Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3132352e37382e302f32342d3234203d3e203630343538.roa
File: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=
Subject key identifier: 4C:5A:F5:E0:6A:6B:0A:8F:3F:40:5D:C1:26:12:7D:2F:F8:2E:73:FA
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 0A06B29CC4BEAA717C1F9FF208D5A70C4767E14C
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3132352e37382e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 185.125.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:06:b2:9c:c4:be:aa:71:7c:1f:9f:f2:08:d5:a7:0c:47:67:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=4C5AF5E06A6B0A8F3F405DC126127D2FF82E73FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:54:b3:d6:ac:82:24:5d:f6:f8:c6:17:a6:
92:50:6d:9b:9d:90:b5:c5:5e:e0:54:b0:4b:00:a5:
42:db:8c:fb:81:db:33:0b:d3:8c:93:5c:7a:b3:14:
38:65:47:be:34:bf:0d:17:a8:2a:47:3f:0f:89:ac:
96:0f:d5:6b:8d:23:a5:33:0a:d2:ab:04:79:cc:9a:
d3:87:8d:96:8b:a8:47:20:23:d0:81:60:91:6d:2b:
31:f5:69:4a:7b:0c:78:3c:ce:43:eb:b7:1f:92:d4:
ad:ed:b5:f0:92:d0:8c:67:72:35:b5:3e:a6:6e:2b:
f3:2b:bb:4d:77:54:39:38:a5:e3:15:ce:ca:0b:10:
1b:a2:01:0c:17:04:2f:11:20:b2:76:54:0e:44:5d:
d7:29:70:13:9b:db:df:06:e7:f0:c7:0d:20:8d:5a:
f0:93:d4:80:2e:48:5d:45:87:99:84:0b:a7:29:50:
e1:0e:57:bb:b6:a7:ee:3f:6b:c3:26:94:71:56:34:
02:a0:b7:32:6a:6e:af:d7:fa:96:16:8d:78:be:b3:
12:bd:4a:d8:55:f6:86:33:75:0c:28:26:6c:69:9d:
d7:17:82:6d:7e:6e:86:e2:92:94:97:ff:4f:45:5f:
24:f2:a3:5f:5c:0b:90:82:f6:8b:0e:f2:be:46:88:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:F5:E0:6A:6B:0A:8F:3F:40:5D:C1:26:12:7D:2F:F8:2E:73:FA
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3132352e37382e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:5d:41:56:29:23:96:ec:13:b4:0c:1e:b2:63:bd:bc:62:37:
38:27:22:89:58:1b:3c:35:c1:46:e0:f4:b8:19:84:d2:52:d7:
14:10:9f:9f:59:6b:58:c2:0f:82:9d:39:ee:4f:2c:cb:f7:34:
3c:45:f5:77:36:4a:ed:24:18:1c:bf:f7:db:ee:bd:84:3d:32:
be:e9:8d:f6:0b:02:cf:40:03:29:e4:f8:c7:28:f4:93:4d:c1:
1d:bc:99:bd:d5:90:ad:44:cc:b2:3d:0f:3a:7c:16:82:99:a9:
20:fc:c8:8a:44:72:b9:19:23:56:4d:d8:89:99:38:6e:a4:1a:
51:79:7f:fc:5f:b2:21:ec:2b:fc:b3:91:5a:d7:93:a4:3b:ad:
ce:24:9b:b1:68:ce:01:ca:f5:e4:7f:64:94:c5:bb:74:5a:67:
ad:eb:0e:9a:04:db:1d:56:4b:41:40:93:58:24:67:df:cf:16:
53:1f:57:13:33:2d:18:0c:42:f1:81:ac:75:47:36:c5:c1:1b:
13:b6:00:68:06:33:2c:67:35:1c:7c:19:e2:b6:c2:e3:9f:18:
21:56:cc:46:b1:2a:78:7e:ca:2f:3d:d1:91:4d:bc:26:19:17:
ed:7a:6a:47:68:0c:0c:2c:96:7f:00:bb:c3:4a:f7:78:fc:52:
c5:46:56:68
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUCgaynMS+qnF8H5/yCNWnDEdn4UwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA1MDUwNjQ5MDVaFw0yNjA1MDQwNjU0MDVaMDMxMTAvBgNV
BAMTKDRDNUFGNUUwNkE2QjBBOEYzRjQwNURDMTI2MTI3RDJGRjgyRTczRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZVSz1qyCJF32+MYXppJQbZud
kLXFXuBUsEsApULbjPuB2zML04yTXHqzFDhlR740vw0XqCpHPw+JrJYP1WuNI6Uz
CtKrBHnMmtOHjZaLqEcgI9CBYJFtKzH1aUp7DHg8zkPrtx+S1K3ttfCS0IxncjW1
PqZuK/Mru013VDk4peMVzsoLEBuiAQwXBC8RILJ2VA5EXdcpcBOb298G5/DHDSCN
WvCT1IAuSF1Fh5mEC6cpUOEOV7u2p+4/a8MmlHFWNAKgtzJqbq/X+pYWjXi+sxK9
SthV9oYzdQwoJmxpndcXgm1+bobikpSX/09FXyTyo19cC5CC9osO8r5GiFWFAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUTFr14GprCo8/QF3BJhJ9L/guc/owHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMTMyMzUyZTM3
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uX1OMA0GCSqGSIb3DQEBCwUAA4IBAQCzXUFWKSOW7BO0DB6yY728Yjc4JyKJWBs8
NcFG4PS4GYTSUtcUEJ+fWWtYwg+CnTnuTyzL9zQ8RfV3NkrtJBgcv/fb7r2EPTK+
6Y32CwLPQAMp5PjHKPSTTcEdvJm91ZCtRMyyPQ86fBaCmakg/MiKRHK5GSNWTdiJ
mThupBpReX/8X7Ih7Cv8s5Fa15OkO63OJJuxaM4ByvXkf2SUxbt0Wmet6w6aBNsd
VktBQJNYJGffzxZTH1cTMy0YDELxgax1RzbFwRsTtgBoBjMsZzUcfBnitsLjnxgh
VsxGsSp4fsovPdGRTbwmGRftempHaAwMLJZ/ALvDSvd4/FLFRlZo
-----END CERTIFICATE-----
Generated at Fri May 9 02:56:50 2025 by rpki-client