Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa
File: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (raw, json)
Hash identifier: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=
Subject key identifier: 69:59:02:BE:06:CF:22:67:1C:A3:B4:F3:69:73:9C:31:24:76:E0:44
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 538B067A988498D05A79154F07FD6800C437A9C0
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa
Signing time: Tue 22 Apr 2025 06:57:23 +0000
ROA not before: Tue 22 Apr 2025 06:52:23 +0000
ROA not after: Tue 21 Apr 2026 06:57:23 +0000
asID: 214466
IP address blocks: 95.214.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 11:05:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8b:06:7a:98:84:98:d0:5a:79:15:4f:07:fd:68:00:c4:37:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Apr 22 06:52:23 2025 GMT
Not After : Apr 21 06:57:23 2026 GMT
Subject: CN=695902BE06CF22671CA3B4F369739C312476E044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:d4:2f:d0:6c:24:55:1a:20:0e:90:56:5b:
31:5e:75:6b:50:5c:ef:4a:df:65:dc:2a:87:ed:08:
50:f2:47:2b:74:f1:ce:9f:74:b9:f0:3b:12:6b:25:
18:6f:15:a8:65:45:f8:79:69:5f:1a:9c:0a:77:f2:
01:be:d8:0a:ee:73:b9:90:45:e0:0c:12:22:e0:97:
08:9d:ed:d3:83:6d:7b:03:eb:f8:b4:15:a1:2d:c3:
9c:78:13:4c:ff:36:e6:4f:2d:70:d2:73:60:fd:80:
1a:d2:00:ac:b4:af:74:27:42:74:16:22:b1:32:7c:
27:25:ec:45:10:30:c6:60:df:8e:05:87:3f:41:07:
a6:a5:a6:56:a9:12:70:7a:93:ea:5f:d3:59:c7:c6:
fd:e6:aa:62:4e:c7:95:91:20:d3:dc:3c:d7:38:ff:
e2:08:f2:1d:c2:87:eb:c0:16:a3:92:15:7b:73:ca:
23:4b:1a:d5:e0:bf:ca:43:06:51:77:62:42:40:1f:
a3:26:36:8c:c7:d9:58:d7:ef:56:5a:86:b8:a0:90:
5e:cf:38:17:8c:26:cd:58:48:ab:89:f2:f5:9b:6e:
b6:8f:e9:c3:71:e4:4c:27:29:44:57:16:19:70:1c:
fe:73:fb:18:8f:1d:1e:64:bc:b3:c4:11:95:45:ac:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:59:02:BE:06:CF:22:67:1C:A3:B4:F3:69:73:9C:31:24:76:E0:44
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.174.0/24
Signature Algorithm: sha256WithRSAEncryption
50:18:a2:de:a0:69:70:74:51:68:2d:8d:bd:31:31:e9:95:7a:
55:c9:05:cd:37:09:73:21:ed:ec:7c:05:d3:64:e2:0c:30:52:
93:3b:10:bc:46:71:d4:79:a2:20:c9:d3:d1:72:49:da:20:bc:
4a:17:11:2b:39:d8:49:45:de:88:77:b4:1b:25:54:1d:f8:c1:
a1:0e:06:6c:70:73:61:61:0e:25:3b:12:47:af:41:73:20:80:
92:93:b2:ba:77:15:e7:eb:5c:47:3d:aa:0d:d9:ed:32:d1:67:
c0:b1:bc:78:89:5d:07:f8:8f:e4:93:1d:9d:cc:73:5b:c7:2f:
3c:42:4d:88:8c:78:03:4f:2d:b9:b7:d3:54:fb:64:37:3a:85:
7b:af:5b:8b:9c:ff:1e:d3:b8:50:e2:5c:f5:43:d5:64:0a:2a:
0d:b8:28:4c:3f:af:cb:ea:65:57:4a:05:66:6c:7a:42:88:f3:
f0:af:47:cc:55:a7:13:93:5e:3f:b4:e9:dc:0f:14:07:ae:28:
ce:35:80:ed:d1:34:83:2f:27:9a:55:77:f7:e9:15:64:0c:70:
b3:41:d4:d9:30:59:88:db:f8:4c:ff:6f:d0:06:8f:90:30:2c:
66:48:22:48:c7:90:bd:88:f7:5d:a0:e1:27:fc:6f:53:8f:e3:
51:74:75:2f
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUU4sGepiEmNBaeRVPB/1oAMQ3qcAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4
MGM5MGI5NDAeFw0yNTA0MjIwNjUyMjNaFw0yNjA0MjEwNjU3MjNaMDMxMTAvBgNV
BAMTKDY5NTkwMkJFMDZDRjIyNjcxQ0EzQjRGMzY5NzM5QzMxMjQ3NkUwNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcqdQv0GwkVRogDpBWWzFedWtQ
XO9K32XcKoftCFDyRyt08c6fdLnwOxJrJRhvFahlRfh5aV8anAp38gG+2Aruc7mQ
ReAMEiLglwid7dODbXsD6/i0FaEtw5x4E0z/NuZPLXDSc2D9gBrSAKy0r3QnQnQW
IrEyfCcl7EUQMMZg344Fhz9BB6alplapEnB6k+pf01nHxv3mqmJOx5WRINPcPNc4
/+II8h3Ch+vAFqOSFXtzyiNLGtXgv8pDBlF3YkJAH6MmNozH2VjX71ZahrigkF7P
OBeMJs1YSKuJ8vWbbraP6cNx5EwnKURXFhlwHP5z+xiPHR5kvLPEEZVFrAg3AgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUaVkCvgbPImcco7TzaXOcMSR24EQwHwYDVR0j
BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw
M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E
SkM1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt
MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM3
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNDM2MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABf1q4wDQYJKoZIhvcNAQELBQADggEBAFAYot6gaXB0UWgtjb0xMemVelXJBc03
CXMh7ex8BdNk4gwwUpM7ELxGcdR5oiDJ09FySdogvEoXESs52ElF3oh3tBslVB34
waEOBmxwc2FhDiU7EkevQXMggJKTsrp3FefrXEc9qg3Z7TLRZ8CxvHiJXQf4j+ST
HZ3Mc1vHLzxCTYiMeANPLbm301T7ZDc6hXuvW4uc/x7TuFDiXPVD1WQKKg24KEw/
r8vqZVdKBWZsekKI8/CvR8xVpxOTXj+06dwPFAeuKM41gO3RNIMvJ5pVd/fpFWQM
cLNB1NkwWYjb+Ez/b9AGj5AwLGZIIkjHkL2I912g4Sf8b1OP41F0dS8=
-----END CERTIFICATE-----
Generated at Thu May 1 20:55:43 2025 by rpki-client