Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3232392e302f32342d3234203d3e203630343538.roa
File: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=
Subject key identifier: 78:AF:CD:AA:34:30:1E:0C:FD:F5:12:87:4A:A2:18:36:2C:50:6B:03
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 74C54DEF272D254B5FA5EEF5645BC5B800E7BD08
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3232392e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 185.37.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c5:4d:ef:27:2d:25:4b:5f:a5:ee:f5:64:5b:c5:b8:00:e7:bd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=78AFCDAA34301E0CFDF512874AA218362C506B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:d1:d9:b9:b9:29:a3:93:bb:3f:60:2e:a3:
58:54:02:ce:d1:c1:42:36:97:a0:46:a2:40:5b:ee:
97:77:7c:7c:f8:e6:53:44:5f:11:57:fd:ad:fd:f1:
de:95:b4:ab:d9:65:f4:9c:04:f3:c8:fb:9b:c8:a2:
83:ee:a2:b0:eb:62:9a:c3:26:3d:a5:33:14:bf:63:
34:10:22:56:21:37:3b:55:da:a7:dd:de:dc:c5:b6:
c7:05:98:fe:01:90:9e:a4:47:f4:6e:96:0d:8f:20:
27:e0:f3:35:44:db:03:4f:5d:ce:2b:d2:32:41:f6:
7b:f7:2c:0d:8a:f1:db:9d:37:fe:c1:a0:bd:8d:10:
e5:18:8a:9a:0f:56:e2:8d:76:16:4a:f5:e7:f1:27:
4a:88:be:0e:f9:87:d9:bb:a6:ad:45:f5:89:ef:54:
6a:c6:33:11:5c:1b:d1:70:7c:5e:d2:6b:19:57:ac:
0b:03:ab:ea:86:d3:49:91:8c:f9:bb:ca:7f:eb:50:
16:28:a5:4c:8d:b3:c5:05:86:f0:f5:7a:5b:d3:dd:
b2:73:8e:c4:e5:49:fb:5e:2e:40:c1:5c:1c:e9:1b:
55:04:d8:07:14:8e:49:4a:80:05:f0:9b:b8:a7:ce:
b4:1a:2e:9b:f4:6a:04:5d:8e:2d:c1:d3:b3:5d:66:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AF:CD:AA:34:30:1E:0C:FD:F5:12:87:4A:A2:18:36:2C:50:6B:03
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3232392e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.229.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0a:56:6b:9c:ef:f2:a3:9d:9b:60:4e:e4:10:8c:ec:5f:bc:
79:c7:39:8f:40:1e:46:25:c8:0e:2f:c9:40:cb:c1:5c:e8:2b:
66:9d:51:65:ae:09:76:40:b9:3e:e5:c4:3e:09:6b:c5:51:6b:
49:cc:9a:32:ca:5a:dc:90:45:e3:e3:a9:7d:04:8e:48:5d:c7:
f4:b3:d7:30:67:a3:b5:4d:83:5c:52:fe:d5:f5:fe:2c:a6:e9:
a0:49:76:dc:7b:25:4c:74:d4:73:aa:f8:a2:45:f6:79:fe:95:
ea:76:52:3d:0d:fc:41:6c:5b:9a:4d:61:eb:31:d7:75:ea:c0:
37:1e:12:28:d7:65:c2:bd:69:c1:0e:2d:62:8e:15:e8:f2:d5:
0a:0b:0a:4c:83:0f:77:ab:2f:78:f3:ad:f4:ae:7c:1a:ae:65:
6b:da:4d:a5:07:a7:c5:54:d4:98:a9:a4:1f:18:bd:52:3b:b4:
a4:4b:b0:1f:46:a3:de:5e:bd:cc:9a:97:29:57:d7:0d:22:99:
0d:5e:b1:06:2d:66:67:f2:2b:d2:31:0f:c8:3b:d4:a1:c4:ef:
65:92:a6:77:8d:67:0e:b3:47:d5:94:5b:77:90:30:bd:5c:71:
e4:d8:3c:33:a8:a1:1a:76:6d:25:39:44:41:2c:d7:4d:60:e9:
c3:b2:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:40:01 2025 by rpki-client