Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39372e302f32342d3234203d3e20313432313131.roa
File: 34352e3133372e39372e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier: EtwGXFmeg7ckHy6wtg1nbdBnA53O1inf51iwYvxtdqs=
Subject key identifier: E8:B1:9F:2E:5C:93:95:98:36:C7:65:F1:DD:36:51:10:5B:F3:44:5D
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 3A9E79D6B32B794EDBCDD761D86E7373A06E8227
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39372e302f32342d3234203d3e20313432313131.roa
Signing time: Mon 30 Jun 2025 21:08:37 +0000
ROA not before: Mon 30 Jun 2025 21:03:37 +0000
ROA not after: Mon 29 Jun 2026 21:08:37 +0000
asID: 142111
IP address blocks: 45.137.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9e:79:d6:b3:2b:79:4e:db:cd:d7:61:d8:6e:73:73:a0:6e:82:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 30 21:03:37 2025 GMT
Not After : Jun 29 21:08:37 2026 GMT
Subject: CN=E8B19F2E5C93959836C765F1DD3651105BF3445D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:f7:35:6f:a8:49:9d:0d:14:d4:49:81:e7:
45:fd:92:e4:0b:ab:a5:21:56:0c:45:83:45:8e:83:
49:83:b9:61:40:9d:42:cd:87:5b:20:cb:77:35:a2:
a5:8e:dc:fd:20:0e:1d:16:92:34:8f:e1:75:07:9b:
6c:a8:1f:9b:0a:33:31:26:58:e3:b2:3d:12:cf:0f:
28:03:1c:90:32:c8:1c:e5:f9:da:7f:80:ba:76:e0:
2f:4a:3f:50:bc:5b:cb:0b:aa:86:1d:18:28:33:60:
de:b8:bc:a8:4e:a2:d4:30:ea:ab:fe:45:64:fd:e5:
5c:0b:c6:7a:1a:03:71:23:16:3d:a2:0d:b6:22:44:
9f:25:58:26:80:bf:81:f1:22:27:7d:d2:0f:61:9b:
f6:aa:7a:22:c6:b8:79:26:24:39:9b:f1:87:a7:10:
b5:90:b1:a1:19:35:76:0b:dc:c1:ae:16:5b:e6:8e:
c8:78:70:03:36:4c:b7:19:8c:ad:a2:79:25:21:3e:
7d:81:de:92:e3:bc:d5:d1:32:18:43:71:5d:d1:a5:
6f:bb:46:0d:52:4f:f7:19:0e:b1:a9:69:ed:44:5f:
6a:ea:1d:c0:88:bc:73:5f:9a:37:64:6b:91:c8:84:
b9:45:8d:39:8c:24:b4:92:af:72:9c:10:40:cf:d0:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B1:9F:2E:5C:93:95:98:36:C7:65:F1:DD:36:51:10:5B:F3:44:5D
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39372e302f32342d3234203d3e20313432313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:0b:78:c0:1c:d9:da:21:2d:b7:70:1a:5a:52:48:ef:e9:d4:
4b:4b:79:e3:8c:7f:49:e8:95:78:5e:49:76:8e:c5:b4:6d:fe:
ac:1e:d8:c2:0a:4e:90:23:3e:dc:d4:d6:3c:a2:c0:a2:30:db:
01:e5:ef:e6:0b:78:88:40:85:41:65:a7:c9:69:ad:33:84:c5:
b5:5e:2a:2e:45:7b:ac:31:80:2d:d4:13:7c:19:02:a7:17:02:
13:00:d2:4e:55:54:91:14:35:24:c1:b5:9f:f7:13:f4:47:b4:
e7:f2:55:14:94:f8:53:11:f5:44:37:7f:01:6f:cc:16:e7:4e:
be:27:81:77:7b:b9:1d:d2:b8:25:e2:a7:ab:02:cb:f0:cd:b0:
a2:62:a6:bd:b1:01:0b:f0:c6:0e:20:a7:64:65:d9:c4:00:f5:
4a:88:54:89:a4:d8:87:d6:dc:6a:1c:4b:29:b6:25:4a:b9:56:
2e:2b:e4:7e:04:a7:c1:80:6a:a8:61:65:cb:bb:d0:b1:b2:c8:
db:78:89:4a:91:f1:51:49:97:b3:ec:d2:8e:8c:4f:84:db:5c:
95:55:e7:06:a0:8e:71:dd:53:d9:7b:d1:13:95:86:19:1f:b7:
59:ad:08:93:e6:52:13:ce:99:c0:6e:be:46:a4:3b:0c:5f:c7:
19:14:4c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:44:15 2025 by rpki-client