Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa
File: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=
Subject key identifier: A6:72:C8:24:DE:23:CB:DD:3E:CD:DA:BB:6A:7F:9E:96:6E:C8:0C:48
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 4F0BD85AFD934A116818F29397CAED6E082A343D
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 185.156.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 12:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0b:d8:5a:fd:93:4a:11:68:18:f2:93:97:ca:ed:6e:08:2a:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=A672C824DE23CBDD3ECDDABB6A7F9E966EC80C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:85:08:16:84:5f:3d:d7:6b:b8:0a:13:3c:
c2:eb:3d:7a:26:0f:f4:52:89:16:3f:83:7d:8e:1b:
34:4b:5c:48:9a:ac:5c:8a:06:44:a4:59:a7:0c:31:
6c:51:ba:1f:78:9e:06:da:38:67:f7:97:a9:a6:fe:
fa:7d:3e:73:ce:6d:29:bb:c0:87:2c:6a:86:a6:7f:
7f:e5:f4:f4:a2:a5:a6:2c:71:f0:69:be:6a:cf:09:
f5:79:17:e7:fb:ef:5a:f0:0e:c8:ba:38:0b:4c:c3:
a9:ca:03:42:bf:ab:ff:a8:fb:bc:6f:53:fb:a7:1f:
df:d4:7d:49:c6:fb:70:f5:63:41:71:25:10:55:ae:
a3:20:f7:9b:1e:2b:35:be:9a:06:fc:4f:b1:2c:f5:
a9:77:82:f7:81:1a:69:ce:33:c4:64:6b:1b:3b:3a:
ef:58:6f:f6:21:e0:ef:12:16:42:ad:aa:99:fa:48:
fb:79:ef:9b:83:ca:f8:d8:0f:d2:84:d5:89:ea:56:
fa:e5:bf:0c:84:50:c2:32:fa:9f:f3:9d:dd:7c:10:
ad:1c:bb:fe:a3:fe:8e:08:0a:34:69:8a:f6:da:65:
42:12:1b:f0:7f:36:b2:0c:0f:d2:58:14:5f:fa:0c:
e8:7a:3b:3a:41:71:f7:6f:92:b9:73:92:d1:d5:1a:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:72:C8:24:DE:23:CB:DD:3E:CD:DA:BB:6A:7F:9E:96:6E:C8:0C:48
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.217.0/24
Signature Algorithm: sha256WithRSAEncryption
75:17:41:81:7e:ef:52:a5:9a:4a:c7:e5:0f:e2:1c:8d:56:f2:
70:02:50:a6:9c:4d:ba:4f:3f:dc:e4:c0:d2:c3:f3:c0:2e:84:
f8:4e:50:7b:a4:78:51:81:8e:ba:1d:56:67:ec:47:7e:ab:ea:
e3:fe:d8:f5:72:df:1c:cc:6c:60:6d:9c:e6:80:79:ac:e7:93:
bd:a3:bd:56:33:9c:5d:ae:49:1a:48:08:44:71:cf:f0:51:d5:
95:5c:13:e7:b6:f5:11:c4:86:27:39:1e:2a:f5:41:db:49:12:
ad:8e:d9:b8:3e:80:a5:b1:50:63:f7:d6:b5:1c:41:58:ab:f0:
28:34:93:99:43:ff:d2:66:b8:87:18:c6:7f:19:35:a2:1a:72:
bf:c4:fd:fe:00:01:c6:e8:9a:68:00:b1:eb:73:f6:e2:2b:b0:
ab:b9:6a:55:fc:a9:30:09:f2:bd:07:90:d2:4d:1f:dc:50:16:
f9:e2:73:64:e4:49:c6:92:58:eb:6e:1b:d1:b5:b1:82:94:25:
4f:11:4c:33:cc:c3:df:dd:03:3b:f5:df:61:a3:d6:6e:55:47:
de:13:f8:42:8b:3a:13:89:72:06:c9:fb:0b:08:93:02:11:29:
1b:c4:1e:14:f5:ee:39:a7:77:ab:0c:9a:e8:0c:26:d9:97:3c:
34:81:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:07:07 2025 by rpki-client