Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa
File: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=
Subject key identifier: 0C:54:FC:AB:A7:55:DA:55:07:55:11:61:54:3D:94:77:FC:91:1E:FE
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 5C68E46BDFB3065427E2F2DFA478180D51DF7959
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa
Signing time: Mon 02 Jun 2025 12:24:48 +0000
ROA not before: Mon 02 Jun 2025 12:19:48 +0000
ROA not after: Mon 01 Jun 2026 12:24:48 +0000
asID: 212238
IP address blocks: 185.91.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:68:e4:6b:df:b3:06:54:27:e2:f2:df:a4:78:18:0d:51:df:79:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Jun 2 12:19:48 2025 GMT
Not After : Jun 1 12:24:48 2026 GMT
Subject: CN=0C54FCABA755DA5507551161543D9477FC911EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:75:28:a4:e9:3e:d5:a1:4a:0c:a6:ed:a7:
8c:c5:6b:a5:c8:83:90:0e:d3:c9:d8:41:f1:94:3a:
ad:37:2b:6a:75:32:e5:42:db:0e:03:fa:8a:7e:95:
3a:7b:b8:f3:dc:f0:ee:8b:26:7d:7e:82:db:2d:8b:
9d:94:c0:ad:36:f6:c9:ab:f8:56:b8:8c:62:b4:c2:
7f:d6:33:1f:fd:a4:d2:d4:91:2e:7f:fc:8b:0c:20:
41:f9:fa:79:4c:90:4c:db:54:0c:4b:1c:24:35:07:
4d:25:1c:85:62:02:ed:11:e0:4d:b3:c1:6c:6f:04:
8d:0d:e5:bd:bd:a8:01:f8:8c:05:eb:35:24:4d:79:
e1:a1:04:f2:08:dc:be:e6:4b:fa:b1:98:49:cb:b6:
d7:8c:ce:62:4c:c4:96:07:d7:0b:ee:47:55:9a:08:
58:de:37:cc:79:fa:b7:f5:3b:34:34:92:43:37:8d:
97:9d:24:d0:3c:d1:be:a6:6d:e7:71:21:23:bc:9c:
ed:cd:58:2d:51:ee:b7:9a:8b:da:a8:d7:f2:32:e7:
5f:3b:fd:be:af:c9:67:d0:fe:b2:10:38:9e:a2:fd:
91:f5:8f:18:e4:17:2d:64:bc:55:13:07:8d:92:ae:
5e:16:b1:73:23:77:02:52:c4:a6:85:87:a8:01:05:
22:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:54:FC:AB:A7:55:DA:55:07:55:11:61:54:3D:94:77:FC:91:1E:FE
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:fe:b6:ff:07:1d:a1:9a:d5:c9:39:e4:83:dd:73:5f:a9:75:
2b:34:0a:ea:4e:f1:50:c1:06:51:fd:dd:00:fb:8c:e2:8a:da:
3b:29:d1:57:4a:f4:60:ef:46:0b:14:be:94:15:23:79:0c:e5:
d2:be:d4:16:ac:49:f4:55:18:ae:36:8e:49:b6:ac:8e:31:8c:
4e:e3:44:75:5a:e2:4d:4d:84:ef:ab:ff:08:12:f0:24:25:41:
f6:99:0d:60:c0:67:17:07:6e:2e:68:f3:43:a5:20:cd:cd:4b:
71:59:5a:80:84:a1:3b:8a:35:8a:12:65:e8:33:8e:61:3f:ed:
5f:8f:19:be:82:fa:5d:0d:b0:57:a8:f4:b8:ec:47:ed:f5:73:
a5:7d:f5:6d:91:7f:fa:b7:89:9e:c6:13:39:e3:ff:67:ff:e7:
22:7d:af:17:90:9c:7f:a1:82:f7:d6:6f:07:09:70:13:fe:73:
e7:0f:98:ac:db:13:3f:8c:fa:2c:60:23:8b:14:32:0b:2f:b8:
7c:0e:24:66:66:ee:e5:67:2f:ab:ba:e8:df:32:37:3e:cb:17:
c8:ad:7c:d8:4f:30:5c:45:f2:ec:3d:92:fe:d9:92:7d:05:a4:
6c:6b:88:3e:68:8b:a4:2e:12:05:3e:cc:77:a3:1a:2e:63:d0:
48:32:46:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:22:51 2025 by rpki-client