Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32342d3234203d3e203630343538.roa
File: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=
Subject key identifier: F6:12:85:51:27:1F:DF:A8:6F:92:A4:F3:65:86:0B:59:80:D2:E6:D3
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 11578EC7146EDAE3ED3E6D29F9CA16C49C96280F
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 185.167.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:57:8e:c7:14:6e:da:e3:ed:3e:6d:29:f9:ca:16:c4:9c:96:28:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=F6128551271FDFA86F92A4F365860B5980D2E6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:59:89:11:41:15:23:41:eb:fb:75:4c:c7:
b0:45:52:48:b0:80:fb:6f:45:28:e1:e6:57:70:30:
62:c8:20:f3:38:02:1e:c7:b3:9f:fb:76:a9:9b:e2:
37:d2:3f:89:d3:06:ca:bc:a3:86:08:29:a3:e5:5b:
19:c4:81:e7:f9:d1:c6:6b:56:cb:89:91:0d:12:8b:
a6:57:a0:72:49:ba:fa:08:2d:c0:eb:bf:f3:46:47:
cd:29:b4:db:66:81:ec:ba:26:77:a6:28:7f:c6:63:
51:6f:52:d9:8b:65:3f:90:1e:7a:dd:f2:fb:08:95:
1b:83:05:82:65:b5:ef:16:96:0c:78:8e:bd:82:7e:
20:64:4c:ac:02:62:43:d6:0f:23:41:16:c6:6e:e9:
eb:a8:92:8b:5c:28:e0:44:d2:51:c4:5c:e7:bc:a8:
a1:4b:7f:1e:df:17:be:f8:7c:88:d2:4a:6e:43:9b:
04:7a:89:79:69:25:d2:a1:ab:38:50:5f:dd:b2:76:
85:e6:c0:9c:cc:95:17:e6:fe:60:81:7a:c4:d2:c2:
38:4a:dd:cd:80:28:ef:3d:81:03:e8:5e:3e:0e:99:
8e:d2:38:07:3e:38:17:71:ca:ca:2e:72:23:e8:fe:
b5:6c:e3:42:09:42:a7:23:f9:eb:9e:8e:3c:56:1b:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:12:85:51:27:1F:DF:A8:6F:92:A4:F3:65:86:0B:59:80:D2:E6:D3
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32342e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:50:f0:4e:23:62:69:f6:f5:a6:ea:c9:a3:61:40:9d:52:bf:
59:81:94:f4:47:5b:d8:7f:3e:51:2c:02:d9:26:d5:16:57:fd:
1b:1e:0d:34:bb:eb:48:05:3a:c7:9e:02:1a:9b:b8:cf:e1:06:
5c:d0:8b:56:a8:5b:f1:e9:a4:88:9c:a9:2b:0f:9e:2f:4c:f1:
e1:cf:5c:8f:34:89:b4:53:7c:96:23:7f:82:23:77:ad:ba:76:
56:5f:e1:d0:a0:90:07:06:b3:97:0b:17:a5:0c:48:61:3c:1c:
e1:0a:1e:00:b0:d1:40:94:78:24:4d:d0:4e:00:ee:73:ae:e2:
dc:cf:b4:aa:3a:bb:74:e6:98:37:39:37:6e:30:65:17:ca:fe:
2b:a7:ec:d8:07:b1:90:9e:2a:81:51:5f:93:a7:25:d9:fe:18:
de:1b:bd:7b:1f:bb:d1:aa:4b:88:5f:51:d5:db:e0:af:da:f4:
0f:e2:4b:7b:a4:31:ff:1b:bf:7c:5d:55:49:d0:56:73:c5:b5:
da:fc:12:e7:8e:04:32:c2:f6:95:e7:ac:4a:89:93:fd:67:d0:
72:4e:e2:88:55:71:e2:db:15:7b:9f:28:55:c4:48:66:e5:dc:
12:6e:9f:a0:b9:05:51:49:37:1a:01:a5:e5:6c:33:2f:f6:b8:
3a:1a:f3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:06:33 2025 by rpki-client