Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e20323132323338.roa
File: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=
Subject key identifier: BC:33:CC:D8:88:36:C4:73:F2:BB:91:A2:BA:F6:7C:E4:11:4A:6F:E9
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 2C27E7AB2B2AFBB3319F75E672994CF9A6DC70C4
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 21 Apr 2025 08:54:03 +0000
ROA not before: Mon 21 Apr 2025 08:49:03 +0000
ROA not after: Mon 20 Apr 2026 08:54:03 +0000
asID: 212238
IP address blocks: 46.183.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 03:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:27:e7:ab:2b:2a:fb:b3:31:9f:75:e6:72:99:4c:f9:a6:dc:70:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Apr 21 08:49:03 2025 GMT
Not After : Apr 20 08:54:03 2026 GMT
Subject: CN=BC33CCD88836C473F2BB91A2BAF67CE4114A6FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:bb:37:d8:3d:cf:ae:ad:46:18:78:3b:90:
d0:d8:c4:65:f0:69:ad:c7:2d:8a:68:1d:55:26:87:
26:9a:7e:ad:04:17:f9:e6:38:62:5e:ce:15:04:ff:
25:0e:40:17:cb:f1:51:f0:24:d3:7c:d9:33:a0:f0:
93:f8:5b:6f:15:ac:e2:b9:73:f2:10:9f:2b:f2:b5:
6d:bc:01:21:0d:66:26:9a:6e:8f:fd:da:89:a7:51:
7d:cb:b0:8e:30:71:f3:97:b7:43:55:06:d2:46:6f:
49:97:f7:12:07:01:d5:e4:73:e7:b6:cb:bd:f7:b2:
ad:6d:14:03:18:43:13:d7:80:27:e2:8d:b1:6b:e3:
51:4e:c0:45:c4:96:6c:45:0e:fe:fc:a1:c0:d5:87:
9c:05:2e:91:75:e6:40:fc:46:0b:a0:22:99:37:dd:
9a:d9:ea:50:79:f8:f8:a5:3c:d8:f2:e7:54:12:3f:
40:98:eb:31:f9:fb:bc:dc:83:57:ea:24:05:c4:48:
a6:e9:05:5e:6a:34:00:8f:66:79:9c:3a:68:3e:34:
88:8f:76:46:29:ce:1b:60:46:7b:23:97:29:7f:dc:
ef:e7:92:83:29:fb:2a:9e:60:d8:33:8f:f1:df:32:
d7:c6:6e:e7:6a:3b:93:e6:65:3c:d1:53:f6:3a:14:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:CC:D8:88:36:C4:73:F2:BB:91:A2:BA:F6:7C:E4:11:4A:6F:E9
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32372e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.27.0/24
Signature Algorithm: sha256WithRSAEncryption
18:bf:1c:24:d7:3f:83:2a:1e:a8:b4:63:5b:dc:7b:fb:26:d4:
13:78:88:ce:eb:20:0b:35:1f:6d:3f:bc:2d:9d:a9:f9:a1:57:
c0:62:d5:cb:22:5f:44:9c:52:f4:76:f0:71:05:2e:1f:54:a0:
d9:15:47:52:ab:1e:73:cd:ff:4f:71:e3:6d:fc:9b:a6:c8:a9:
72:24:0c:f5:33:87:96:d3:5d:9e:c1:b1:79:0f:49:74:98:20:
47:e1:96:c2:22:f1:79:77:cb:b2:73:1e:89:0d:12:78:fb:98:
9c:84:4a:ac:5a:95:9b:6d:f2:b2:36:ec:89:0e:06:5e:10:17:
91:f5:27:a1:15:09:12:f3:4b:ad:33:c6:b8:7c:8d:a1:b7:b5:
6b:e8:5b:7f:c5:be:67:03:38:58:6c:09:18:b0:89:c2:d8:4a:
a0:65:ef:a8:81:60:e2:5c:e5:44:73:a9:9e:ad:35:1c:ee:ec:
40:c9:99:5d:c4:87:83:55:ca:89:b6:ee:45:4c:09:86:32:23:
8e:4a:79:bc:92:4a:e7:97:4b:ba:f9:e7:c8:37:ab:7c:8b:2e:
31:f1:2b:fa:61:cd:2b:8e:7b:76:f9:f0:63:00:13:b8:6d:bb:
2b:a0:3d:b3:38:df:33:f7:04:86:81:4e:f7:3c:01:c5:67:29:
a9:0c:67:33
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULCfnqysq+7Mxn3XmcplM+abccMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNTA0MjEwODQ5MDNaFw0yNjA0MjAwODU0MDNaMDMxMTAvBgNV
BAMTKEJDMzNDQ0Q4ODgzNkM0NzNGMkJCOTFBMkJBRjY3Q0U0MTE0QTZGRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91rs32D3Prq1GGHg7kNDYxGXw
aa3HLYpoHVUmhyaafq0EF/nmOGJezhUE/yUOQBfL8VHwJNN82TOg8JP4W28VrOK5
c/IQnyvytW28ASENZiaabo/92omnUX3LsI4wcfOXt0NVBtJGb0mX9xIHAdXkc+e2
y733sq1tFAMYQxPXgCfijbFr41FOwEXElmxFDv78ocDVh5wFLpF15kD8RgugIpk3
3ZrZ6lB5+PilPNjy51QSP0CY6zH5+7zcg1fqJAXESKbpBV5qNACPZnmcOmg+NIiP
dkYpzhtgRnsjlyl/3O/nkoMp+yqeYNgzj/HfMtfGbudqO5PmZTzRU/Y6FF53AgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvDPM2Ig2xHPyu5GiuvZ85BFKb+kwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt
NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMjM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LrcbMA0GCSqGSIb3DQEBCwUAA4IBAQAYvxwk1z+DKh6otGNb3Hv7JtQTeIjO6yAL
NR9tP7wtnan5oVfAYtXLIl9EnFL0dvBxBS4fVKDZFUdSqx5zzf9PceNt/JumyKly
JAz1M4eW012ewbF5D0l0mCBH4ZbCIvF5d8uycx6JDRJ4+5ichEqsWpWbbfKyNuyJ
DgZeEBeR9SehFQkS80utM8a4fI2ht7Vr6Ft/xb5nAzhYbAkYsInC2EqgZe+ogWDi
XOVEc6merTUc7uxAyZldxIeDVcqJtu5FTAmGMiOOSnm8kkrnl0u6+efIN6t8iy4x
8Sv6Yc0rjnt2+fBjABO4bbsroD2zON8z9wSGgU73PAHFZympDGcz
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:39 2025 by rpki-client