Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203235333639.roa
File: 3134362e31392e32332e302f32342d3234203d3e203235333639.roa (raw, json)
Hash identifier: w6NEW/DWRrPWO/iWESeNv6j1OZ86wOXZFjZ3GD6N5a8=
Subject key identifier: FC:22:29:59:34:A0:60:61:E4:12:5B:3E:C1:31:35:AA:10:5D:41:23
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7473C6A76C4B60914D2CCA43DB320D541C9AB35B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203235333639.roa
Signing time: Fri 22 Aug 2025 21:54:13 +0000
ROA not before: Fri 22 Aug 2025 21:49:13 +0000
ROA not after: Fri 21 Aug 2026 21:54:13 +0000
asID: 25369
IP address blocks: 146.19.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:73:c6:a7:6c:4b:60:91:4d:2c:ca:43:db:32:0d:54:1c:9a:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 22 21:49:13 2025 GMT
Not After : Aug 21 21:54:13 2026 GMT
Subject: CN=FC22295934A06061E4125B3EC13135AA105D4123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:48:ba:84:63:a5:07:44:15:a6:63:d1:18:
c5:44:db:62:89:af:a1:5d:bd:db:f5:de:08:5c:97:
e8:25:11:5e:5a:b3:15:14:8e:2f:3f:42:d4:91:9e:
28:79:3c:f1:be:7c:4c:0a:c4:eb:f6:40:30:31:bc:
d8:e0:01:2b:76:42:fc:33:de:ce:4c:b3:a8:f2:d9:
4e:c5:72:0c:48:10:6f:11:45:ec:17:28:f2:6c:b1:
2d:ba:1d:c4:85:27:74:a4:a7:a9:52:40:7a:78:a5:
83:01:b6:74:84:41:80:e8:e2:67:ab:8d:0f:1e:d6:
bc:88:9d:ac:d5:2c:26:6d:69:c1:c1:ba:6b:ce:9b:
8e:f8:d9:9f:92:bb:1d:e0:7d:6b:71:25:e2:5c:6a:
6b:17:b7:b5:f7:97:95:7b:4e:90:cb:e3:c2:6f:92:
55:e6:d9:42:20:81:e7:13:10:90:90:6c:0c:2f:59:
aa:68:1d:2e:2d:fa:29:b5:f6:46:9c:9c:f0:3e:c0:
91:2e:3a:b5:72:9d:e5:43:8f:e1:71:63:52:f7:ab:
33:d1:d4:76:da:77:34:2d:7b:9b:01:82:3b:2c:88:
e5:8e:18:50:9c:f2:eb:d0:8c:17:37:9c:10:48:f2:
88:4f:a7:bb:9d:98:17:73:18:3b:f8:f3:ce:64:f0:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:29:59:34:A0:60:61:E4:12:5B:3E:C1:31:35:AA:10:5D:41:23
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3134362e31392e32332e302f32342d3234203d3e203235333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
07:33:c2:ab:dc:13:71:29:21:b2:81:1d:5f:37:ca:e3:31:b3:
f8:df:b1:b2:14:d6:ba:d6:c4:80:b5:d6:55:dc:97:c4:38:9e:
79:ea:a2:c1:d2:97:46:68:fa:44:2f:f6:19:95:91:22:92:9a:
1c:86:60:2b:62:81:3b:81:87:b4:c1:94:78:45:00:da:04:18:
8d:53:0a:c5:71:a6:19:8e:45:26:f6:83:cd:02:f1:ca:09:c6:
43:a2:c4:50:47:b6:e9:5d:5b:d7:15:7b:cb:c1:52:4d:fd:74:
c2:81:fb:6e:24:d6:e1:7b:82:b9:c9:4f:fb:3f:4e:67:66:6f:
67:b6:aa:d6:b0:7f:ac:f8:79:84:9e:2b:02:ed:25:4a:8d:f1:
b4:32:d9:06:aa:58:e5:c3:9f:bf:f5:ef:29:ef:3b:ff:3c:0b:
48:f9:71:77:7a:e1:8a:1a:5f:25:14:aa:b0:87:0e:60:d4:26:
b8:9c:a7:51:2a:da:8d:a4:3c:ae:1a:a8:51:0e:01:34:91:19:
7e:b6:dc:58:9f:38:1e:d1:70:dc:b6:b7:30:eb:3c:8d:96:49:
eb:69:7c:6c:0e:fa:4a:6c:d4:94:04:84:9f:2a:f7:f3:d8:82:
0a:d7:c0:02:24:68:fa:1b:74:ba:d6:be:84:83:99:7f:8c:8c:
8b:58:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:58:01 2025 by rpki-client