Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
File: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=
Subject key identifier: FE:0D:A7:0C:A3:69:92:09:C9:8D:47:E3:2F:18:32:F7:0F:04:5E:A2
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 1E63881AC139B4A7F4BFBB38952E6C2C66C01CA7
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:05 +0000
ROA not before: Mon 05 May 2025 06:49:05 +0000
ROA not after: Mon 04 May 2026 06:54:05 +0000
asID: 60458
IP address blocks: 185.37.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:63:88:1a:c1:39:b4:a7:f4:bf:bb:38:95:2e:6c:2c:66:c0:1c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:05 2025 GMT
Not After : May 4 06:54:05 2026 GMT
Subject: CN=FE0DA70CA3699209C98D47E32F1832F70F045EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:9d:0e:c4:2c:7c:99:aa:88:64:dd:73:5f:
8a:bb:60:50:8a:62:64:43:a8:4a:12:71:2d:78:69:
54:76:9e:68:ec:36:20:cf:80:ef:fa:ad:48:7c:ef:
68:f5:1e:7a:46:03:8c:b2:9c:6c:5b:cd:09:17:70:
5b:f6:12:2a:5b:7e:22:6a:b0:6a:8f:10:4c:35:74:
87:5d:8b:c3:1a:7d:62:7a:ee:8c:a9:69:91:7f:8a:
0a:4a:e0:13:3f:35:2f:ae:c9:e8:a7:cc:31:36:4d:
0a:7c:6b:d9:7c:6b:b3:8d:ab:d7:46:d4:9e:e8:fe:
a1:26:d5:0b:d7:91:a0:70:17:c0:88:6c:a2:ba:0c:
6a:89:6c:00:48:85:e6:99:f0:e5:39:0b:28:97:69:
62:49:54:a2:8f:62:69:61:98:17:fe:2d:4e:83:e3:
62:86:13:a0:ed:fe:6e:21:23:7e:23:54:54:21:9a:
08:04:a6:49:7d:91:af:60:1a:4d:51:e9:df:bf:e6:
4f:7e:df:b6:f7:66:e9:ac:a9:0b:ce:cc:47:3c:d4:
31:89:df:81:0b:b9:5e:74:aa:f1:69:ef:c7:dd:2d:
af:61:46:46:9d:db:4d:c9:eb:59:72:f0:25:09:79:
57:4d:50:b8:b4:6a:7a:1e:33:e4:1e:62:15:83:b4:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0D:A7:0C:A3:69:92:09:C9:8D:47:E3:2F:18:32:F7:0F:04:5E:A2
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233302e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:45:2f:97:6f:3a:1b:41:cb:d0:9f:8f:7f:52:04:b1:1e:2d:
a9:7a:1f:65:0a:d0:68:41:ef:bc:28:fa:40:e6:43:58:1b:33:
52:12:dc:6a:a5:15:dc:65:2e:04:fb:fc:72:04:48:d3:ae:4f:
7c:20:b4:91:d0:02:91:42:33:24:7d:fe:2f:3b:28:fc:83:8c:
d6:70:e6:4a:91:96:18:e7:0e:3b:57:20:28:90:db:c4:6d:a9:
81:c7:37:51:a1:e2:d8:86:dc:47:64:50:f5:d4:eb:af:de:39:
d6:63:4e:4f:fa:d4:62:0b:e3:e3:1e:a5:ab:38:28:68:bd:62:
df:fd:b0:ce:f9:6b:d8:e6:5d:77:1a:e5:b7:97:6c:62:4c:4b:
12:0a:f4:59:8d:8f:a6:d1:0e:f3:65:6c:f2:c7:ab:33:c5:e4:
44:14:38:09:cd:e1:4e:bb:df:ed:1c:8c:e3:1e:92:22:1f:ab:
29:ad:08:65:12:04:f0:f2:53:46:8a:77:c7:ca:ec:e6:6c:0d:
56:9e:d4:ef:a0:d5:6b:8a:0d:6a:64:e4:24:7e:e4:56:b5:61:
53:8e:6b:76:ee:dd:49:8e:8a:cb:9d:8a:fe:bc:e9:cf:6d:24:
ef:21:4a:ec:a5:cb:e0:4d:ca:1e:c3:0d:fb:bb:bc:92:7d:1f:
fc:f0:e9:d0
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHmOIGsE5tKf0v7s4lS5sLGbAHKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA1MDUwNjQ5MDVaFw0yNjA1MDQwNjU0MDVaMDMxMTAvBgNV
BAMTKEZFMERBNzBDQTM2OTkyMDlDOThENDdFMzJGMTgzMkY3MEYwNDVFQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRs50OxCx8maqIZN1zX4q7YFCK
YmRDqEoScS14aVR2nmjsNiDPgO/6rUh872j1HnpGA4yynGxbzQkXcFv2EipbfiJq
sGqPEEw1dIddi8MafWJ67oypaZF/igpK4BM/NS+uyeinzDE2TQp8a9l8a7ONq9dG
1J7o/qEm1QvXkaBwF8CIbKK6DGqJbABIheaZ8OU5CyiXaWJJVKKPYmlhmBf+LU6D
42KGE6Dt/m4hI34jVFQhmggEpkl9ka9gGk1R6d+/5k9+37b3ZumsqQvOzEc81DGJ
34ELuV50qvFp78fdLa9hRkad203J61ly8CUJeVdNULi0anoeM+QeYhWDtH1/AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU/g2nDKNpkgnJjUfjLxgy9w8EXqIwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMzM3MmUzMjMz
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uSXmMA0GCSqGSIb3DQEBCwUAA4IBAQCnRS+XbzobQcvQn49/UgSxHi2peh9lCtBo
Qe+8KPpA5kNYGzNSEtxqpRXcZS4E+/xyBEjTrk98ILSR0AKRQjMkff4vOyj8g4zW
cOZKkZYY5w47VyAokNvEbamBxzdRoeLYhtxHZFD11Ouv3jnWY05P+tRiC+PjHqWr
OChovWLf/bDO+WvY5l13GuW3l2xiTEsSCvRZjY+m0Q7zZWzyx6szxeREFDgJzeFO
u9/tHIzjHpIiH6sprQhlEgTw8lNGinfHyuzmbA1WntTvoNVrig1qZOQkfuRWtWFT
jmt27t1JjorLnYr+vOnPbSTvIUrspcvgTcoeww37u7ySfR/88OnQ
-----END CERTIFICATE-----
Generated at Sat May 10 13:16:59 2025 by rpki-client