Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3232382e302f32342d3234203d3e203630343538.roa
File: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=
Subject key identifier: 54:8F:EE:57:22:6C:5D:49:84:50:86:F3:DC:30:EE:24:90:32:CE:08
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 7D5B6A4868CB2F3971E8F75DA70B74846FD4ECFB
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3232382e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 185.37.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5b:6a:48:68:cb:2f:39:71:e8:f7:5d:a7:0b:74:84:6f:d4:ec:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=548FEE57226C5D49845086F3DC30EE249032CE08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:9a:57:95:51:4c:5f:4e:c0:e0:bf:0b:53:
e9:5e:cf:31:e4:62:72:18:89:2b:da:7d:c9:cb:81:
f9:d3:50:15:94:bf:7b:24:82:b0:d9:00:55:67:8e:
9b:33:0d:32:2f:dc:3f:5e:0f:2b:61:c2:16:18:b7:
83:21:39:1a:b6:6d:03:84:eb:6e:2a:0f:29:db:6b:
bc:74:17:86:16:e5:8d:cf:21:24:a1:1a:7c:14:e6:
d9:7c:1c:07:b5:42:bf:ab:be:c7:ec:37:1c:53:93:
5a:68:9a:b1:4e:bf:d0:c1:8e:e8:23:1a:ca:b4:e9:
20:fa:a8:b7:ff:8c:79:df:e7:eb:d8:22:f4:41:d4:
9d:c5:5e:f1:fc:dc:87:cb:c0:e8:d0:9d:14:ae:76:
c0:87:87:8e:10:5a:02:34:b8:3e:cf:2b:39:56:1a:
29:5b:c5:1b:0c:10:5a:66:bd:79:88:af:c0:ff:b9:
3d:f3:29:7f:f9:fa:60:ac:30:03:5b:4d:21:36:12:
d4:d0:83:29:82:9b:26:1c:de:25:ec:a6:da:af:e0:
73:31:0f:96:fd:ec:f0:f4:85:5d:31:b7:61:cb:e4:
15:f2:3f:f8:64:ac:eb:38:a8:92:cd:63:fd:62:e0:
b5:6d:0e:d2:ba:d8:13:1f:6d:04:2c:7c:ab:28:73:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:EE:57:22:6C:5D:49:84:50:86:F3:DC:30:EE:24:90:32:CE:08
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3232382e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.228.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:f7:30:cd:fc:0c:a2:02:6d:8b:6c:ad:27:e0:2d:2f:27:15:
60:ca:82:cd:3b:7a:a4:4f:4d:c0:bb:2b:a5:e4:1e:07:21:88:
eb:f9:4c:a4:4b:c2:58:91:45:08:3d:c3:04:9d:36:54:90:84:
c6:04:a4:55:93:e2:b8:c2:e9:b8:59:95:8a:5a:e6:ae:a1:b0:
4f:6b:b7:8f:8f:23:92:5d:68:4d:8b:97:1b:9e:b4:d7:ff:51:
d0:0c:e9:67:65:07:56:9c:00:40:fe:9c:45:ba:90:0f:37:e0:
48:a0:05:61:5a:b2:bc:c2:fb:9d:b1:67:7e:91:79:ac:98:a7:
d1:eb:f1:5c:89:c1:f5:0d:f8:15:d1:d6:f8:f6:d0:a4:26:0c:
f0:3b:b6:88:74:1f:8b:bc:2a:1d:13:c4:f0:c7:cf:dd:24:6d:
ac:d0:c9:b1:ba:7b:4c:2e:99:9f:eb:2c:f8:b9:5e:55:20:78:
43:72:b6:76:1a:bb:5b:86:da:cd:de:45:ad:f3:0c:65:ac:b7:
c3:16:dd:62:a7:6d:1a:db:2d:40:79:50:cd:14:3c:9c:21:0b:
6d:a0:25:d7:f8:ce:7d:91:c3:04:b2:3d:27:4c:63:65:0c:a9:
ea:bf:3e:df:02:6d:99:88:e0:19:eb:a2:81:e8:04:8f:7c:bd:
d2:d9:0c:8f
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUfVtqSGjLLzlx6Pddpwt0hG/U7PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA1MDUwNjQ5MDZaFw0yNjA1MDQwNjU0MDZaMDMxMTAvBgNV
BAMTKDU0OEZFRTU3MjI2QzVENDk4NDUwODZGM0RDMzBFRTI0OTAzMkNFMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfmJpXlVFMX07A4L8LU+lezzHk
YnIYiSvafcnLgfnTUBWUv3skgrDZAFVnjpszDTIv3D9eDythwhYYt4MhORq2bQOE
624qDynba7x0F4YW5Y3PISShGnwU5tl8HAe1Qr+rvsfsNxxTk1pomrFOv9DBjugj
Gsq06SD6qLf/jHnf5+vYIvRB1J3FXvH83IfLwOjQnRSudsCHh44QWgI0uD7PKzlW
GilbxRsMEFpmvXmIr8D/uT3zKX/5+mCsMANbTSE2EtTQgymCmyYc3iXsptqv4HMx
D5b97PD0hV0xt2HL5BXyP/hkrOs4qJLNY/1i4LVtDtK62BMfbQQsfKsoc3MNAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUVI/uVyJsXUmEUIbz3DDuJJAyzggwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMzM3MmUzMjMy
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uSXkMA0GCSqGSIb3DQEBCwUAA4IBAQDT9zDN/AyiAm2LbK0n4C0vJxVgyoLNO3qk
T03Auyul5B4HIYjr+UykS8JYkUUIPcMEnTZUkITGBKRVk+K4wum4WZWKWuauobBP
a7ePjyOSXWhNi5cbnrTX/1HQDOlnZQdWnABA/pxFupAPN+BIoAVhWrK8wvudsWd+
kXmsmKfR6/FcicH1DfgV0db49tCkJgzwO7aIdB+LvCodE8Twx8/dJG2s0MmxuntM
Lpmf6yz4uV5VIHhDcrZ2GrtbhtrN3kWt8wxlrLfDFt1ip20a2y1AeVDNFDycIQtt
oCXX+M59kcMEsj0nTGNlDKnqvz7fAm2ZiOAZ66KB6ASPfL3S2QyP
-----END CERTIFICATE-----
Generated at Fri May 9 02:53:37 2025 by rpki-client