Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa
File: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=
Subject key identifier: D3:6F:1F:93:C4:E3:D6:CB:43:6C:C1:B5:DB:D9:B7:C5:C2:45:A5:83
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 6F40F2DFE53A658BAE4537DD309F23125A72A92F
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 185.162.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:40:f2:df:e5:3a:65:8b:ae:45:37:dd:30:9f:23:12:5a:72:a9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=D36F1F93C4E3D6CB436CC1B5DBD9B7C5C245A583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:46:67:3c:0d:d5:79:62:d3:64:7e:3f:b1:
ff:69:e1:fc:58:c8:de:29:dd:b3:46:40:0b:fb:2b:
60:3d:10:7c:e3:84:c8:89:04:45:10:2f:04:aa:f8:
4b:90:33:10:c7:6f:f0:d0:fe:5e:1f:39:ce:f9:e5:
89:8a:44:3b:f0:b0:74:bd:bc:9e:4f:46:59:9e:d2:
9a:89:58:dd:f4:28:0f:a2:0a:62:e0:59:3c:81:53:
0c:69:a0:84:bd:a8:55:d8:9d:21:be:df:c7:52:7e:
ea:6d:b3:bf:b2:03:e8:a8:75:71:46:cf:63:4e:52:
d1:59:6f:7e:c0:04:31:6e:be:62:03:64:72:8f:e5:
41:b2:28:f5:b5:a5:b4:8a:9d:02:73:c7:b5:0d:cd:
e8:17:9a:a9:30:9f:f7:4b:b6:d3:c2:f0:59:98:4d:
b8:3c:31:5f:46:bd:ac:f1:f7:f6:62:f0:cf:95:c3:
64:12:2c:e5:95:5b:48:76:f6:e1:7d:6f:da:8b:88:
18:68:2d:d9:77:2f:cc:8b:95:74:9d:6c:6b:0b:6e:
36:b3:14:e2:f4:ea:0a:a6:8a:4f:4b:20:56:b5:ef:
b5:46:7b:a4:b2:6d:10:a4:7a:18:17:0f:31:5a:e1:
5f:24:8b:16:4c:4c:fb:a0:23:d1:b4:bf:75:6b:10:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6F:1F:93:C4:E3:D6:CB:43:6C:C1:B5:DB:D9:B7:C5:C2:45:A5:83
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1a:9d:3f:df:34:37:b3:80:26:3a:a4:70:fa:73:55:0c:09:
7f:fb:39:b5:d8:34:a7:fb:25:bd:41:2b:03:b7:a9:85:28:41:
ab:62:1e:38:b9:d6:ca:a3:13:a6:96:0a:a9:10:3b:ad:2d:61:
a0:e8:92:28:31:3a:13:00:cd:10:25:0b:5e:51:83:46:e3:15:
f7:bf:2a:96:7a:03:b9:59:7d:13:69:b5:7c:b3:0d:ac:71:aa:
19:a8:13:1a:a4:cb:41:77:48:2a:48:a5:76:1b:70:e6:7f:7f:
3f:cf:c5:d0:68:fd:b9:88:29:4f:00:36:39:4f:c3:12:e3:fc:
76:55:78:1b:d5:17:6f:26:c7:b5:86:9c:97:f4:27:74:3b:a4:
ac:5d:3b:42:26:e7:78:b4:6d:1a:64:5e:63:ca:64:bd:49:12:
70:07:f8:7d:a0:0e:08:e2:63:8e:7d:f4:40:3c:06:b8:22:95:
30:d1:04:9c:2c:da:8b:64:13:10:b0:10:f3:73:5a:c9:f0:15:
58:e2:dc:a4:ca:3e:63:7d:b1:84:28:c0:e0:4c:aa:2b:16:ec:
8e:0e:76:c9:46:a1:68:2d:8e:1e:5a:57:8f:38:7a:7f:0f:d6:
9c:ed:48:d2:16:dd:0d:7b:05:9c:09:89:68:2b:de:37:bd:92:
a0:71:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:34:41 2025 by rpki-client