Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233312e302f32342d3234203d3e203630343538.roa
File: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=
Subject key identifier: AC:99:C7:72:F0:2A:3A:B5:75:FB:5D:30:5C:0E:92:67:80:33:09:8C
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 1002D3D05302AD27338642D6EAE036E55825E359
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233312e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 185.37.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:02:d3:d0:53:02:ad:27:33:86:42:d6:ea:e0:36:e5:58:25:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=AC99C772F02A3AB575FB5D305C0E92678033098C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:12:47:4b:1b:30:2f:06:50:98:9b:f9:91:
19:f8:aa:9c:f8:3e:70:3c:ce:1c:c2:a5:ed:3e:5b:
72:c4:e5:09:d9:ea:1e:65:00:7a:50:db:0a:ff:02:
53:73:12:c1:1a:6a:d3:4c:39:58:85:a5:ab:a0:44:
ff:06:cc:de:39:dd:50:7c:1f:b6:99:1f:0b:f2:44:
d6:9b:10:ac:6d:fd:87:b5:b9:2d:53:dc:64:5e:1e:
c5:7c:2d:61:d2:58:8f:51:d9:28:b8:ad:18:93:68:
e9:ac:f1:b1:0d:97:ae:44:5e:f7:e7:a3:c6:6b:f7:
fc:20:97:f9:26:82:40:ac:2b:c4:61:e9:01:ce:98:
bf:b5:90:09:20:1f:dd:df:bd:7d:01:9e:2c:02:1d:
29:3a:2d:18:98:b4:89:5d:d9:45:30:ff:00:d7:c5:
bf:85:fb:7f:19:dc:24:3f:6c:9b:91:26:ae:d1:2f:
d7:f2:15:10:18:00:1e:1d:b6:ee:33:29:0a:74:b9:
45:3d:a3:91:1d:c5:95:33:b8:67:04:9d:27:81:23:
2e:26:e2:02:d2:49:ad:18:bb:77:7d:f9:87:53:a8:
7e:4b:5d:2e:16:cf:fe:a1:3f:b4:87:bb:d9:bb:aa:
c9:c3:d7:ce:c7:86:29:07:93:82:5d:2f:a1:8e:15:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:C7:72:F0:2A:3A:B5:75:FB:5D:30:5C:0E:92:67:80:33:09:8C
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3138352e33372e3233312e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:3e:3f:82:d2:75:75:2d:e5:38:1b:34:45:b6:76:c0:a1:41:
41:47:bd:9b:07:70:f0:3a:8f:c2:b4:8e:ed:db:d3:ee:e7:5b:
0c:0e:55:06:93:e0:ba:ab:29:17:58:ad:b3:da:32:89:3f:cd:
50:f9:a2:71:62:fb:bf:e4:de:2a:da:50:96:32:ec:a8:05:a7:
29:f3:47:a6:1c:78:d2:a5:a7:de:b0:97:81:2b:f4:9a:b4:dc:
f4:c6:af:76:8d:87:8c:ef:64:e6:2d:ce:dd:e3:1e:1d:84:a8:
31:bb:cc:24:41:43:07:1a:58:34:bd:46:2e:de:ea:4b:56:1c:
0b:46:df:00:eb:fb:67:21:6e:5e:53:7f:5c:7b:ca:62:5c:76:
02:5b:77:24:f2:e2:b5:7b:f5:91:49:e3:35:60:3a:af:46:fd:
dd:84:3f:fe:69:c9:97:ba:a1:17:c1:86:58:82:6e:a8:7b:43:
90:4b:8a:1d:17:c2:da:c9:83:75:9b:d1:e3:b8:70:9e:a2:cc:
67:52:40:8f:33:8f:f0:c8:89:d7:f6:33:13:17:75:45:1c:b5:
a6:91:0f:34:d0:58:8a:19:e0:f7:2e:dc:09:df:ed:4a:be:67:
5e:ed:07:88:5d:98:da:5a:cd:4a:28:1e:db:47:9e:d5:f0:bb:
1a:25:99:a9
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUEALT0FMCrSczhkLW6uA25Vgl41kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm
N2M5YWNhMDAeFw0yNTA1MDUwNjQ5MDZaFw0yNjA1MDQwNjU0MDZaMDMxMTAvBgNV
BAMTKEFDOTlDNzcyRjAyQTNBQjU3NUZCNUQzMDVDMEU5MjY3ODAzMzA5OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXFRJHSxswLwZQmJv5kRn4qpz4
PnA8zhzCpe0+W3LE5QnZ6h5lAHpQ2wr/AlNzEsEaatNMOViFpaugRP8GzN453VB8
H7aZHwvyRNabEKxt/Ye1uS1T3GReHsV8LWHSWI9R2Si4rRiTaOms8bENl65EXvfn
o8Zr9/wgl/kmgkCsK8Rh6QHOmL+1kAkgH93fvX0BniwCHSk6LRiYtIld2UUw/wDX
xb+F+38Z3CQ/bJuRJq7RL9fyFRAYAB4dtu4zKQp0uUU9o5EdxZUzuGcEnSeBIy4m
4gLSSa0Yu3d9+YdTqH5LXS4Wz/6hP7SHu9m7qsnD187HhikHk4JdL6GOFXnXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUrJnHcvAqOrV1+10wXA6SZ4AzCYwwHwYDVR0j
BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk
MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm
SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct
ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzEzODM1MmUzMzM3MmUzMjMz
MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzQzNTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uSXnMA0GCSqGSIb3DQEBCwUAA4IBAQDGPj+C0nV1LeU4GzRFtnbAoUFBR72bB3Dw
Oo/CtI7t29Pu51sMDlUGk+C6qykXWK2z2jKJP81Q+aJxYvu/5N4q2lCWMuyoBacp
80emHHjSpafesJeBK/SatNz0xq92jYeM72TmLc7d4x4dhKgxu8wkQUMHGlg0vUYu
3upLVhwLRt8A6/tnIW5eU39ce8piXHYCW3ck8uK1e/WRSeM1YDqvRv3dhD/+acmX
uqEXwYZYgm6oe0OQS4odF8LayYN1m9HjuHCeosxnUkCPM4/wyInX9jMTF3VFHLWm
kQ800FiKGeD3LtwJ3+1Kvmde7QeIXZjaWs1KKB7bR57V8LsaJZmp
-----END CERTIFICATE-----
Generated at Fri May 9 00:43:34 2025 by rpki-client