Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32352e302f32342d3234203d3e203630343538.roa
File: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=
Subject key identifier: AA:02:51:2F:23:80:90:D5:9F:E2:EA:69:E9:D4:54:B9:46:4D:08:9C
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 34481322C1D7318666FB3E5AA4350808FC1A4A81
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32352e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 185.167.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:48:13:22:c1:d7:31:86:66:fb:3e:5a:a4:35:08:08:fc:1a:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=AA02512F238090D59FE2EA69E9D454B9464D089C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:db:ea:f3:6d:59:ec:65:0d:be:e0:f1:ad:
bc:cb:e9:37:67:d1:f9:e0:dd:69:09:e9:de:d7:d2:
c0:f9:1c:55:38:59:10:66:a6:25:5d:1a:bf:29:54:
bc:23:3f:8a:5f:34:0b:03:4a:cc:08:54:81:67:98:
a7:70:e9:2b:9c:dc:5f:06:d8:4d:f7:c0:4b:e5:6b:
11:92:ec:5e:f0:b4:02:5d:75:fc:ca:48:87:fd:2b:
90:d4:ac:ca:8c:76:fa:1b:1d:a7:de:7e:82:57:05:
e4:e1:59:c8:8f:4b:8a:bc:6f:5b:14:38:45:21:7f:
a1:e7:f2:fc:38:ed:0c:07:9f:57:a2:a4:1d:cb:cd:
e9:4e:2c:45:74:21:c8:bf:4b:29:bf:40:33:fa:36:
ad:13:a0:d8:67:cb:4f:b9:d0:4e:f8:53:3f:f3:6a:
6c:a7:8b:5a:f9:58:59:d5:0c:59:e1:95:d7:31:b2:
e1:2b:65:4c:70:9a:3a:fb:da:cc:5c:76:b3:92:2f:
94:c4:f7:23:b1:2c:e4:4b:d7:64:1c:4e:81:a6:a6:
f4:bf:be:8b:42:29:64:91:90:71:58:df:9f:cf:42:
11:f2:f9:82:97:2b:c6:82:5b:2f:2f:83:cc:a7:df:
40:5d:cd:b8:28:bf:93:76:c3:37:fa:97:7d:80:f8:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:02:51:2F:23:80:90:D5:9F:E2:EA:69:E9:D4:54:B9:46:4D:08:9C
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32352e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:38:89:8c:da:cb:f2:7d:9f:73:24:44:a6:f0:e5:b2:1b:58:
71:c9:29:8f:1b:e1:b1:39:1a:bc:c2:26:5b:ed:7d:7f:6d:ee:
4b:41:38:6c:10:f9:21:c6:99:ec:8c:58:88:ae:3a:f7:b0:f5:
cd:ce:66:34:bf:40:f7:4a:3e:bc:95:db:42:3f:cc:3d:50:b8:
30:23:90:65:d5:ee:c2:b3:30:5f:eb:09:6a:4d:dc:fe:7a:58:
cd:ed:f4:22:13:83:c3:f4:15:f8:22:a0:fe:c8:0a:00:df:82:
d9:9a:06:91:1e:95:71:c5:c5:12:e1:c6:ac:b1:69:f2:01:24:
b6:e2:6e:d1:b2:95:cb:10:31:ab:28:19:e8:f9:eb:fe:38:0e:
e4:b8:23:f8:4f:60:0c:58:0d:4f:40:e2:c2:ad:33:11:8d:50:
a8:c1:fd:e7:60:bb:e3:86:0f:b5:bf:11:5e:b9:c9:69:af:6e:
07:fc:a6:72:a4:a9:f3:21:cc:a0:6a:4d:da:c9:9c:0a:64:03:
a5:57:d7:a4:d8:35:e5:87:59:08:04:50:4f:1e:9b:46:3b:4a:
5f:97:2d:f1:ef:a0:72:d2:f3:cf:1c:69:37:f7:39:7c:e2:4f:
aa:9e:07:cc:82:82:59:b6:b3:19:d9:9b:e6:bf:47:62:ec:f6:
2a:60:8b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:31:04 2025 by rpki-client