Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32372e302f32342d3234203d3e203630343538.roa
File: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=
Subject key identifier: FB:51:19:AC:4B:70:56:C6:CD:A5:C1:25:F1:DE:3A:17:06:9C:DA:E1
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 40B08BC3325C23AF6CA5F2C4C9B497C9B0FF8EE8
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32372e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 185.167.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 02:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b0:8b:c3:32:5c:23:af:6c:a5:f2:c4:c9:b4:97:c9:b0:ff:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=FB5119AC4B7056C6CDA5C125F1DE3A17069CDAE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:65:1a:c0:61:e0:36:f6:c2:d7:ae:fb:16:
f6:af:b4:b5:16:3f:31:b2:50:46:09:8e:87:e9:86:
c5:80:69:02:20:c2:ca:16:7e:fd:65:10:32:8e:d5:
ea:0c:2e:39:66:8b:25:ba:2a:e4:2c:bd:15:7c:de:
e8:7b:ae:10:06:80:0f:34:ce:b9:70:bc:52:27:f0:
8e:2b:13:b9:2c:47:a2:23:7e:a2:f1:00:69:44:83:
10:92:55:e7:a5:dd:03:a4:cc:5a:5e:e0:1c:27:27:
a4:84:e1:29:3c:d5:f8:b3:ae:93:75:70:cb:90:a2:
9e:2f:ec:e4:8d:5f:c3:6b:ce:79:b3:7c:58:db:d8:
a2:a0:67:0a:35:e4:28:1b:2f:cf:77:37:4e:f7:8c:
4a:95:00:7f:43:68:9c:7b:2d:0f:39:ad:91:62:fe:
56:1b:af:22:b5:c5:4f:00:db:73:2d:32:97:48:cf:
90:0b:6e:86:19:f5:6e:3e:50:c6:f2:4a:96:1a:63:
d7:b1:cb:0b:18:bf:9c:64:7c:00:3a:51:19:b8:7d:
c6:f9:f0:d0:c8:0b:f7:46:97:00:e2:e3:17:43:d4:
fa:14:f6:01:7f:a4:c0:62:e6:8e:cf:fa:56:61:2e:
cc:46:88:d6:ef:66:00:f1:25:5d:bf:ca:e0:84:60:
27:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:51:19:AC:4B:70:56:C6:CD:A5:C1:25:F1:DE:3A:17:06:9C:DA:E1
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3136372e32372e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.27.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f9:fb:3d:ff:ed:dd:f0:48:c4:a2:d8:15:6b:e3:75:1b:28:
23:8a:8b:8c:36:77:fd:8e:4f:bd:ac:35:c0:49:c1:ae:aa:0d:
26:13:f6:d1:51:46:9d:bf:4d:c5:72:10:d3:76:a9:5d:5b:d1:
f9:05:d5:0a:fc:90:62:0e:68:f3:97:c0:b1:4e:ca:58:59:1f:
84:14:16:99:0e:30:cb:26:19:a4:cc:57:27:23:24:9f:9c:25:
43:44:03:65:8e:97:86:66:79:a8:c9:5a:25:83:5e:83:97:db:
2e:6a:14:97:4f:25:bb:38:f8:41:27:02:07:48:25:ba:26:0b:
1a:c5:1f:fc:ec:46:b8:76:b2:5c:73:c7:49:5f:7e:f8:55:15:
fe:f8:f0:34:92:31:57:0e:cf:4c:be:be:4a:08:fd:d2:99:23:
57:e6:47:02:bf:85:65:d1:8d:f5:02:3f:6a:9e:b9:1d:93:b1:
bb:55:a9:56:4f:18:ad:e8:99:04:1c:f0:3f:23:5c:25:6a:f0:
84:40:23:2b:f9:48:36:72:d9:dd:bb:7e:2e:82:45:a1:f0:8e:
59:29:f5:bb:88:8a:25:dd:8f:7d:ec:f1:cf:91:31:f0:91:45:
16:93:9f:07:31:cb:88:d8:b3:20:b4:0d:d1:ed:55:7a:9f:47:
94:96:d3:fa
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQLCLwzJcI69spfLEybSXybD/jugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA1MDUwNjQ5MDZaFw0yNjA1MDQwNjU0MDZaMDMxMTAvBgNV
BAMTKEZCNTExOUFDNEI3MDU2QzZDREE1QzEyNUYxREUzQTE3MDY5Q0RBRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+WUawGHgNvbC1677FvavtLUW
PzGyUEYJjofphsWAaQIgwsoWfv1lEDKO1eoMLjlmiyW6KuQsvRV83uh7rhAGgA80
zrlwvFIn8I4rE7ksR6IjfqLxAGlEgxCSVeel3QOkzFpe4BwnJ6SE4Sk81fizrpN1
cMuQop4v7OSNX8NrznmzfFjb2KKgZwo15CgbL893N073jEqVAH9DaJx7LQ85rZFi
/lYbryK1xU8A23MtMpdIz5ALboYZ9W4+UMbySpYaY9exywsYv5xkfAA6URm4fcb5
8NDIC/dGlwDi4xdD1PoU9gF/pMBi5o7P+lZhLsxGiNbvZgDxJV2/yuCEYCcVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU+1EZrEtwVsbNpcEl8d46Fwac2uEwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMTM2MzcyZTMy
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uacbMA0GCSqGSIb3DQEBCwUAA4IBAQCL+fs9/+3d8EjEotgVa+N1GygjiouMNnf9
jk+9rDXAScGuqg0mE/bRUUadv03FchDTdqldW9H5BdUK/JBiDmjzl8CxTspYWR+E
FBaZDjDLJhmkzFcnIySfnCVDRANljpeGZnmoyVolg16Dl9suahSXTyW7OPhBJwIH
SCW6JgsaxR/87Ea4drJcc8dJX374VRX++PA0kjFXDs9Mvr5KCP3SmSNX5kcCv4Vl
0Y31Aj9qnrkdk7G7ValWTxit6JkEHPA/I1wlavCEQCMr+Ug2ctndu34ugkWh8I5Z
KfW7iIol3Y997PHPkTHwkUUWk58HMcuI2LMgtA3R7VV6n0eUltP6
-----END CERTIFICATE-----
Generated at Wed May 7 11:13:38 2025 by rpki-client