Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa
File: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=
Subject key identifier: 7D:73:09:BC:C5:08:B8:02:8F:33:FE:20:CE:CF:A4:2A:E1:A1:14:9F
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 41C705DD1BE9C437D4076722C687597B713250BB
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa
Signing time: Tue 03 Jun 2025 14:54:08 +0000
ROA not before: Tue 03 Jun 2025 14:49:08 +0000
ROA not after: Tue 02 Jun 2026 14:54:08 +0000
asID: 61317
IP address blocks: 188.164.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c7:05:dd:1b:e9:c4:37:d4:07:67:22:c6:87:59:7b:71:32:50:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Jun 3 14:49:08 2025 GMT
Not After : Jun 2 14:54:08 2026 GMT
Subject: CN=7D7309BCC508B8028F33FE20CECFA42AE1A1149F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:cf:22:ff:b7:54:85:4c:b5:73:5a:e5:1f:
4b:18:3e:c0:1b:c3:ad:03:f4:e6:39:8a:dd:9a:47:
8b:56:78:07:5f:8e:2d:77:7f:9a:40:dc:72:b0:50:
b8:03:cf:9d:28:fa:52:17:9d:cc:7f:9e:e1:22:b7:
f0:5b:68:cc:4d:b4:b9:f7:73:36:8b:09:7a:44:cc:
61:74:29:20:de:21:0b:c6:97:5d:17:dd:33:d6:fe:
c0:93:e4:4f:b4:f8:33:af:fd:80:88:19:00:c4:de:
29:aa:53:13:79:b0:5c:48:6f:8e:21:84:9e:e6:48:
b4:3c:c7:a2:81:b3:fb:38:96:b6:3d:8c:61:04:66:
53:f3:a9:90:7d:9a:2e:ce:5e:d2:b2:8d:c2:27:ec:
89:15:67:fa:af:35:f6:29:0d:fc:9f:40:ac:a2:a1:
32:77:5c:c8:6a:f9:14:c0:3f:b3:14:03:67:e0:eb:
94:8e:2f:90:cb:93:82:82:14:25:df:eb:d1:eb:9f:
58:df:ec:c6:a1:74:be:3d:8e:2c:6d:7c:23:a5:9a:
a8:83:90:69:78:d3:9c:95:6d:8c:2a:a4:7c:a6:c0:
a2:7e:23:da:84:05:41:e8:bb:2a:3b:17:d4:c5:a1:
99:09:6b:85:80:4d:84:ea:b4:a0:2a:8b:73:58:b5:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:09:BC:C5:08:B8:02:8F:33:FE:20:CE:CF:A4:2A:E1:A1:14:9F
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:10:25:7d:c2:9f:71:7f:07:6b:ee:4d:df:d2:1c:ec:7e:bb:
16:81:6c:2a:7a:8a:dc:25:1c:7a:fa:50:37:fd:18:3c:0c:6b:
7e:9a:c7:7f:8a:e0:48:90:ed:56:c8:78:ac:87:d0:ec:52:ce:
22:de:42:c6:63:ed:2b:bc:c0:72:93:bd:af:a8:ec:09:8e:61:
a7:de:0a:cb:4a:1b:fc:c7:48:4c:61:ac:f5:ff:41:40:e5:2e:
73:77:40:5e:50:14:ff:24:e4:4a:78:5e:a4:95:ba:5a:35:4c:
f1:64:44:aa:96:dc:0b:a5:78:d6:27:1f:84:6f:00:fc:3a:9a:
3f:c5:39:e5:a2:87:55:26:7b:27:50:9f:b1:e3:29:4c:e3:33:
6f:0d:f7:dd:2b:0a:07:aa:c8:17:e2:de:7e:86:d1:49:a2:7e:
16:d2:b1:4e:0d:5b:6d:1b:ea:21:1d:ea:f9:6e:65:cf:29:60:
a3:4a:d7:c1:4c:d8:e5:57:9b:20:42:74:79:ab:4a:7e:c0:51:
43:a4:42:61:d7:de:01:6a:b7:94:b7:ad:5a:29:89:9b:91:95:
dd:49:09:8b:5e:15:ca:c0:83:7f:fb:f8:c9:43:ce:35:14:db:
6f:76:eb:c1:cc:45:53:96:7b:a3:c7:b2:36:8f:7d:bf:af:f1:
d3:f1:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:21 2025 by rpki-client