Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa
File: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=
Subject key identifier: 75:5A:1D:76:F1:A7:21:2F:77:E5:E1:A9:FB:A1:BC:27:CB:8C:E3:BC
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 7D6D351DB8A2BA9EE1A57047C6167896124535FE
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 185.202.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6d:35:1d:b8:a2:ba:9e:e1:a5:70:47:c6:16:78:96:12:45:35:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=755A1D76F1A7212F77E5E1A9FBA1BC27CB8CE3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:af:bd:cb:05:b8:a4:56:a0:e1:ed:40:c3:e9:
8b:f1:33:d9:30:ce:fe:67:25:e7:84:eb:2d:cc:ac:
79:74:dd:c8:98:e8:6d:a6:61:af:9a:d9:88:8d:b8:
ed:ab:9c:83:e4:83:d6:5e:38:59:70:f4:b4:69:fd:
63:27:31:fa:67:d4:2d:a1:29:c7:ff:7e:23:17:e1:
f1:98:fc:97:6f:44:1c:52:f1:38:78:73:41:09:90:
a7:2a:41:32:b7:95:98:2a:56:a4:b3:ce:60:73:7f:
98:34:d5:a6:2f:aa:9e:bf:e1:0e:72:3e:27:f4:f9:
d7:49:da:f5:3b:35:55:95:cb:d0:e0:c2:7a:58:0c:
77:1c:f1:b5:73:2b:dc:b9:34:cd:52:da:04:e2:65:
40:16:ac:41:28:c0:29:d7:ba:c8:35:e3:88:26:79:
ab:bc:b4:07:6f:e4:69:4a:da:39:1e:59:25:85:41:
4b:d9:76:be:c9:a3:e7:3c:01:44:dd:a2:c8:21:82:
50:a5:85:af:2d:d6:df:e0:6d:6d:cd:43:a6:73:17:
2b:b5:75:8a:c9:5c:da:a4:41:f9:9b:1f:2f:88:7a:
f8:33:02:02:d7:47:ae:31:05:d8:45:5c:59:9b:2e:
79:ab:da:d1:92:32:2d:76:a3:b0:aa:35:4b:ad:15:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5A:1D:76:F1:A7:21:2F:77:E5:E1:A9:FB:A1:BC:27:CB:8C:E3:BC
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.147.0/24
Signature Algorithm: sha256WithRSAEncryption
57:26:d0:f9:3d:ad:b5:5b:6d:f6:c1:43:68:e5:22:04:ef:96:
83:c0:ce:e8:4c:cd:45:b4:5a:65:b0:c3:c4:49:98:16:e7:7c:
aa:2e:af:c7:e2:e2:b3:67:38:06:49:8f:26:cd:ed:5f:75:7d:
9b:45:e4:d1:0d:65:f1:47:24:04:16:66:9c:69:21:6b:7f:02:
37:ea:3d:3f:d1:aa:59:e1:f3:43:79:3e:a2:a2:a3:f6:80:95:
67:46:b8:e9:ad:3f:77:0b:e4:76:d5:1c:77:bc:52:dd:68:6b:
41:8f:7f:e3:9d:56:29:83:ab:e9:42:0f:84:90:a8:4d:0e:1a:
15:2d:7a:e1:f6:93:64:f6:52:ec:c5:10:c2:04:10:a7:90:28:
7b:26:88:cf:20:53:8d:d8:03:15:2c:f0:1a:32:cc:2f:68:28:
1e:64:9d:1e:38:a7:83:bd:39:8c:b6:35:b8:77:6d:fb:70:c7:
37:95:c1:f9:6b:df:e5:59:fa:f0:7c:43:bf:21:e1:2c:76:22:
1b:25:00:4a:0c:bc:7c:d0:7f:66:9b:23:78:36:1e:17:af:eb:
79:16:0c:f0:f6:d9:b8:cb:b7:0c:a7:12:f2:36:c8:8b:05:50:
2b:24:2b:24:05:12:bd:ea:7b:ce:9e:9b:1a:8b:46:61:79:ec:
41:c1:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:46:48 2025 by rpki-client