Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa
File: 3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa (raw, json)
Hash identifier: 5Sl2Z3ptNbtvr3FBhOdZcqrM9plEnj22ST5HcnfsBGc=
Subject key identifier: B4:B6:45:D1:7E:BF:95:95:12:FC:99:E1:17:DE:53:47:8E:CF:2E:DB
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 59278A57E6AB9633A1EA5B91B611C48F9D784E0F
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa
Signing time: Tue 22 Apr 2025 06:57:23 +0000
ROA not before: Tue 22 Apr 2025 06:52:23 +0000
ROA not after: Tue 21 Apr 2026 06:57:23 +0000
asID: 199707
IP address blocks: 185.115.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 15:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:27:8a:57:e6:ab:96:33:a1:ea:5b:91:b6:11:c4:8f:9d:78:4e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Apr 22 06:52:23 2025 GMT
Not After : Apr 21 06:57:23 2026 GMT
Subject: CN=B4B645D17EBF959512FC99E117DE53478ECF2EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:b5:d0:56:fb:ad:43:8d:17:83:13:00:4b:
ae:1c:b5:77:06:35:71:4f:50:cf:43:2c:fd:33:d6:
3b:00:9d:bd:07:f2:89:e7:94:38:04:3d:65:b6:3a:
c2:d9:57:f8:b1:a1:a9:62:a5:23:4e:24:9f:de:a0:
81:e0:01:0e:31:9a:f0:e6:77:27:92:b5:1a:fd:b0:
4f:2d:f5:7a:f0:ce:dc:cb:d5:e6:a5:3f:0f:c6:d1:
5a:30:5b:f1:ad:38:ca:a9:3d:a9:28:84:08:02:7b:
9a:51:d2:f1:c3:12:15:49:ba:34:3b:ff:bc:c6:46:
d7:1f:63:9f:b0:5d:52:94:b8:7d:fa:e6:25:e6:0c:
86:8d:43:80:d1:8b:09:73:16:dc:f9:23:ac:8c:0c:
ab:3f:2d:8f:f5:54:eb:e8:da:90:db:14:6e:7d:3a:
8f:a3:1b:3c:88:50:1b:1b:05:46:a8:00:73:06:2a:
94:97:bf:21:74:5a:36:85:d4:0c:73:ed:97:65:f4:
1e:15:4f:71:cc:6c:bc:79:19:ea:5d:98:82:d2:ad:
e9:ac:21:03:33:20:74:91:2b:48:85:8b:88:d5:f1:
18:17:54:e8:9d:b8:36:7a:26:aa:92:93:d7:7b:50:
3e:b0:56:cd:34:71:16:03:aa:35:aa:b6:12:ac:64:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:45:D1:7E:BF:95:95:12:FC:99:E1:17:DE:53:47:8E:CF:2E:DB
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/3138352e3131352e3230372e302f32342d3234203d3e20313939373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.207.0/24
Signature Algorithm: sha256WithRSAEncryption
90:52:4c:06:b7:aa:3e:d3:4b:c7:b0:5b:97:b5:de:5a:3c:b1:
64:e5:52:d5:c8:1f:95:ea:01:04:0c:aa:28:e9:f1:8e:56:a2:
70:9c:94:bc:49:39:b1:a6:4d:30:9a:58:d5:2a:25:21:99:7e:
a1:6a:3a:35:16:a5:48:c1:ec:f1:08:91:ce:b9:33:83:12:6b:
09:ff:4d:7e:c7:b6:fc:8b:3c:36:44:66:e7:a3:b9:14:4e:41:
39:43:7c:4d:63:87:e7:3a:ee:0f:eb:45:0c:a5:01:22:45:e3:
f8:42:d0:14:45:17:8c:dd:83:cb:ea:f3:91:94:f0:b0:35:54:
e7:20:fb:43:12:08:70:c4:12:5b:54:23:8e:16:a2:73:f0:0e:
c2:1d:68:4f:bd:66:a3:ce:29:6d:e0:50:b5:d3:20:5d:3a:95:
b0:f0:67:3e:e9:7a:6b:a5:78:e2:79:ff:55:54:63:42:c5:4d:
59:77:8f:22:f9:8b:2f:89:48:3f:95:bc:1b:90:46:ec:b7:45:
b3:5f:df:82:be:00:ff:5f:74:b7:84:96:d3:42:97:2c:87:6d:
0c:ed:5b:05:6a:0d:bb:a6:d1:52:71:f9:7b:b3:28:82:83:c2:
48:83:e8:3a:5a:f6:e7:1f:f3:42:c8:c9:2a:c2:3b:c4:d7:fa:
af:65:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:14:15 2025 by rpki-client