Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
File: 34352e31332e3135302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: bs6oQRpsOynYG4VywnxScHIvv6AZiyg/KXJnkS+Rmyg=
Subject key identifier: B3:EC:BE:A6:52:77:22:DA:30:41:B2:2B:44:D4:0C:E9:07:2B:8C:BB
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 2E10030F8196725E7F4F26EE8B1A05D0963A8A4F
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
Signing time: Thu 01 May 2025 00:03:52 +0000
ROA not before: Wed 30 Apr 2025 23:58:52 +0000
ROA not after: Thu 30 Apr 2026 00:03:52 +0000
asID: 834
IP address blocks: 45.13.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:10:03:0f:81:96:72:5e:7f:4f:26:ee:8b:1a:05:d0:96:3a:8a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Apr 30 23:58:52 2025 GMT
Not After : Apr 30 00:03:52 2026 GMT
Subject: CN=B3ECBEA6527722DA3041B22B44D40CE9072B8CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:b8:e2:2e:a1:d2:7f:4b:09:ac:f3:ea:30:
14:e3:7d:24:36:00:d7:03:e7:24:2c:90:61:e2:3c:
7c:e0:fc:9d:16:c3:c5:e0:fc:03:29:08:13:00:96:
6f:8a:6f:2d:39:6c:ec:25:b9:72:12:54:69:cb:6a:
72:5e:ae:63:87:82:01:cc:05:fe:19:1e:c9:e4:41:
41:8f:0e:a6:4c:15:63:36:17:9a:b3:2b:54:5c:85:
b8:d7:b5:62:b4:d5:7a:36:00:16:cf:d8:e0:79:4c:
9a:40:35:a2:21:0f:2a:2f:b3:c9:ea:41:9e:ed:05:
8c:32:93:81:fc:39:4e:12:d3:de:0f:87:6a:2b:c8:
bc:bf:07:02:cf:58:b6:47:a3:0d:10:1e:c7:f7:89:
e6:31:2b:41:fc:8c:b8:8b:94:b9:79:4d:cd:00:6e:
b1:17:23:b8:04:e4:f0:7a:f1:a0:dd:59:21:5f:fc:
3c:54:7d:bf:bc:b4:49:16:6d:47:f4:11:10:52:91:
b1:8e:d9:c2:de:4b:12:42:cf:7b:80:51:df:68:7a:
39:67:5f:41:b3:a1:e7:99:64:ba:04:40:5b:dc:a5:
c8:6d:23:1e:aa:65:5d:64:ef:4d:38:6e:6c:a6:3c:
a5:fa:d6:0f:39:d3:02:3b:c1:cb:64:3d:51:5c:01:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EC:BE:A6:52:77:22:DA:30:41:B2:2B:44:D4:0C:E9:07:2B:8C:BB
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ce:9c:9c:39:79:0e:fc:8a:c3:bc:64:34:74:10:0a:e0:19:
15:a9:6b:18:9f:2f:8f:36:cf:e6:fc:a5:a2:f8:1f:10:58:3b:
e6:ac:03:bd:6e:29:21:c2:d8:c7:6c:b6:46:c0:3b:d1:80:14:
ad:45:59:0f:cf:3f:b5:2c:6b:c3:2d:5b:9b:11:00:fe:6d:70:
9d:cc:10:4d:9a:6c:b9:c6:4d:23:7b:ba:81:e4:63:0a:56:d1:
61:83:29:9b:3e:5b:15:99:33:70:b9:bf:a7:2f:b0:64:1b:e9:
b3:80:b1:0e:de:94:f2:e7:60:2a:1a:20:ab:60:9e:05:c7:75:
cc:9c:e4:52:81:da:dc:4c:d4:41:cf:61:6d:5b:58:13:2b:d4:
44:27:29:e4:28:c0:9d:b9:38:8f:d0:f1:ae:0f:26:6f:17:97:
d0:eb:0b:26:c8:ee:0b:c1:bc:96:1f:b7:98:6d:51:58:52:f0:
5f:99:01:7b:58:ba:03:71:3c:c0:40:51:74:c5:cc:57:93:dd:
80:e0:f6:1c:e5:d6:4f:7a:5d:c0:39:31:52:77:98:ef:30:5e:
e8:5e:e2:83:d3:ae:67:95:b6:00:91:5c:62:15:72:71:26:49:
b0:87:4b:ac:35:db:5b:cd:19:83:51:ac:bf:39:ac:ac:b8:f7:
1d:52:15:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:24:46 2025 by rpki-client