Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa
File: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (raw, json)
Hash identifier: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=
Subject key identifier: 16:D6:BE:9E:F4:E7:D7:2A:B0:7B:06:FB:E3:BD:2A:AD:94:45:C9:7E
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 2BB7221AA44B0579F4988AD52435EBE2E1654A94
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa
Signing time: Tue 22 Apr 2025 06:57:22 +0000
ROA not before: Tue 22 Apr 2025 06:52:22 +0000
ROA not after: Tue 21 Apr 2026 06:57:22 +0000
asID: 211415
IP address blocks: 95.214.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b7:22:1a:a4:4b:05:79:f4:98:8a:d5:24:35:eb:e2:e1:65:4a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Apr 22 06:52:22 2025 GMT
Not After : Apr 21 06:57:22 2026 GMT
Subject: CN=16D6BE9EF4E7D72AB07B06FBE3BD2AAD9445C97E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:15:ed:e9:a4:32:5a:c5:a0:36:cb:4a:c5:
4f:9c:0c:be:0b:cc:64:e4:52:8d:98:cf:22:76:9b:
8e:a7:62:e5:05:dc:ea:42:20:cd:bc:36:72:cd:f6:
c4:37:3f:8f:dd:1b:5f:7b:4d:8e:df:66:6f:e5:4f:
38:28:ba:99:a2:fa:a2:b3:a1:4c:31:93:f5:02:c1:
d6:f3:cd:86:1a:fc:e2:46:b2:ff:97:42:87:fe:c8:
58:43:e1:a5:20:a2:52:f9:20:5e:94:e4:93:5c:68:
62:2a:d1:e1:61:10:75:eb:d3:df:6e:79:32:dc:a5:
45:9b:bc:44:1f:ec:ec:ad:a2:5d:8f:11:47:f3:49:
3e:0c:c1:e0:43:e5:c1:96:ea:af:cc:20:09:3e:28:
25:4c:47:b2:f6:ee:7f:5e:f1:97:c1:8d:f8:60:b2:
8e:29:48:11:db:b1:a8:37:4f:e8:e0:c0:61:b6:36:
86:bc:ef:8f:d8:cd:c9:bb:73:8b:9e:9f:bd:8e:81:
48:3c:9d:21:20:ba:1c:ac:95:4f:c0:33:07:bd:a8:
28:39:fe:a8:76:73:3a:bf:e1:2e:a4:7b:22:81:69:
fe:2a:64:9e:4c:60:d2:44:ab:8c:0f:85:75:d9:dc:
4a:fb:a7:e7:b5:c3:3f:82:56:85:47:d4:ab:9a:33:
2d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D6:BE:9E:F4:E7:D7:2A:B0:7B:06:FB:E3:BD:2A:AD:94:45:C9:7E
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.182.0/24
Signature Algorithm: sha256WithRSAEncryption
19:22:ee:aa:dc:de:d0:33:7e:0a:7a:50:58:8c:6f:d3:8b:bd:
43:00:78:66:2e:76:2c:75:00:94:f2:b4:10:9f:50:3b:af:e4:
9f:0d:13:4f:bf:64:aa:7e:7d:37:37:59:67:9e:09:46:0c:0b:
33:83:ca:9b:90:cf:f8:d8:9d:df:66:c0:2a:ff:a2:bb:23:95:
4f:12:86:c0:e9:b6:cf:c8:1d:1f:39:b0:03:25:21:c2:48:61:
95:ec:57:43:0f:7f:90:96:87:f9:0f:bd:3d:ce:28:e2:29:7a:
14:3a:16:3c:10:65:97:fa:ac:7c:ab:90:de:37:c8:e7:4d:c9:
4d:5f:9f:66:60:04:a1:d8:f2:46:f1:ac:10:77:33:fe:b2:da:
cd:84:d4:f0:2f:19:d2:e6:cd:75:44:d4:17:95:07:94:69:fb:
b3:0a:42:3f:10:dc:87:0a:ed:d1:f4:f6:06:f8:fe:49:fc:a4:
b7:ce:85:5f:cc:0c:4e:dd:ab:95:45:3d:83:c3:53:34:01:80:
38:4b:dd:b3:81:dc:71:4c:9b:d8:31:94:61:a3:3d:e0:3b:b9:
23:2c:f2:14:cb:b2:cd:0a:d5:99:d5:59:af:fc:a3:86:12:ee:
42:65:1a:1f:02:8f:c1:3e:ab:57:e8:ac:30:d3:38:01:ff:e4:
49:c5:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:11 2025 by rpki-client