Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38322e302f32342d3234203d3e20313432313131.roa
File: 34352e31322e38322e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier: WfCRwT6xb/9m/lM7o4RFv3JE2riD/3WKYdQ35f9+cx8=
Subject key identifier: C0:A4:E0:28:5C:EB:F7:A6:FD:D5:17:CA:74:BA:51:43:1D:55:F4:D1
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7E0D7E75FB50607896B4A6EFC646F14AB81DFFB2
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38322e302f32342d3234203d3e20313432313131.roa
Signing time: Mon 30 Jun 2025 21:08:31 +0000
ROA not before: Mon 30 Jun 2025 21:03:31 +0000
ROA not after: Mon 29 Jun 2026 21:08:31 +0000
asID: 142111
IP address blocks: 45.12.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0d:7e:75:fb:50:60:78:96:b4:a6:ef:c6:46:f1:4a:b8:1d:ff:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 30 21:03:31 2025 GMT
Not After : Jun 29 21:08:31 2026 GMT
Subject: CN=C0A4E0285CEBF7A6FDD517CA74BA51431D55F4D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:ee:0a:c5:b7:d7:b1:5a:b1:92:7d:61:40:
ac:21:6c:e7:bf:d1:fa:3b:b3:22:82:53:69:51:f5:
67:da:6d:cc:47:7a:e8:28:bd:b1:ad:30:8b:20:67:
d6:55:83:4d:e5:5a:0a:f5:b5:a2:94:f7:8a:63:11:
63:fb:e8:e0:47:8a:11:fa:0b:4c:b0:47:6f:0a:16:
e8:8a:5a:ca:fa:37:94:0e:75:3a:a2:17:26:74:95:
a6:40:69:f0:a1:92:db:ef:70:bf:25:cf:6d:a3:3c:
aa:31:1e:95:52:3f:08:a7:fa:ad:7c:31:52:aa:3f:
ec:20:82:f5:09:b8:c1:99:be:c8:cc:94:50:b9:26:
55:0f:0b:ba:95:9b:f1:33:e3:b6:0a:bd:b5:e8:98:
2d:ab:5d:ea:ae:5f:41:02:75:19:ed:c0:0e:80:52:
64:78:02:55:2a:53:d8:32:fb:65:aa:d8:c5:6f:0d:
7e:0c:53:ef:c0:23:09:33:c9:cf:45:13:d4:b3:64:
d0:f6:6a:f7:96:be:7f:45:78:80:bc:e3:e5:cc:52:
62:19:fd:53:5d:d1:fe:32:a1:64:96:17:df:a8:d4:
a7:03:64:4f:c7:69:8f:ba:79:17:ae:64:fe:b2:04:
ed:1f:3d:c0:63:67:81:b9:bd:b5:bc:20:4a:3d:cd:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:E0:28:5C:EB:F7:A6:FD:D5:17:CA:74:BA:51:43:1D:55:F4:D1
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38322e302f32342d3234203d3e20313432313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:73:bb:3b:ae:79:92:52:50:fb:66:f7:49:81:a0:e7:9e:41:
72:03:9e:5a:fc:ed:6f:e0:dd:1a:d7:fd:8e:d0:82:46:fb:96:
c9:96:1c:29:78:56:fc:a9:fa:ed:19:53:21:14:15:c9:56:80:
84:b0:62:a6:25:af:c2:4d:96:97:1a:d3:12:a7:d4:4b:08:cc:
4d:11:3a:07:8d:19:5a:a6:39:f0:90:4e:bc:00:1a:6d:c1:b1:
41:43:76:21:bd:22:c3:31:75:81:1f:b2:fc:09:47:1c:c4:7e:
f8:a8:5f:bf:2d:5f:b6:22:19:36:c8:92:46:a7:87:ad:71:80:
49:97:0d:4a:4a:5a:8b:59:44:5c:2d:ba:a0:04:df:45:b6:1d:
a5:24:ad:e2:d4:0a:8a:09:2d:bf:ef:6d:30:b1:7f:dc:8c:f1:
7f:23:cd:08:06:2f:39:bd:6b:dc:67:f9:c5:1c:e6:42:0c:0f:
a2:2b:06:c0:76:34:1e:56:f5:20:b7:b6:93:06:ae:2b:27:ae:
ab:bf:b8:e8:da:fe:de:ce:87:0e:26:e1:c3:fd:4b:c4:65:35:
dd:0a:4d:97:63:10:2a:26:74:c6:f5:80:3f:56:e4:7e:56:c0:
18:b4:2d:f7:51:77:04:7a:1e:a5:0f:cf:92:c8:a4:2a:9e:5f:
ec:78:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:03:06 2025 by rpki-client