Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3233203d3e20323132323338.roa
File: 34352e38392e3134382e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: Y9ticoRtNnfCIbJcEI6hsg0hgkVUEEhLlK9U8+zJXNY=
Subject key identifier: 21:87:A2:F6:CB:B7:0E:26:15:56:54:F0:D8:30:F3:CE:B3:3A:76:0F
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 7793304911460F7E4819E3B5FAFB61B7FF4BD427
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3233203d3e20323132323338.roa
Signing time: Mon 09 Jun 2025 15:10:58 +0000
ROA not before: Mon 09 Jun 2025 15:05:58 +0000
ROA not after: Mon 08 Jun 2026 15:10:58 +0000
asID: 212238
IP address blocks: 45.89.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:93:30:49:11:46:0f:7e:48:19:e3:b5:fa:fb:61:b7:ff:4b:d4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jun 9 15:05:58 2025 GMT
Not After : Jun 8 15:10:58 2026 GMT
Subject: CN=2187A2F6CBB70E26155654F0D830F3CEB33A760F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:bb:c8:66:2a:0d:78:91:a2:ff:e2:a2:63:
a3:00:73:76:0f:48:a2:f7:e0:d9:09:53:dd:6d:24:
bb:fa:6d:35:30:3a:3e:22:01:27:75:f1:8c:94:0c:
48:78:0b:10:d9:00:ad:b3:57:32:4c:27:a1:0f:bb:
41:42:8c:9d:34:64:60:5b:c9:dc:8b:8c:6f:5e:44:
fa:76:bf:49:bb:44:cb:87:4a:f3:53:53:da:05:80:
8a:f8:ea:b3:0f:e7:d4:82:6e:21:b1:ec:69:9c:ea:
38:fa:90:4b:09:70:a8:bc:e2:dd:15:36:f6:cf:07:
cf:b9:ad:83:21:30:50:67:f9:50:f3:e1:e9:bd:16:
aa:60:60:eb:7c:42:dc:1b:5b:77:02:05:50:54:77:
7c:ef:b2:13:a3:9c:64:13:ae:a2:d3:aa:9b:a6:dd:
d6:62:70:6d:85:a4:54:b7:1e:9b:1e:92:ef:1b:4f:
db:ee:83:92:ff:f9:99:a2:5d:60:d0:4a:3c:37:c5:
fb:7e:c7:52:cc:4c:03:8c:62:39:5c:8e:ea:96:7f:
32:75:c3:e9:ca:88:75:86:f7:59:99:66:51:bc:7d:
67:45:0b:d6:f2:9e:d0:43:24:78:40:e6:5e:4d:39:
22:fb:15:34:94:f3:7e:9a:6e:8f:d2:71:fe:31:ed:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:A2:F6:CB:B7:0E:26:15:56:54:F0:D8:30:F3:CE:B3:3A:76:0F
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:1e:d2:8c:9d:df:f0:7b:09:5b:db:97:64:e3:2d:d7:1d:6f:
34:a3:c1:49:48:41:d7:fa:ec:ad:9a:f2:83:7d:24:27:a2:2a:
bd:86:cd:e2:c8:86:1d:e5:65:80:50:72:82:ae:b9:39:f0:f7:
ec:68:63:6a:8c:43:6b:0c:ca:85:cd:29:36:8b:ee:79:2e:27:
fd:d4:cd:83:04:f5:dd:78:00:fd:8d:df:18:b6:c1:c6:0c:04:
fe:5e:e0:02:d2:b0:e7:fb:60:be:11:73:35:cd:16:14:8a:66:
75:73:17:0c:e1:a2:3c:15:1c:ee:da:34:a3:ad:a7:72:98:6d:
d8:15:1b:14:fb:75:80:b1:41:db:f3:6a:25:99:eb:43:6b:03:
8a:d8:0f:1a:0c:cd:06:3c:8d:fd:9b:41:62:9b:3e:da:7a:19:
eb:d1:95:1f:8f:75:81:69:0d:ce:94:48:30:d3:c3:15:bb:d8:
d6:10:7d:dd:ce:7e:bc:d3:81:97:d2:85:ae:3f:40:fd:9a:df:
93:f9:ef:fc:66:be:cf:89:53:31:ae:9d:3f:cb:16:da:99:9f:
3b:87:de:86:91:7a:a0:3a:0e:35:1c:a1:e4:84:a2:69:ef:c8:
4a:c6:04:97:1a:5b:e0:23:0f:a1:26:37:1f:dd:fc:42:28:5e:
36:aa:1e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:30:46 2025 by rpki-client