Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa
File: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=
Subject key identifier: 6C:B4:CF:7F:9D:B0:26:FB:8A:A4:9A:C8:BA:81:63:61:3C:9D:F1:C2
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 05148E9271FDAF316B93BAF5307E961CCF8CAF3B
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 185.202.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:14:8e:92:71:fd:af:31:6b:93:ba:f5:30:7e:96:1c:cf:8c:af:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=6CB4CF7F9DB026FB8AA49AC8BA8163613C9DF1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:e8:f1:06:5b:88:7b:73:2f:ae:9d:85:63:
25:dc:ed:af:2d:11:b0:79:d0:de:aa:9a:bc:94:33:
76:03:76:5a:ae:63:bc:3a:0f:9a:f7:a0:7a:3c:40:
02:85:ea:96:8d:38:f2:5b:fc:61:b9:87:6f:94:04:
10:83:3c:00:87:ee:cb:21:4a:66:84:56:89:bd:ff:
fd:d0:9b:27:02:f1:ff:a3:c4:69:55:bd:fe:aa:66:
51:40:ed:1d:e5:a8:45:5b:13:ff:02:a9:e0:97:29:
4c:19:51:0e:51:53:1c:52:ed:70:61:07:46:6f:a4:
f2:8c:56:7e:c9:9b:e8:ce:64:31:79:b7:13:2b:5b:
ae:9a:91:15:48:8d:f3:a1:fa:58:6e:6a:c0:e7:12:
55:6a:a8:be:c0:ce:9e:e2:4b:7b:d8:c0:cc:3e:78:
a7:6d:21:f5:40:14:d3:6f:a4:86:78:6b:61:4c:ed:
c0:e5:c7:fa:58:75:be:c1:4c:33:45:bc:bd:b5:4c:
b4:2a:0a:d2:34:40:57:e3:ba:0a:51:3b:eb:ae:da:
61:9b:00:69:b1:37:ed:00:4c:ad:3c:7f:7f:14:68:
84:7d:e6:9c:48:22:49:73:c0:45:f9:c6:2e:1c:08:
aa:75:66:c1:8b:9c:7a:e2:66:f1:17:3d:43:6c:61:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:CF:7F:9D:B0:26:FB:8A:A4:9A:C8:BA:81:63:61:3C:9D:F1:C2
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.146.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3a:73:51:60:c3:6a:7a:60:61:53:3d:48:5b:1e:2b:43:1b:
a2:46:7b:45:e2:d4:51:88:e4:67:0b:34:3b:54:3d:61:2f:f9:
51:99:db:90:73:6b:cb:9e:5d:bc:00:da:a7:70:52:d4:89:f6:
d5:95:8e:51:eb:6e:3a:90:28:bd:df:ac:7d:7d:19:28:4e:48:
e8:91:98:d0:af:07:a9:bc:e6:27:0c:66:09:a5:c8:2e:d1:44:
05:3a:ec:8e:30:42:78:7d:9b:35:6d:43:02:07:a2:46:3d:25:
a8:62:08:be:d2:49:b1:e0:52:d4:ed:eb:fe:67:f3:73:8d:73:
10:51:e1:e8:db:8c:11:af:95:17:b8:58:92:6c:46:f2:c8:52:
b7:5e:03:dd:da:87:0f:08:8b:b4:f4:c3:df:cc:79:3f:f3:c8:
82:59:d7:b9:75:3e:e1:e2:3f:45:9a:8c:e1:40:42:7a:c6:29:
6a:f7:ee:8c:9b:4f:fa:26:6e:08:f7:a7:30:fd:b3:ee:70:d0:
aa:8d:7d:ea:e6:bc:12:11:02:3a:4f:5c:5f:79:16:45:50:0c:
e1:af:f4:34:32:9b:06:fa:16:45:7d:03:19:af:7e:6c:4f:a6:
69:bc:1a:99:d6:2e:c6:76:11:a5:48:a5:80:a8:ff:b2:38:a2:
ba:10:80:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:04:03 2025 by rpki-client