Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203138313836.roa
File: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (raw, json)
Hash identifier: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=
Subject key identifier: B2:5E:71:81:9A:2E:2A:4A:BD:2C:0A:92:A8:4D:40:D2:1E:EB:EB:7B
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 6A25CECA23A2A9874E82635CF7F29C899EDBA3BE
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203138313836.roa
Signing time: Tue 27 May 2025 12:01:50 +0000
ROA not before: Tue 27 May 2025 11:56:50 +0000
ROA not after: Tue 26 May 2026 12:01:50 +0000
asID: 18186
IP address blocks: 85.209.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:25:ce:ca:23:a2:a9:87:4e:82:63:5c:f7:f2:9c:89:9e:db:a3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: May 27 11:56:50 2025 GMT
Not After : May 26 12:01:50 2026 GMT
Subject: CN=B25E71819A2E2A4ABD2C0A92A84D40D21EEBEB7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:ed:94:e5:35:e0:ad:c8:49:6a:e0:ad:c3:
0d:81:ff:4e:c9:fc:38:05:b5:d7:56:ba:4f:96:ee:
2d:52:24:bd:ea:87:6e:9a:5c:8e:38:d1:8c:ad:47:
0d:ce:db:36:ed:d5:ef:4a:f5:e5:d2:84:4f:3d:50:
c2:ad:fd:7d:0e:5c:88:78:79:41:86:cc:42:e1:50:
4a:1c:90:49:5b:70:ab:00:fe:89:f0:fe:f2:55:9b:
ea:d3:3d:71:92:cd:ca:28:b5:4e:f0:2d:16:df:14:
f8:3c:3a:bf:40:72:5a:13:f4:5c:bd:2b:e2:e0:fa:
49:5a:fd:63:5f:c3:6a:40:9f:a4:de:26:f6:a4:bd:
3d:82:91:df:a7:59:f5:3e:57:f4:0b:ca:a8:2a:dd:
af:05:50:ed:9d:17:37:be:82:2c:9a:01:70:61:b8:
70:c4:5c:4f:db:aa:e3:2e:2a:65:3d:29:5d:08:fa:
8e:2b:58:bc:32:f7:7b:50:e2:8f:f8:09:cb:ab:ac:
ec:19:6b:1a:cb:e0:97:27:86:77:c6:96:06:b7:f7:
c6:d6:8a:9c:2e:b4:1b:73:21:f0:fa:f0:3d:80:2b:
bc:db:87:4e:ab:a6:59:46:88:4a:aa:63:9e:6c:5e:
9a:b2:b2:14:2d:a1:ce:04:59:53:98:9f:96:66:57:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:71:81:9A:2E:2A:4A:BD:2C:0A:92:A8:4D:40:D2:1E:EB:EB:7B
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/38352e3230392e3233302e302f32342d3234203d3e203138313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2d:02:72:67:9e:3c:4b:a4:52:f9:8d:6d:63:fc:40:0a:24:
78:d0:95:c0:70:d0:f9:6f:ea:c1:ed:d5:4d:27:c0:e7:44:2c:
e7:87:b5:8c:21:f5:19:7c:60:51:35:6c:2e:ca:76:ba:5b:b6:
6e:4c:ae:57:6f:7e:7a:22:bb:32:28:6a:97:10:2c:50:b3:45:
56:d7:01:84:b8:74:30:a5:54:ac:96:56:e7:f8:f1:48:96:86:
eb:30:7c:3c:9e:b5:e0:9c:77:81:e2:93:72:56:03:76:6c:1f:
c7:bd:29:50:af:52:3f:fe:52:26:df:79:66:b0:4f:fa:17:d2:
40:53:32:a7:1f:55:dc:06:75:b5:54:b4:0a:56:d6:71:9b:27:
5f:01:a8:6e:02:fe:99:c9:e1:3b:67:27:15:01:ad:f2:09:02:
44:3a:bb:0f:c9:d2:9f:19:98:34:62:de:c6:1a:b0:ed:f7:91:
41:66:10:9b:c5:5b:e9:42:23:8e:8b:38:3f:e0:01:e3:7c:86:
ff:4b:18:26:fe:83:40:fd:21:07:63:00:f5:31:25:79:ce:34:
c8:8f:63:6e:f7:94:14:9c:37:32:c3:85:62:3f:66:72:34:e1:
79:4e:f4:d8:b2:c1:1f:0c:a5:22:b0:41:b0:78:5d:a2:80:e6:
b3:1a:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:03:21 2025 by rpki-client