Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: 86ArdnmahjUwpmxzSHZOZ0zHcxvvE5/uwDEliatG6kA=
Subject key identifier: 63:34:70:87:91:9B:51:3A:10:40:CF:8D:25:A6:24:19:69:7A:5B:9F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1DACCC55CC5385F336A87CDD5FB51AB8BA2FEAC4
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30058.roa
Signing time: Mon 14 Apr 2025 14:48:00 +0000
ROA not before: Mon 14 Apr 2025 14:43:00 +0000
ROA not after: Mon 13 Apr 2026 14:48:00 +0000
asID: 30058
IP address blocks: 45.157.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ac:cc:55:cc:53:85:f3:36:a8:7c:dd:5f:b5:1a:b8:ba:2f:ea:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 14 14:43:00 2025 GMT
Not After : Apr 13 14:48:00 2026 GMT
Subject: CN=63347087919B513A1040CF8D25A62419697A5B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:f7:40:62:a1:4f:e7:dc:c5:eb:33:e1:46:
59:67:bb:e3:5a:c0:52:27:2e:42:f8:94:b4:60:b1:
78:42:43:b2:df:38:75:11:cc:52:32:bb:ef:9d:1e:
82:1f:ac:bd:58:7e:cf:33:1d:93:db:9d:b1:31:d0:
5b:cd:b4:d6:01:fb:2b:55:ad:43:08:c4:3e:97:3a:
9e:10:a0:36:e3:d2:70:c8:db:b7:1a:c9:06:64:44:
de:b0:d8:47:97:0e:01:12:5d:77:01:72:d3:ce:36:
94:36:95:ef:0f:76:9f:67:f2:ce:6c:b0:2a:ad:89:
a3:42:7c:58:45:86:44:dd:ae:30:ee:64:46:b0:04:
21:44:4f:63:ae:0b:21:48:1c:91:52:19:e8:29:ad:
6c:71:2a:f8:57:c8:89:85:94:37:39:72:a2:8a:d1:
cb:b8:5a:a9:49:ff:ab:da:fd:44:67:54:79:35:6e:
66:eb:3b:19:d0:cb:93:1a:8a:a6:2a:8a:43:18:f9:
3c:ff:7a:9d:58:cc:32:ac:ea:a8:01:ad:5f:9c:ef:
ae:62:b7:bc:12:65:2d:7e:89:11:aa:74:9a:26:88:
70:ac:18:53:29:f8:b2:8d:28:38:35:1c:36:ae:df:
a8:76:03:74:7f:f0:08:51:32:12:3b:10:a2:14:ee:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:70:87:91:9B:51:3A:10:40:CF:8D:25:A6:24:19:69:7A:5B:9F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:44:e1:fe:30:94:9a:ea:9f:46:fb:b2:52:fc:81:a3:59:cb:
04:87:89:c8:40:17:23:14:1c:20:d9:28:5f:1a:c9:c7:52:99:
0b:c6:e4:dc:30:f7:8d:ea:4d:0b:9e:53:fe:79:5b:ce:f2:55:
70:65:35:6e:8e:f1:5e:58:88:6b:d1:51:ff:96:63:fa:4b:bb:
05:8b:08:85:59:b6:40:1e:23:42:ca:62:8d:53:06:c0:09:40:
50:cb:bd:e7:70:c4:05:40:7d:51:b4:ad:44:08:dc:4e:b2:bc:
06:42:47:84:5a:13:67:88:95:8f:41:a1:59:d2:e7:ed:c7:6b:
a0:67:36:54:c7:dd:13:0b:df:74:9d:0a:f4:36:5a:55:80:da:
68:ca:ac:65:5f:51:23:77:33:ce:76:5e:b3:09:51:c3:e6:ab:
c8:ba:74:99:35:1d:a3:a3:e0:69:56:8b:d5:36:d6:6a:13:d7:
76:e0:71:d4:0a:7d:f8:ec:71:0d:6d:bc:64:fa:ec:e6:63:e1:
1f:49:a5:2d:08:2f:30:4d:68:21:8b:17:7d:41:81:b6:3f:b4:
4c:d0:89:45:49:34:25:89:50:c7:68:a2:d4:20:b6:b6:e6:ef:
b3:8b:eb:75:f0:32:31:6d:f3:7e:7a:bf:87:5a:5d:d2:10:cb:
ac:0c:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:05:32 2025 by rpki-client