Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20383334.roa
File: 34352e39312e3133362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: cHbOieooNqQPcAEB/9qfoXiI6fiCalJlgqGLjV1pL1M=
Subject key identifier: 7F:84:7D:24:1B:CF:B8:58:46:DF:56:77:97:39:62:0F:4D:15:3E:78
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 62A78539FAB0EED1198CE95FCA8E0F2E8457A06E
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20383334.roa
Signing time: Thu 19 Jun 2025 00:02:46 +0000
ROA not before: Wed 18 Jun 2025 23:57:46 +0000
ROA not after: Thu 18 Jun 2026 00:02:46 +0000
asID: 834
IP address blocks: 45.91.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:a7:85:39:fa:b0:ee:d1:19:8c:e9:5f:ca:8e:0f:2e:84:57:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 18 23:57:46 2025 GMT
Not After : Jun 18 00:02:46 2026 GMT
Subject: CN=7F847D241BCFB85846DF56779739620F4D153E78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:53:44:9c:79:46:b6:e6:ca:71:04:32:99:
a4:34:16:7e:b3:fe:46:6b:a7:03:7d:d2:41:a6:aa:
5b:79:e6:04:96:93:51:3c:8f:bd:2d:61:93:05:0b:
a9:62:c9:13:f0:73:15:f6:01:04:f2:60:a6:d8:a0:
6f:96:4c:4e:be:3f:88:03:73:d8:35:f4:a5:e1:bb:
00:d2:5f:40:59:67:e2:e6:1c:7b:25:43:1c:4b:8c:
dd:3c:7b:65:ba:0e:0d:c6:4d:7f:0e:bf:95:1c:aa:
cf:39:a7:7e:54:44:d3:76:21:5b:5b:d9:89:34:2f:
d0:ea:3f:b2:a8:89:de:f7:de:c5:6e:da:59:8e:a6:
54:ec:e7:07:81:5a:95:27:7f:ec:c9:b8:d6:7c:e6:
9e:94:93:18:d9:11:31:47:f5:6e:ed:e7:d2:2f:60:
bf:a4:e3:3e:cf:ff:81:87:8a:d9:1e:08:31:e2:aa:
08:6e:18:2e:eb:cf:e4:c0:6b:21:2c:21:44:8e:33:
3c:1e:5a:4d:8d:b5:b5:b4:17:de:5a:a2:f9:f4:eb:
2a:1e:18:e3:8b:90:95:50:fe:c6:31:90:7b:b5:5e:
9c:cf:ab:2a:14:36:17:78:bc:4c:68:e8:42:c9:43:
09:ae:9b:00:8f:4d:ca:10:f7:1b:67:c4:49:f8:3a:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:7D:24:1B:CF:B8:58:46:DF:56:77:97:39:62:0F:4D:15:3E:78
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.136.0/24
Signature Algorithm: sha256WithRSAEncryption
30:12:ce:dd:94:8a:4e:4e:07:b4:20:bc:25:50:91:af:32:96:
96:71:0f:28:88:95:96:09:86:35:50:3d:d4:8c:fe:26:d4:89:
43:fc:a4:08:2d:07:e2:fa:3b:7d:f9:25:34:f6:85:94:9c:6b:
47:f0:fd:1c:e7:40:3f:9d:4d:c2:6c:37:9b:42:7f:28:2a:2a:
9a:1e:2d:c5:79:a9:ee:44:b7:53:d5:b3:97:c7:2b:37:25:b2:
cc:f4:f8:9b:ee:d7:dd:81:6b:f1:85:a5:a1:22:15:5d:39:e9:
e8:98:90:ee:59:ca:fe:92:af:1f:18:ad:47:0b:79:7f:fa:f0:
56:30:de:88:fc:da:bd:1c:ac:e0:8a:16:2d:f0:07:35:28:db:
5d:2e:6f:84:8e:26:25:39:2a:89:c4:9b:55:75:0c:e6:77:d7:
e0:93:72:11:d9:12:b7:57:c0:77:a5:d0:e7:81:0b:77:71:86:
7b:48:b7:91:54:ed:d5:39:43:e1:9b:88:ca:cb:eb:71:d2:78:
7a:17:0d:b8:4d:d6:4a:f5:51:1f:11:ad:c3:ff:0d:ca:54:a7:
38:bd:bf:83:dc:2b:83:77:4a:90:8c:15:74:e7:a2:c7:21:04:
f3:9c:a7:a7:23:9c:b8:de:aa:e3:73:98:6a:b4:a6:39:6a:a5:
e3:87:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:12 2025 by rpki-client