlcBWAfebH
MmQt5ZhIH+DEjvN3iT8+x0c1CAYGyMbBDVwrI5hwj33k4lWKSY8fxmgHoTnsxwF3
gQU7xMKmeYeQXACtRGYo+tPWu6xNGgrj8TtgRc7/sPM104bZGXONaYuYKUvw+79R
bu9nwvRuOOI16m9dsSk22N9v1JJ1jChs1Sy9h+U3b6uF6t0qo8L0Yg4OSerw/TKx
foBCGYv2V7tdRgECBrLT0V9j80v6F3WvYiRPlTIzvBOjPuU/ZbLv22hwGYp/AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUb7nh3wfrhM0HBgy36QUP2DBL4eQwHwYDVR0j
BBgwFoAUnfhZl7G5s1jhxD82dlqgpKAhRK4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMtZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0
M2IxLzMvOURGODU5OTdCMUI5QjM1OEUxQzQzRjM2NzY1QUEwQTRBMDIxNDRBRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25maFpsN0c1czFqaHhEODJkbHFncEtB
aFJLNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDAyZTBiYTMt
ZmU2MC00NWIxLTkxNjAtODY4YTJmOGE0M2IxLzMvMzEzODM1MmUzMTM0MzkyZTMx
MzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzQzNzM3MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5lZkwDQYJKoZIhvcNAQELBQADggEBAFIkDwHHCt5tWzL6Gc6mYz5Gc4YtRxLb
xpzDweue6j3k6WOoNFf3HDoibWGm31dG+wpF2IhLqQqYrU4wGiw0bi5qFWSWCaYP
eTcOXpICGBrmmVIdxQnDJgH3/7op1jS+/bN4t4WU/BZgQ9MSwbfi+QGaJi4y7q6K
SC5JR2nP6SgjQ/ThsruYoh//5g4iR8pH//0aILoA2rmoEiPjfdmJApnqKBo6A0v1
qO/r86CJODBlQvQbxbg81oyYFu/RqhgzQrhJuBc5xz/8WN1V90FTimq8uuk41oLb
uIZu2ih80mFATGCRSUBTr0htI/5wIWY0D69oB8D+eL1HpEJGphUfJbM=
-----END CERTIFICATE-----
Generated at Mon May 12 20:42:47 2025 by rpki-client