Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e3131392e302f32342d3234203d3e203630343538.roa
File: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=
Subject key identifier: D7:82:17:25:79:22:4B:AD:6D:B7:27:E9:7E:D3:8D:81:07:D7:82:C4
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 5FAB5D5949418F69F1694477A541D3D9964B2338
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e3131392e302f32342d3234203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 195.8.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ab:5d:59:49:41:8f:69:f1:69:44:77:a5:41:d3:d9:96:4b:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=D782172579224BAD6DB727E97ED38D8107D782C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:69:0d:aa:ea:49:0b:94:5a:40:ca:84:06:80:
3e:f5:de:86:81:3a:1a:88:c0:d1:cd:b7:8e:09:d9:
15:f9:6a:8a:29:4e:e3:cd:b1:08:4f:21:0e:e5:a8:
c9:67:ce:f2:1a:7b:fe:fd:14:29:8e:96:45:10:cd:
d5:d9:3e:fe:c3:9e:50:ec:77:ae:ff:a2:4b:c1:0c:
25:4f:88:28:77:20:2e:6f:8d:3a:54:b6:d5:b0:40:
24:0a:3a:a0:4f:7b:bc:42:05:dd:f8:ac:e9:f1:97:
f0:46:24:02:1d:dc:36:15:81:1b:b7:13:0b:a2:ba:
b4:2c:86:b4:62:66:ca:0a:71:61:0a:9d:64:27:59:
49:78:88:5a:2c:0d:80:13:40:d4:80:0a:15:7f:0f:
57:bf:cc:86:49:41:4f:d3:b9:43:a5:24:12:06:ea:
7e:fb:7b:81:06:c7:84:46:13:b8:4d:6f:a5:f0:cf:
05:92:8b:72:99:eb:4e:66:69:46:fd:0d:7d:52:51:
c8:34:8d:ab:16:23:ae:b9:39:3f:1e:5a:00:52:2d:
af:13:ae:1f:86:42:5c:6c:64:8e:4c:55:99:aa:38:
db:f1:d2:87:1a:04:ae:ff:6a:a9:70:35:a4:1f:fa:
2a:89:e3:93:24:9c:bc:6d:01:b4:63:7d:7e:57:b6:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:17:25:79:22:4B:AD:6D:B7:27:E9:7E:D3:8D:81:07:D7:82:C4
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e3131392e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.119.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:65:63:41:2f:5d:b0:7d:f3:ca:b1:66:69:e9:0d:4b:16:6c:
51:25:21:96:df:c6:02:4e:3a:75:02:44:6f:5f:96:b3:97:f2:
4b:2d:1a:39:1a:99:8f:5d:90:1d:02:a4:68:49:c7:36:56:c4:
26:bb:29:1e:ac:61:47:22:65:04:9e:9e:7f:23:e4:55:15:0d:
fd:9b:a8:b6:55:5c:7e:e4:1a:a9:bd:be:b4:6e:22:d2:40:8b:
cc:0d:66:93:ea:7a:2d:9e:00:75:2a:80:6c:9f:b2:7c:1c:5f:
9a:60:58:41:4d:9f:f2:27:bf:42:86:b8:c0:5a:23:ac:fa:31:
68:b2:2f:be:d9:e4:54:31:88:41:ed:79:f8:1f:28:e8:bc:a4:
ec:c0:31:da:b9:7c:93:9f:43:ec:bb:53:90:01:55:73:e9:cc:
c0:97:51:a2:9c:7f:0e:82:6e:ef:2c:e2:74:65:7f:7f:04:03:
b7:b2:fd:6d:75:9f:10:dd:d3:f6:93:b4:3a:d0:8f:ce:62:7d:
bb:24:c7:90:35:3e:7d:10:fb:e5:c8:f1:cb:1b:ba:bf:54:b9:
7d:73:26:ad:2b:7e:80:d3:37:b0:bc:1d:b1:ea:d6:43:69:52:
05:b6:c5:53:7d:4f:ec:9e:6f:9e:5b:66:f9:0e:e0:fc:17:33:
d5:52:1e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:19:41 2025 by rpki-client