Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231362e302f32332d3234203d3e203433363431.roa
File: 3138352e33372e3231362e302f32332d3234203d3e203433363431.roa (raw, json)
Hash identifier: R1hn+hKIX3uDtuYXayOgRshxOBIjYwYDCqH1e+zmsz0=
Subject key identifier: 45:D8:53:4B:77:81:9A:6C:FC:8B:B6:C0:B3:49:A5:95:DC:36:CF:06
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 5C75387DBDAAD3260CFEE7D5980E279F1095B949
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231362e302f32332d3234203d3e203433363431.roa
Signing time: Tue 15 Apr 2025 18:52:36 +0000
ROA not before: Tue 15 Apr 2025 18:47:36 +0000
ROA not after: Tue 14 Apr 2026 18:52:36 +0000
asID: 43641
IP address blocks: 185.37.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:75:38:7d:bd:aa:d3:26:0c:fe:e7:d5:98:0e:27:9f:10:95:b9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Apr 15 18:47:36 2025 GMT
Not After : Apr 14 18:52:36 2026 GMT
Subject: CN=45D8534B77819A6CFC8BB6C0B349A595DC36CF06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:28:95:74:27:a8:46:90:56:38:c4:58:70:
ae:d2:f0:ac:3f:05:28:42:cd:46:32:50:ea:f6:c3:
03:67:cc:17:30:92:bc:58:0f:df:3d:27:24:33:f8:
2a:75:1f:ed:67:5c:f9:06:eb:b0:ce:3b:c9:f8:69:
d4:f3:ba:79:d5:71:8f:04:3b:5e:c6:e8:cf:78:4e:
91:9d:5c:57:12:5f:2d:96:2b:fb:bc:d7:e0:a7:ae:
fb:54:29:02:7c:37:11:33:44:1a:2b:55:ea:e7:4b:
bc:84:13:ba:53:c2:37:8c:bf:5d:e8:c1:36:28:cb:
bd:8e:64:8e:c5:36:62:d8:c4:fc:06:5e:f3:57:6e:
d3:77:dc:61:23:55:16:de:1f:dd:53:df:29:79:81:
c0:62:28:44:91:b5:4e:f2:f6:55:f1:de:12:a3:42:
da:5c:76:1e:ca:68:4a:fe:8a:14:dc:77:ba:34:a0:
48:4f:39:bb:d8:06:07:3b:d3:29:8a:e4:6a:ae:77:
ff:d3:83:4f:90:da:e3:87:d1:3b:86:a5:bd:24:82:
3c:e7:eb:4d:2e:ac:db:bf:4d:9b:9d:b1:dc:8e:1d:
0a:87:d1:9d:85:9e:8c:6e:e6:07:3f:b3:57:95:69:
ea:c8:04:57:60:cf:2a:4d:ac:32:d7:7c:08:44:e4:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D8:53:4B:77:81:9A:6C:FC:8B:B6:C0:B3:49:A5:95:DC:36:CF:06
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e33372e3231362e302f32332d3234203d3e203433363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:a8:d2:52:d6:6e:bc:7a:6e:4c:c2:0d:f9:bf:63:55:24:d5:
27:29:14:db:d1:97:83:28:e2:0c:49:43:55:06:1d:a4:69:98:
c0:36:35:3e:90:0e:cd:82:6f:21:b4:ae:68:74:51:2f:b1:cc:
bc:1f:8d:80:8e:8b:f8:e5:68:c9:b0:ad:8b:bf:c0:ef:5c:65:
d3:6b:a0:7f:46:b1:a4:5c:90:bd:1b:ef:38:98:3d:8d:63:84:
a3:a5:62:80:fe:64:3e:5c:42:53:87:21:49:dc:b4:96:22:79:
e5:c8:f9:4b:05:a2:8e:19:5e:c8:2e:26:f4:09:44:5f:00:17:
e2:2f:78:67:8f:c3:06:71:39:8e:e9:3f:de:4f:b1:a9:a3:ac:
57:32:df:4a:c4:20:c5:4b:89:31:6d:27:bf:ef:1d:8c:7b:28:
7e:15:53:78:11:1f:d8:be:3d:8a:75:0d:a9:fc:3e:47:51:d8:
59:68:58:5a:74:51:7f:c3:53:26:ce:1f:93:85:05:22:b4:08:
b0:64:43:e6:c4:75:6b:b0:2d:df:38:6b:4f:b3:eb:d3:95:5d:
ca:e6:6c:9e:32:25:6d:24:c7:68:04:2c:73:1e:46:26:dc:fb:
f0:96:1f:cd:72:04:88:c7:c8:aa:96:8b:5a:77:5b:c5:6b:30:
30:d4:6a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:48:12 2025 by rpki-client