Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20323131333538.roa
File: 34352e38392e3134392e302f32342d3234203d3e20323131333538.roa (raw, json)
Hash identifier: 7hEY4PvjevEdogEK3IQfi0ZGG7MoYwNsCNzlxYL+LCw=
Subject key identifier: 0C:C8:E1:82:E5:C8:09:FA:82:EB:00:B1:E5:F3:82:0A:F4:91:9D:3A
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4224E6A9B13C0F05BE14E8B09EBC270FA2E39536
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20323131333538.roa
Signing time: Thu 14 Aug 2025 19:21:55 +0000
ROA not before: Thu 14 Aug 2025 19:16:55 +0000
ROA not after: Thu 13 Aug 2026 19:21:55 +0000
asID: 211358
IP address blocks: 45.89.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:24:e6:a9:b1:3c:0f:05:be:14:e8:b0:9e:bc:27:0f:a2:e3:95:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 14 19:16:55 2025 GMT
Not After : Aug 13 19:21:55 2026 GMT
Subject: CN=0CC8E182E5C809FA82EB00B1E5F3820AF4919D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:48:e0:f5:14:86:a9:d2:32:f7:a3:03:41:
14:e4:58:8c:33:ed:a8:bd:19:2c:01:60:2e:bb:b4:
75:7c:bd:25:61:53:2f:db:a6:4d:d9:b8:2e:3c:71:
c0:50:ed:d0:38:14:98:39:2e:bc:8d:34:2a:b7:60:
a2:8c:e1:fe:62:9f:f9:38:bd:77:06:3a:bb:94:74:
7d:f6:b4:e3:ad:42:b1:5a:20:38:29:dc:f8:5c:c6:
a1:37:df:54:30:b8:e4:03:d9:00:65:7d:07:a8:82:
c0:d4:fa:9b:5d:96:e4:9c:5d:c1:ec:f3:0b:94:e2:
f1:dc:e8:70:81:70:c3:02:7f:6b:ef:8a:3e:9b:8e:
37:25:39:bf:2d:3b:11:1d:aa:21:cd:fc:85:69:52:
8e:78:b1:c5:aa:00:84:77:0d:92:a1:ad:c0:ca:7f:
03:a9:fe:48:74:dc:a3:a1:4c:23:58:33:b3:2f:a9:
53:79:f0:7e:47:25:b6:d1:8a:bf:37:35:d0:d1:29:
57:1b:d0:49:f7:4c:b7:81:85:d1:ce:ab:e6:63:7b:
48:4d:ea:7b:46:2c:24:54:15:05:53:8a:f3:25:69:
3f:ac:fe:27:6e:0f:50:c6:6f:38:9f:64:a9:15:c4:
99:d2:1b:1b:2c:17:0b:70:fe:90:b6:0b:63:46:35:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C8:E1:82:E5:C8:09:FA:82:EB:00:B1:E5:F3:82:0A:F4:91:9D:3A
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134392e302f32342d3234203d3e20323131333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.149.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ec:18:d4:77:eb:4e:e8:00:07:44:51:e4:91:0c:af:32:1a:
89:54:44:c0:5f:11:05:67:88:96:4a:3b:8c:03:66:4b:d4:d1:
4e:9d:14:d6:cd:b1:a4:ac:57:81:9f:94:cf:b5:c2:c1:d4:6a:
9c:3a:39:06:79:3e:73:87:3c:87:13:00:ee:b9:b6:a8:64:c3:
37:2b:51:da:1a:b2:49:93:3a:88:45:00:8a:02:bb:62:df:ce:
15:8d:9f:10:03:49:e0:7e:e6:49:ee:00:52:05:67:0c:d4:8c:
54:8b:50:5e:f2:e3:9b:37:02:82:dd:04:9b:8d:ba:67:0d:29:
07:ad:d5:5a:5d:0c:06:90:d9:c6:4f:c5:e1:7c:45:ce:fd:92:
77:8f:51:ab:30:33:78:f3:9a:2d:da:e7:29:08:2e:e4:ca:9a:
34:87:b9:70:6a:0d:0d:db:48:95:b9:33:2e:77:0b:1b:1a:45:
6d:6d:bf:c4:d1:0c:77:0f:b7:1d:03:08:02:85:69:2c:b3:7b:
f9:d8:56:31:58:f8:66:01:d0:4f:0b:85:90:40:40:1c:da:1b:
ba:47:47:53:cc:0b:0b:47:15:97:e5:e3:c4:50:a4:da:dd:11:
de:90:2b:8c:67:bf:1d:25:37:f3:fb:f4:b4:a1:b4:00:3a:6c:
9b:90:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:02:11 2025 by rpki-client