Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa
File: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=
Subject key identifier: 65:AD:0D:63:0A:5E:3C:AB:C7:1C:AA:DC:BC:B2:37:C1:28:23:0E:B4
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 330CEBC0C6B142C3D491EFF7B2664DFC707EE7FD
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa
Signing time: Thu 24 Apr 2025 21:16:02 +0000
ROA not before: Thu 24 Apr 2025 21:11:02 +0000
ROA not after: Thu 23 Apr 2026 21:16:02 +0000
asID: 61317
IP address blocks: 178.132.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 01:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:0c:eb:c0:c6:b1:42:c3:d4:91:ef:f7:b2:66:4d:fc:70:7e:e7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Apr 24 21:11:02 2025 GMT
Not After : Apr 23 21:16:02 2026 GMT
Subject: CN=65AD0D630A5E3CABC71CAADCBCB237C128230EB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:cf:ee:aa:8a:df:ca:29:21:41:9b:b0:e0:
d6:1a:b3:53:40:ac:00:c1:8f:79:72:66:9c:12:e2:
39:d1:6a:3d:ea:e5:ef:7e:2b:5e:18:f0:37:36:4d:
24:14:f2:ca:0a:74:81:61:9e:68:35:44:a0:32:22:
b7:07:17:9d:6a:75:5c:41:0e:c6:a9:10:1c:6c:50:
8f:9c:b9:0c:1a:dc:61:8f:6d:06:a5:79:e1:50:00:
04:40:8d:26:49:7b:bf:09:63:d7:54:7f:52:04:7e:
89:63:f7:49:d8:42:25:08:4f:ce:a8:8d:ac:5f:d2:
6c:40:9b:e2:e2:9f:ae:49:48:9d:d8:e9:9f:2b:cd:
44:bc:aa:3a:59:03:5b:5b:93:2f:51:e1:89:a9:a0:
79:99:f3:36:07:20:f2:83:48:2d:a1:4a:a2:35:ef:
0d:1d:a4:fc:38:1a:ea:a3:84:df:3f:f6:50:2d:e1:
c7:ae:cf:58:a7:03:14:fc:9c:c6:cd:d0:3d:b2:bd:
9c:f0:79:00:06:8c:c2:c1:99:b8:5d:e6:a1:d1:8f:
49:71:59:15:71:b6:ba:0d:11:23:d9:73:36:9f:8e:
f4:5d:c6:1c:8b:fd:fc:f8:ba:7d:5e:57:a7:10:cd:
f6:d9:3d:c0:04:7e:cd:1c:d4:8f:46:73:0d:c7:59:
47:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AD:0D:63:0A:5E:3C:AB:C7:1C:AA:DC:BC:B2:37:C1:28:23:0E:B4
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:7f:3e:cb:ba:54:8a:82:fe:a5:c4:af:08:46:97:bc:cf:cf:
95:8c:5c:8c:70:ae:e2:39:2e:94:63:37:b0:da:64:f3:57:37:
24:76:99:02:ed:9e:60:8d:05:33:63:b7:e5:4d:7e:14:9b:b4:
61:d8:9c:86:eb:df:ec:c0:85:76:98:dc:b7:95:34:c0:3e:90:
91:e9:ae:80:c5:7e:18:4a:2a:61:94:6b:07:9c:54:bb:be:cd:
ce:6f:0f:a5:bd:dd:4b:d7:4b:d1:66:21:e6:72:3f:ea:61:46:
ed:41:e0:47:b9:ea:d4:a9:71:9c:ff:10:c3:6f:d8:ff:74:67:
fe:8d:f7:46:48:53:81:35:35:13:5b:3a:d1:9b:fb:57:66:5d:
a9:96:d9:b7:f2:54:92:a7:b0:87:b3:ca:5a:2a:bd:5d:92:c1:
0e:a0:9a:34:b2:54:db:ac:39:1d:e5:2e:ab:7d:a8:0e:54:da:
13:f3:ca:ca:3d:c3:fb:5b:75:e3:e2:bc:ca:38:79:6f:2d:f7:
ca:1d:33:dd:9e:c4:db:d4:ca:bc:ab:f0:88:68:14:4d:90:66:
cd:3d:14:65:5d:4a:12:8d:43:df:e0:87:92:f0:6a:38:63:85:
bf:fe:71:79:22:af:a3:d1:a3:8d:ee:ca:2d:fd:1b:09:a8:76:
61:1a:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:29 2025 by rpki-client