Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa
File: 3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa (raw, json)
Hash identifier: wBpQEo7Y+aMbWr43pgAiXfkOW+23ooi+dOSvz9r99GM=
Subject key identifier: 50:D5:3D:35:56:B5:63:2F:1E:E0:BC:A3:71:76:06:2D:B9:45:29:69
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 74F45760228EA3F8CD5CB24FCC683438E56F8833
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa
Signing time: Tue 29 Apr 2025 15:15:48 +0000
ROA not before: Tue 29 Apr 2025 15:10:48 +0000
ROA not after: Tue 28 Apr 2026 15:15:48 +0000
asID: 213426
IP address blocks: 178.208.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f4:57:60:22:8e:a3:f8:cd:5c:b2:4f:cc:68:34:38:e5:6f:88:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 29 15:10:48 2025 GMT
Not After : Apr 28 15:15:48 2026 GMT
Subject: CN=50D53D3556B5632F1EE0BCA37176062DB9452969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:a4:7f:c0:b5:ba:06:1c:75:ba:c3:ea:2d:
29:8f:80:41:ac:ba:e1:6b:ac:18:da:2b:f1:90:74:
ab:a7:50:fc:01:0b:04:a8:d0:fe:23:74:91:84:c4:
ca:cb:af:e3:c3:57:c5:11:eb:56:2b:9c:0a:b8:80:
1b:e3:e5:71:9c:52:fc:de:e1:f4:98:c5:28:40:f6:
89:b0:e4:c2:fa:e1:a9:70:78:f0:a7:d0:51:f2:82:
2b:5a:92:4a:e0:d7:18:72:e9:bd:c9:e5:9b:6a:5a:
bc:10:37:82:00:16:8f:24:5f:91:cd:5b:8c:80:42:
af:49:60:f2:54:42:fc:b4:ce:52:8d:47:28:ef:fe:
96:e5:23:c9:39:cc:c4:b8:b3:45:04:df:a7:74:fb:
79:f5:09:8a:da:4f:d8:80:a4:8e:14:bc:06:61:48:
9e:5f:30:72:15:87:fe:92:91:c1:03:e8:ae:51:9b:
06:83:7a:1e:04:4f:0a:d9:62:ba:1d:25:f7:f9:7b:
0b:0a:80:89:1a:35:86:27:90:39:47:52:9e:d5:7b:
78:02:80:9b:07:53:88:d4:dd:1d:ee:cd:54:ce:58:
28:71:27:76:88:85:5d:13:94:b1:75:3c:41:73:a5:
7c:5d:ec:44:3d:2d:3d:6c:44:67:11:5e:9e:59:f4:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D5:3D:35:56:B5:63:2F:1E:E0:BC:A3:71:76:06:2D:B9:45:29:69
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3138362e302f32342d3234203d3e20323133343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a9:30:45:d2:ee:fa:2d:33:23:76:58:80:90:0e:9d:eb:80:
83:6a:5b:8e:c5:52:82:b3:80:02:7f:41:92:0e:90:94:4c:4a:
7e:3e:b4:fd:da:e5:fb:35:04:f0:ed:cc:a2:d3:18:c6:bc:c1:
d4:22:17:4c:2f:dd:84:a4:e5:73:ba:3d:9e:35:18:ef:26:5e:
19:42:b0:7b:58:e5:f9:2e:78:07:31:f3:13:5b:57:0b:25:95:
57:ab:7e:1b:64:c9:53:b4:be:f8:c0:39:3d:c9:91:00:fd:6b:
83:09:b6:e5:15:59:c0:41:5b:41:43:5e:f4:ed:46:9b:3b:60:
54:2a:59:d5:de:d5:ab:90:e1:0d:09:c5:b3:8c:80:b8:25:a3:
10:bb:8a:cb:9e:63:ed:b7:31:8f:01:c4:af:7d:f5:2d:a9:ae:
33:10:40:06:df:2e:65:1d:b6:0b:cc:0a:e9:f5:2f:5e:be:32:
e9:39:e2:96:7a:46:36:47:03:3c:fd:13:2b:8a:b1:3e:8f:56:
f6:eb:0f:b5:e9:1c:c8:65:4b:c0:58:7c:58:24:51:ac:e4:db:
f2:74:9c:96:ac:52:28:60:d9:91:c9:e6:09:00:ad:b4:ac:c9:
31:54:25:57:9d:38:93:5a:85:13:d4:72:6b:0b:13:70:70:6d:
61:55:97:6d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUdPRXYCKOo/jNXLJPzGg0OOVviDMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNTA0MjkxNTEwNDhaFw0yNjA0MjgxNTE1NDhaMDMxMTAvBgNV
BAMTKDUwRDUzRDM1NTZCNTYzMkYxRUUwQkNBMzcxNzYwNjJEQjk0NTI5NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSKR/wLW6Bhx1usPqLSmPgEGs
uuFrrBjaK/GQdKunUPwBCwSo0P4jdJGExMrLr+PDV8UR61YrnAq4gBvj5XGcUvze
4fSYxShA9omw5ML64alwePCn0FHygitakkrg1xhy6b3J5ZtqWrwQN4IAFo8kX5HN
W4yAQq9JYPJUQvy0zlKNRyjv/pblI8k5zMS4s0UE36d0+3n1CYraT9iApI4UvAZh
SJ5fMHIVh/6SkcED6K5RmwaDeh4ETwrZYrodJff5ewsKgIkaNYYnkDlHUp7Ve3gC
gJsHU4jU3R3uzVTOWChxJ3aIhV0TlLF1PEFzpXxd7EQ9LT1sRGcRXp5Z9DhTAgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQUUNU9NVa1Yy8e4LyjcXYGLblFKWkwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEALLQujANBgkqhkiG9w0BAQsFAAOCAQEATqkwRdLu+i0zI3ZYgJAOneuAg2pb
jsVSgrOAAn9Bkg6QlExKfj60/drl+zUE8O3MotMYxrzB1CIXTC/dhKTlc7o9njUY
7yZeGUKwe1jl+S54BzHzE1tXCyWVV6t+G2TJU7S++MA5PcmRAP1rgwm25RVZwEFb
QUNe9O1GmztgVCpZ1d7Vq5DhDQnFs4yAuCWjELuKy55j7bcxjwHEr331LamuMxBA
Bt8uZR22C8wK6fUvXr4y6TnilnpGNkcDPP0TK4qxPo9W9usPtekcyGVLwFh8WCRR
rOTb8nSclqxSKGDZkcnmCQCttKzJMVQlV504k1qFE9RyawsTcHBtYVWXbQ==
-----END CERTIFICATE-----
Generated at Tue May 13 12:27:11 2025 by rpki-client