Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e2039333034.roa
File: 34352e3134392e3135342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: 4wkeXpaub5nHarEFj5V5yRbPz3/jSF6R+paLLX1QL+0=
Subject key identifier: DB:79:F1:18:25:AC:95:96:A7:34:9A:0F:D1:09:18:93:DA:02:9F:BC
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 4A8012FAA8433842FD41714E191BBF56EAD424E9
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e2039333034.roa
Signing time: Fri 20 Jun 2025 09:35:12 +0000
ROA not before: Fri 20 Jun 2025 09:30:12 +0000
ROA not after: Fri 19 Jun 2026 09:35:12 +0000
asID: 9304
IP address blocks: 45.149.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:80:12:fa:a8:43:38:42:fd:41:71:4e:19:1b:bf:56:ea:d4:24:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Jun 20 09:30:12 2025 GMT
Not After : Jun 19 09:35:12 2026 GMT
Subject: CN=DB79F11825AC9596A7349A0FD1091893DA029FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:83:3d:ee:3d:34:6e:ca:04:a7:e2:f6:64:18:
35:fa:49:04:28:0f:ab:23:bb:9f:a6:55:e3:47:af:
da:11:ba:d6:2e:0a:cc:9a:08:64:e0:22:03:70:c4:
57:38:96:e6:1d:d2:f5:ac:7d:0c:5a:8c:11:85:b1:
7b:bf:3d:92:3c:f5:df:96:60:d2:c7:4c:6a:30:83:
8e:15:e3:a1:31:f0:59:04:e9:62:09:88:2a:f2:ae:
18:5b:f0:a8:36:5d:00:02:28:c4:8b:84:23:e4:17:
5e:31:43:48:4a:81:56:4d:7b:67:66:6a:82:8f:f9:
5d:88:96:c9:9d:52:2f:86:af:5a:1c:d1:df:0d:8e:
40:d5:84:2f:19:37:8d:c1:0e:4b:79:01:c9:a7:6e:
64:f6:dc:a8:77:16:f5:e9:4d:a9:87:65:43:7b:c0:
68:15:93:5e:a9:41:21:b4:49:29:53:b3:08:c4:95:
4e:cf:8b:b2:9f:c1:df:f2:b9:22:85:61:e4:f3:39:
c5:12:7d:04:08:3a:b4:5d:8b:2c:01:e8:fc:d9:4d:
50:fa:cb:4c:20:e0:e2:47:f5:15:71:66:4d:55:bd:
58:42:ec:b9:5c:3e:2a:9a:c4:d0:94:2b:73:d2:25:
43:c9:58:cc:28:21:7d:ee:19:47:98:3b:93:cd:92:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:F1:18:25:AC:95:96:A7:34:9A:0F:D1:09:18:93:DA:02:9F:BC
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.154.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:72:9e:9f:94:f7:7f:b0:a1:13:04:b6:d9:15:fb:6c:37:99:
10:49:9b:29:f4:37:65:7a:bd:ac:84:57:8b:9a:a4:8a:74:20:
92:1c:c8:9d:30:ff:07:81:d1:ed:0f:4c:5a:ed:d3:af:c8:9b:
dc:e4:7f:af:b3:db:63:03:37:25:de:57:4e:5c:a9:4e:37:94:
5d:7e:7a:bc:8b:01:4e:bd:79:d7:1e:de:30:08:7e:6b:5a:56:
36:3d:d9:41:c6:11:f7:24:d8:9d:4b:6c:47:52:a5:29:6b:3c:
c4:8d:e4:ac:95:88:16:65:79:fe:f3:d3:7d:35:36:de:4b:5e:
ca:dd:85:2a:54:43:8f:cc:fc:78:db:a8:6b:08:f7:cf:39:fc:
c8:5f:03:70:29:11:87:24:85:e5:fc:ed:f7:81:cf:80:75:53:
6b:00:67:3f:c4:4f:79:42:64:77:1f:a5:04:34:2a:e6:d4:30:
cb:f7:b7:e6:62:48:28:db:53:1a:af:14:cf:9d:ec:37:93:9c:
48:af:09:b7:97:b1:b3:52:8e:3e:3f:97:ee:5a:f5:5a:9d:4d:
d6:08:58:21:e6:74:18:95:c7:2a:5d:ee:be:75:f6:5f:d4:bf:
d9:cb:55:fe:e3:0c:7e:0b:f0:d8:51:5a:7d:42:d6:10:49:43:
30:67:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:58:34 2025 by rpki-client