Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20383334.roa
File: 38352e3233372e3232332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Mk8hTrNp5VF7uMiSXRjI2qWodmYYvFgC5oBg3s+rCGo=
Subject key identifier: 12:47:41:45:10:89:7A:09:2B:5B:5B:4B:69:79:CA:EA:47:A1:71:19
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 16946C56320CF1C9A0B93F96A4FD16A2CF4B184E
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20383334.roa
Signing time: Tue 29 Apr 2025 00:00:49 +0000
ROA not before: Mon 28 Apr 2025 23:55:49 +0000
ROA not after: Tue 28 Apr 2026 00:00:49 +0000
asID: 834
IP address blocks: 85.237.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:94:6c:56:32:0c:f1:c9:a0:b9:3f:96:a4:fd:16:a2:cf:4b:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Apr 28 23:55:49 2025 GMT
Not After : Apr 28 00:00:49 2026 GMT
Subject: CN=1247414510897A092B5B5B4B6979CAEA47A17119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:31:a5:89:5d:a9:33:95:33:db:dc:2f:0e:
ef:ab:c2:b3:a1:59:d2:c1:b9:17:17:dc:f4:44:bf:
ee:f4:55:2e:31:aa:82:5d:b4:ab:e2:45:4e:29:57:
24:c1:dd:32:c8:14:02:c6:91:1f:f9:5e:1c:9f:3f:
23:ce:92:2b:d4:ee:42:47:32:04:3d:a1:d1:e4:e4:
88:1f:ed:18:db:a0:c3:76:8d:e7:35:7c:e6:f7:29:
41:d0:1c:f0:5d:37:52:7a:f4:0b:58:e1:ab:33:75:
9f:ae:20:d3:9f:00:11:1f:7e:11:95:1b:54:67:53:
5f:2d:04:a6:97:ea:0b:4b:bd:27:f7:6e:ad:79:63:
ce:1e:83:bb:aa:69:b9:00:45:6f:34:19:4a:a0:31:
d1:33:42:c9:38:59:dc:b3:0d:3b:e9:95:ea:f4:8c:
ed:45:cf:37:ac:e2:70:3c:78:7f:80:03:91:7a:1d:
1e:7b:49:bd:44:ff:19:63:2d:a0:1a:3f:d0:af:6e:
7a:ad:25:ed:a3:a6:3d:cb:71:06:4e:6d:7b:53:c1:
f3:e6:f1:81:15:97:a5:41:c1:60:32:a5:03:45:bb:
cf:a0:ca:fa:3b:6a:34:4d:1c:5f:14:a5:24:b3:f1:
b8:da:bd:93:bc:0f:50:5f:7f:81:0b:bb:ad:1a:2f:
67:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:47:41:45:10:89:7A:09:2B:5B:5B:4B:69:79:CA:EA:47:A1:71:19
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
01:23:c7:0a:4e:2c:7b:f2:ed:ed:aa:57:d8:c2:10:62:36:7d:
41:e3:9b:41:cc:5d:d4:ac:cb:58:f9:14:ca:67:c9:05:1e:64:
56:e1:24:3d:74:95:39:4a:48:f3:e6:eb:2b:12:1b:e5:8a:72:
e5:92:3d:81:72:5f:6e:31:de:4c:5d:bd:79:45:db:9d:d8:8f:
70:72:27:a9:01:36:9b:9c:4b:60:af:51:c8:11:75:9c:38:75:
e0:af:32:03:de:37:ce:83:b2:0a:bb:6c:22:86:04:25:41:79:
1c:bb:9a:2d:2a:8d:a3:e9:85:7c:79:cb:7a:c0:4d:e9:44:ea:
18:b6:10:06:07:b8:a0:1d:d1:17:78:0e:50:bf:ec:0b:95:1e:
58:0f:0e:79:eb:5f:7c:3d:1b:a8:9f:62:3a:66:2e:6b:bd:1c:
a8:74:7e:0a:70:be:c0:4b:75:07:b4:ad:e0:b0:6d:6e:8a:4e:
0a:02:58:81:65:37:55:6f:f6:8d:a9:49:4c:da:37:de:1c:ae:
97:5a:7e:26:f7:99:d7:55:06:cc:cc:85:40:da:47:a9:44:bb:
80:51:24:a7:cd:d2:f8:96:02:02:70:a5:55:3c:c8:eb:5a:95:
02:63:15:07:d1:15:a1:ac:04:42:93:dc:37:57:ff:cd:2f:4c:
b5:f8:1f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:17:32 2025 by rpki-client