Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa
File: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=
Subject key identifier: 23:2F:BF:0D:CC:04:EE:A4:70:32:C1:7F:D1:0A:51:F5:2C:3D:58:49
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 444F49D61F4DF923BE7C14379142A60044EA5BE6
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 185.156.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4f:49:d6:1f:4d:f9:23:be:7c:14:37:91:42:a6:00:44:ea:5b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=232FBF0DCC04EEA47032C17FD10A51F52C3D5849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:90:89:73:4d:04:2a:8a:77:17:20:34:8c:87:
37:8c:0f:10:1e:21:1e:a9:c1:05:48:6d:6a:a4:e3:
49:b7:d6:5c:55:34:e9:ab:a4:60:90:48:e3:35:d6:
69:ea:d6:9a:ac:da:22:8e:08:fd:5b:d5:c5:80:c3:
9e:0b:8a:01:48:b5:af:79:89:22:9c:90:64:13:a1:
cb:c1:57:16:02:c0:4d:ab:b9:df:63:7e:02:3a:ef:
13:fb:49:70:9e:2c:90:b2:ef:1d:94:a1:11:fc:14:
16:15:fa:34:72:ee:20:53:17:be:12:ba:0a:14:99:
c5:8c:12:c3:41:fd:7c:a0:7c:79:6a:06:f2:dc:69:
8a:f4:67:e9:ca:df:ed:77:d6:b4:6f:2e:e5:01:9d:
ed:ea:06:c1:c6:30:33:4d:d6:de:fd:3f:66:39:1a:
90:27:d7:77:28:82:94:c7:3a:18:2f:c6:0c:0c:b4:
2b:92:83:c8:48:f3:91:52:75:7a:e8:80:33:1e:e6:
a7:33:86:54:42:dd:d5:91:06:5f:83:25:21:f7:b2:
16:6c:e5:ae:d7:2f:58:55:91:3f:40:a7:bf:a8:79:
9a:4f:bd:41:e4:5a:fb:61:58:c2:ba:fb:28:23:1a:
83:87:18:d1:8f:eb:97:2a:d1:79:1e:ca:cc:d1:2f:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:2F:BF:0D:CC:04:EE:A4:70:32:C1:7F:D1:0A:51:F5:2C:3D:58:49
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.219.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f4:12:cd:7d:ee:58:27:41:a4:aa:5b:0b:e8:0a:dd:20:0a:
33:85:5b:83:d3:c9:42:3d:aa:65:f2:39:9c:ba:5b:0d:c2:3f:
09:38:d4:da:8d:bd:43:2f:3e:9e:37:46:2b:1d:71:62:e3:72:
f2:9c:70:c5:6e:3a:61:85:c1:b4:a1:f7:4b:2f:ae:8f:4a:53:
94:f2:55:3e:91:4a:1f:27:9a:ae:b2:1e:77:60:2b:44:63:1c:
24:0a:58:81:be:5f:f0:f4:ab:6b:01:cb:a8:b7:95:8a:de:86:
02:85:fc:f3:7e:3a:c5:62:fd:a4:b7:0d:0d:ce:dc:6d:c7:76:
b0:55:76:7b:fa:c4:30:89:5a:5e:c4:7b:16:37:d7:b0:aa:61:
10:2c:b2:17:58:13:0e:d7:a2:b9:45:33:2c:c5:45:2f:20:01:
0c:05:1c:50:0e:b0:98:6b:0f:54:cd:39:2e:04:e5:4b:42:0e:
88:66:de:01:10:c7:a2:f0:23:0a:12:d8:cb:a9:82:ac:5f:7a:
0f:7e:f4:28:7d:12:81:e9:71:6c:ac:35:dd:d0:b7:2b:ff:13:
c7:b8:06:da:a6:d8:21:04:d1:4d:0f:f4:23:a1:68:81:f0:8f:
52:c9:c3:6b:6d:86:74:e0:0b:7c:58:96:03:cb:a1:4b:f4:7a:
45:47:54:81
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIURE9J1h9N+SO+fBQ3kUKmAETqW+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA1MDUwNjQ5MDVaFw0yNjA1MDQwNjU0MDVaMDMxMTAvBgNV
BAMTKDIzMkZCRjBEQ0MwNEVFQTQ3MDMyQzE3RkQxMEE1MUY1MkMzRDU4NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkIlzTQQqincXIDSMhzeMDxAe
IR6pwQVIbWqk40m31lxVNOmrpGCQSOM11mnq1pqs2iKOCP1b1cWAw54LigFIta95
iSKckGQTocvBVxYCwE2rud9jfgI67xP7SXCeLJCy7x2UoRH8FBYV+jRy7iBTF74S
ugoUmcWMEsNB/XygfHlqBvLcaYr0Z+nK3+131rRvLuUBne3qBsHGMDNN1t79P2Y5
GpAn13cogpTHOhgvxgwMtCuSg8hI85FSdXrogDMe5qczhlRC3dWRBl+DJSH3shZs
5a7XL1hVkT9Ap7+oeZpPvUHkWvthWMK6+ygjGoOHGNGP65cq0XkeyszRL0CdAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUIy+/DcwE7qRwMsF/0QpR9Sw9WEkwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMTM1MzYyZTMy
MzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNDM1Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5nNswDQYJKoZIhvcNAQELBQADggEBAGv0Es197lgnQaSqWwvoCt0gCjOFW4PT
yUI9qmXyOZy6Ww3CPwk41NqNvUMvPp43RisdcWLjcvKccMVuOmGFwbSh90svro9K
U5TyVT6RSh8nmq6yHndgK0RjHCQKWIG+X/D0q2sBy6i3lYrehgKF/PN+OsVi/aS3
DQ3O3G3HdrBVdnv6xDCJWl7EexY317CqYRAsshdYEw7XorlFMyzFRS8gAQwFHFAO
sJhrD1TNOS4E5UtCDohm3gEQx6LwIwoS2Mupgqxfeg9+9Ch9EoHpcWysNd3Qtyv/
E8e4Btqm2CEE0U0P9COhaIHwj1LJw2tthnTgC3xYlgPLoUv0ekVHVIE=
-----END CERTIFICATE-----
Generated at Sat May 10 20:44:07 2025 by rpki-client