Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3134362e3138382e302f32322d3232203d3e203630343538.roa
File: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (raw, json)
Hash identifier: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=
Subject key identifier: B4:B8:FA:ED:F9:C1:C0:13:34:39:90:42:C9:B6:3A:E5:85:7E:99:33
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 1E3895F4DAF14BAF600DE756F610A2E9D8E23292
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3134362e3138382e302f32322d3232203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:07 +0000
ROA not before: Mon 05 May 2025 06:49:07 +0000
ROA not after: Mon 04 May 2026 06:54:07 +0000
asID: 60458
IP address blocks: 45.146.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:38:95:f4:da:f1:4b:af:60:0d:e7:56:f6:10:a2:e9:d8:e2:32:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:07 2025 GMT
Not After : May 4 06:54:07 2026 GMT
Subject: CN=B4B8FAEDF9C1C01334399042C9B63AE5857E9933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:b9:1d:19:88:84:f5:d7:9e:3a:8e:0f:3c:
43:58:a0:92:10:4c:20:e3:18:15:1a:63:1d:2c:1a:
47:71:94:a5:2e:ca:6e:43:4b:5f:f4:0c:50:da:6d:
8a:40:e9:c5:8b:19:dc:d5:22:0b:94:28:9b:6c:58:
f1:80:79:22:58:61:c9:75:a8:39:31:5c:69:55:74:
9b:d5:54:76:2e:b3:d6:41:a6:88:7c:f4:80:06:0f:
94:26:bf:ed:21:33:6e:d2:75:d9:09:48:50:0d:81:
80:e0:3e:9e:a0:31:5f:0b:37:6f:08:1b:04:6c:93:
ca:5a:e2:b8:be:9e:96:a3:65:70:13:12:00:77:03:
ba:8f:76:32:9f:aa:28:49:f3:ce:60:ca:dc:2a:b9:
ec:be:9c:6b:20:4e:52:0b:78:61:0f:16:d6:99:65:
b3:c0:c9:09:b6:c1:15:65:f2:f5:51:10:a5:0c:d8:
83:69:22:03:37:22:cb:7c:3c:7d:45:32:b6:9a:58:
b1:4d:d4:e2:89:44:88:ed:74:ee:af:ef:6e:f8:78:
84:c9:a9:b1:be:1c:b6:d5:74:f8:77:0d:c6:37:a8:
b8:36:ff:63:85:a2:6b:ee:4a:04:e0:55:7c:a9:68:
de:bd:d5:fe:cd:84:2c:e5:3b:09:8d:b6:d4:a9:85:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:FA:ED:F9:C1:C0:13:34:39:90:42:C9:B6:3A:E5:85:7E:99:33
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3134362e3138382e302f32322d3232203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.188.0/22
Signature Algorithm: sha256WithRSAEncryption
09:b2:6f:40:63:20:ce:4a:37:57:3c:84:10:db:f8:11:2d:6e:
0d:dd:5a:32:c3:0d:5b:c7:af:7e:da:fd:dd:dc:ca:66:03:af:
70:eb:d9:b7:1f:a9:b3:45:cc:25:29:88:51:4e:d6:36:cb:6a:
ca:ab:42:89:b6:21:73:8c:4b:99:b9:d2:8b:37:ba:28:fa:c7:
da:47:89:68:ac:2c:10:00:4e:05:e2:7f:9c:d4:8a:af:7e:02:
ff:12:0c:c0:28:9f:cd:d7:24:55:72:95:c5:78:5a:f2:86:b0:
4e:83:d4:7e:69:bc:f4:37:a0:e6:0f:da:40:a7:f7:e0:50:18:
32:39:3d:f0:25:a9:48:4b:14:ef:04:8f:68:59:43:b4:7f:9b:
52:5f:66:db:84:68:02:69:3f:20:d1:cd:fd:f8:ab:aa:20:e4:
45:f4:ae:67:b8:37:12:be:9c:13:ea:5f:9b:81:dc:70:73:2f:
87:4a:24:84:66:cc:4a:57:58:be:3e:42:da:d4:2c:90:26:0f:
21:33:91:d9:05:2c:f3:90:aa:f7:e2:f5:f7:14:fb:13:cc:6e:
ba:06:2c:bf:58:6d:89:c5:9a:5a:28:e8:26:52:2d:dd:27:2b:
62:32:0e:bd:44:7b:e2:bb:92:27:8f:4d:a7:fa:4c:d4:5d:d9:
68:0a:9a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:36:22 2025 by rpki-client