Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33352e302f32342d3234203d3e20313337353137.roa
File: 3138352e39332e33352e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: 5Vt6h1rYO92pXFO3Ud88dC3fR5MbjWavEkK6QPolqVE=
Subject key identifier: F2:13:F8:BF:96:D3:40:AE:FF:E4:CF:21:E8:AE:BC:82:61:2D:84:0E
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 050A9FFFA5315EB92352629A8232F039C6A6EBF2
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33352e302f32342d3234203d3e20313337353137.roa
Signing time: Fri 06 Jun 2025 01:47:55 +0000
ROA not before: Fri 06 Jun 2025 01:42:55 +0000
ROA not after: Fri 05 Jun 2026 01:47:55 +0000
asID: 137517
IP address blocks: 185.93.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:0a:9f:ff:a5:31:5e:b9:23:52:62:9a:82:32:f0:39:c6:a6:eb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jun 6 01:42:55 2025 GMT
Not After : Jun 5 01:47:55 2026 GMT
Subject: CN=F213F8BF96D340AEFFE4CF21E8AEBC82612D840E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:2b:0b:b9:d5:f7:b6:3e:d2:de:07:3a:a0:
f8:05:d4:f3:14:36:7c:90:21:fb:02:28:7e:80:83:
6f:47:fe:4b:55:d7:d9:57:0b:3d:3e:9d:74:59:13:
49:0a:2a:48:40:41:7a:24:90:f5:1b:fe:0f:e5:5b:
60:ad:a6:80:a2:47:b3:82:36:38:1d:06:28:eb:d8:
8d:d6:cf:63:6a:4b:73:4e:c9:72:e2:fd:e5:91:ca:
86:d3:46:1b:71:b0:6f:fb:bd:e3:f7:09:e3:74:60:
c7:6d:21:a0:fa:af:3e:95:0e:cb:ef:88:60:e5:d5:
6a:3c:09:b8:5a:3a:57:66:ac:e1:a2:a1:16:7c:a8:
b7:9a:70:d6:7a:1a:7d:1d:ac:f2:b4:43:3c:41:3b:
46:80:d5:b2:87:25:78:d1:71:7c:a1:1a:77:68:7a:
18:29:cc:84:17:64:0c:8b:9a:46:1a:b0:7c:c0:2a:
71:8e:35:e3:05:f2:2a:d1:3a:03:3d:39:ec:b1:db:
7b:13:19:e1:2b:53:35:d2:be:45:4d:86:89:dd:8e:
cd:9d:3a:6c:1c:b5:14:d3:a1:cf:9d:7b:7c:1a:8e:
f2:34:63:b1:99:7c:cb:38:9a:58:b0:b2:59:e3:da:
9f:d0:48:11:e6:3d:31:5e:96:28:36:91:29:30:c2:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:13:F8:BF:96:D3:40:AE:FF:E4:CF:21:E8:AE:BC:82:61:2D:84:0E
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33352e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:32:33:8e:8a:ae:97:8b:81:83:69:45:56:12:7a:86:b8:63:
6e:80:89:5d:33:9a:6a:71:9a:22:02:d6:33:71:f4:38:45:70:
1b:37:2a:0d:b6:98:10:39:3a:e6:55:e0:b9:81:88:1f:fd:0c:
ec:64:03:0a:d8:5c:56:3e:78:29:d6:54:5a:51:d4:8b:1b:43:
0b:a0:b1:62:a4:84:fd:c5:1f:c7:07:f4:88:b7:7a:33:0c:c9:
0e:0e:dd:2c:95:d4:9e:96:61:04:b1:fe:c3:25:80:eb:a1:c0:
ad:85:c7:d2:af:b3:73:65:7e:83:d7:29:2d:f3:00:bf:2c:94:
78:a3:a0:df:53:8e:e7:ae:e5:20:7d:b5:b7:39:fa:88:67:33:
c4:0b:b1:23:2d:24:1b:76:e7:ff:64:ae:82:76:2c:45:f2:24:
af:2e:18:e6:67:b2:5b:34:5d:b9:ee:a2:a0:14:af:6a:61:71:
0f:9c:2c:a2:46:cc:e7:d1:e7:9b:c0:9a:82:98:d5:55:ec:e2:
67:c8:00:15:44:ee:b2:40:fb:2e:e3:0d:38:54:ea:48:c0:b6:
a5:ee:a1:06:ad:fd:27:c6:17:aa:44:31:f8:9a:f7:f0:24:63:
7d:54:a9:d7:67:ed:a2:04:13:b8:b7:dc:75:f8:77:69:e0:99:
60:b2:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:57:43 2025 by rpki-client