Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa
File: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=
Subject key identifier: 74:F6:85:A7:8B:9D:71:C1:B0:34:33:00:41:5A:92:08:78:C5:FD:31
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 6AB38E03DFAAD8E4127716EB03B741B46EFC5B5E
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 185.162.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 12:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b3:8e:03:df:aa:d8:e4:12:77:16:eb:03:b7:41:b4:6e:fc:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=74F685A78B9D71C1B0343300415A920878C5FD31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:89:75:49:2c:9b:a8:a5:af:8d:f0:8f:75:
4d:80:d6:ed:4b:a1:f8:88:54:5c:13:bd:47:f8:f4:
4d:39:67:b5:f3:78:6f:6f:e0:9f:96:14:47:8d:a0:
fa:45:01:9b:3d:0d:16:a5:13:cf:db:9e:a8:ec:4e:
0d:2f:d1:5c:ce:bf:72:8f:81:1b:c8:51:b5:ee:59:
d6:46:53:c7:bf:63:78:a9:ad:ff:f7:95:1f:96:7b:
8c:fb:81:ef:18:ba:0b:21:33:2e:9a:d1:9d:ae:dd:
97:f7:07:60:3e:79:b8:72:66:ac:d6:8f:f9:8b:fa:
f2:75:4b:51:bd:22:af:f6:e8:d3:d3:c3:29:0d:24:
fd:75:cc:a7:7b:17:af:6c:cb:14:53:ba:3c:b6:1a:
fb:c0:04:24:e5:b9:d8:0a:b5:57:54:3d:d3:4f:bb:
75:20:f1:f3:8a:d4:47:f7:fc:59:05:ce:e2:2a:84:
5e:43:fa:18:90:5d:a4:2f:6d:73:d5:da:fd:8e:d2:
dd:41:87:5f:ea:01:d9:1d:0d:b5:a8:c2:78:03:0d:
b0:dc:f3:fb:cb:bd:4a:20:57:b3:64:27:f4:67:5f:
6a:bf:57:bf:ec:c5:a1:70:37:98:83:84:92:56:ae:
ee:36:0a:ce:5c:44:3f:32:3b:12:5c:38:73:8f:56:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F6:85:A7:8B:9D:71:C1:B0:34:33:00:41:5A:92:08:78:C5:FD:31
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:43:37:d9:62:b0:cd:d2:30:3e:e1:20:8e:ae:4d:64:bf:32:
e7:8b:74:65:e0:c4:af:f5:0c:6a:d2:ad:71:bc:bb:9f:c7:53:
bf:27:33:2c:9a:5a:bd:da:42:a8:c0:26:0a:3b:16:eb:fd:60:
a6:7e:8a:0a:71:14:f9:00:d8:41:b7:b7:d6:21:2d:f1:b2:ef:
63:d9:ff:ae:b0:d3:b6:f3:f0:2b:8b:76:f5:5f:1c:db:c8:8d:
b6:71:e1:00:d3:83:89:c9:f4:0f:4a:d5:ef:5c:55:a2:24:62:
c3:f6:9b:9b:4c:6c:00:70:1e:e0:20:49:34:8e:a3:b3:a2:a5:
ad:1f:09:c7:b9:91:77:ac:6f:42:7a:36:41:bd:20:8e:6c:97:
0b:f3:e0:e7:be:c0:95:f0:5e:4b:46:69:80:f1:a2:df:fb:15:
ef:14:d0:57:1e:58:14:69:08:ca:2a:46:ca:33:c5:7e:20:a9:
65:62:ba:3c:89:06:45:8a:aa:67:df:20:8f:32:64:e9:e7:46:
ea:59:2a:f8:b8:f5:f4:c5:f8:88:c5:62:0e:1e:18:46:50:b8:
62:80:93:95:51:04:a0:79:35:b3:e7:ac:4d:c9:8f:69:81:b2:
95:e8:57:db:8e:8b:da:ba:9e:b4:10:8e:d2:d9:46:93:ea:91:
fc:b5:9d:23
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUarOOA9+q2OQSdxbrA7dBtG78W14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA1MDUwNjQ5MDZaFw0yNjA1MDQwNjU0MDZaMDMxMTAvBgNV
BAMTKDc0RjY4NUE3OEI5RDcxQzFCMDM0MzMwMDQxNUE5MjA4NzhDNUZEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwv4l1SSybqKWvjfCPdU2A1u1L
ofiIVFwTvUf49E05Z7XzeG9v4J+WFEeNoPpFAZs9DRalE8/bnqjsTg0v0VzOv3KP
gRvIUbXuWdZGU8e/Y3iprf/3lR+We4z7ge8YugshMy6a0Z2u3Zf3B2A+ebhyZqzW
j/mL+vJ1S1G9Iq/26NPTwykNJP11zKd7F69syxRTujy2GvvABCTludgKtVdUPdNP
u3Ug8fOK1Ef3/FkFzuIqhF5D+hiQXaQvbXPV2v2O0t1Bh1/qAdkdDbWowngDDbDc
8/vLvUogV7NkJ/RnX2q/V7/sxaFwN5iDhJJWru42Cs5cRD8yOxJcOHOPVmndAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUdPaFp4udccGwNDMAQVqSCHjF/TEwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMTM2MzIyZTMx
MzczMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNDM1Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5oqowDQYJKoZIhvcNAQELBQADggEBAKJDN9lisM3SMD7hII6uTWS/MueLdGXg
xK/1DGrSrXG8u5/HU78nMyyaWr3aQqjAJgo7Fuv9YKZ+igpxFPkA2EG3t9YhLfGy
72PZ/66w07bz8CuLdvVfHNvIjbZx4QDTg4nJ9A9K1e9cVaIkYsP2m5tMbABwHuAg
STSOo7Oipa0fCce5kXesb0J6NkG9II5slwvz4Oe+wJXwXktGaYDxot/7Fe8U0Fce
WBRpCMoqRsozxX4gqWViujyJBkWKqmffII8yZOnnRupZKvi49fTF+IjFYg4eGEZQ
uGKAk5VRBKB5NbPnrE3Jj2mBspXoV9uOi9q6nrQQjtLZRpPqkfy1nSM=
-----END CERTIFICATE-----
Generated at Fri May 9 23:48:41 2025 by rpki-client