Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS3170.roa
File: AS3170.roa (raw, json)
Hash identifier: k9Ec5moBNBY5mhOtRS7bcHFJ0QRTNIZIOjTTSTwHZAY=
Subject key identifier: 00:B8:95:D1:8B:80:44:37:65:18:B8:1D:5F:3F:34:0A:E6:69:D0:88
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 92C68F02F83D8E515000C3B9AD23DBCCB72A48
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS3170.roa
Signing time: Sat 12 Apr 2025 23:54:01 +0000
ROA not before: Sat 12 Apr 2025 23:49:01 +0000
ROA not after: Sat 11 Apr 2026 23:54:01 +0000
asID: 3170
IP address blocks: 45.149.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
92:c6:8f:02:f8:3d:8e:51:50:00:c3:b9:ad:23:db:cc:b7:2a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Apr 12 23:49:01 2025 GMT
Not After : Apr 11 23:54:01 2026 GMT
Subject: CN=00B895D18B8044376518B81D5F3F340AE669D088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:90:ea:72:25:36:cb:b5:cd:c9:1e:a3:da:
be:37:05:8b:74:51:f7:d9:ed:29:7e:47:b5:ca:d7:
87:99:6a:13:1e:3e:a7:1a:ac:70:c5:19:34:4a:bc:
57:8e:2e:b2:70:df:51:de:59:29:d7:14:3c:5f:57:
4b:54:13:79:ba:e3:0b:43:0e:71:c3:e3:d9:2c:9a:
21:92:9b:bd:46:e2:06:f5:ae:87:10:17:aa:7d:a8:
36:c2:15:82:ee:02:54:03:d8:32:f6:ac:e2:12:b9:
f1:82:a9:d5:de:95:ea:f5:e9:4c:ec:0f:10:7e:18:
e5:fa:5e:ad:23:2e:06:eb:68:09:b2:f7:27:03:5f:
f2:52:c9:06:d5:97:7b:3a:47:a6:36:29:6d:d8:80:
33:f3:ca:92:3a:9a:ae:bd:66:d1:5d:c8:e2:ea:20:
78:f3:6c:d9:3d:23:a7:4e:79:15:ea:42:be:0e:69:
08:dc:cb:ea:70:87:bc:06:62:da:66:56:40:4d:29:
cd:00:6e:c5:80:3c:35:f5:cd:e6:21:cd:13:c7:22:
4a:a6:c1:36:b9:ca:e8:d4:c4:30:26:6e:9e:8b:4f:
1a:1b:83:00:12:12:3f:c3:09:5e:16:d9:83:8f:0d:
34:9e:d6:2c:26:30:d0:9e:1d:f5:76:95:fa:98:6c:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:95:D1:8B:80:44:37:65:18:B8:1D:5F:3F:34:0A:E6:69:D0:88
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS3170.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:54:3a:72:0f:d5:76:bd:58:89:6c:03:97:45:45:30:cb:80:
21:3c:ee:f6:c4:31:4f:55:61:bc:cb:f5:3c:dd:c4:ea:a3:0b:
d7:b6:d4:b3:f4:f9:de:cc:6d:bc:be:0e:1b:0e:ff:2b:a5:d9:
02:e3:92:2c:7f:db:2a:9c:6a:3a:80:62:3e:4a:ff:2d:0b:c0:
54:35:48:bd:0d:c9:db:9b:30:e3:a5:8c:3f:06:5c:c3:3a:18:
a9:f6:9d:bc:c7:a8:ee:c7:4a:77:9b:8f:9a:84:70:78:13:8b:
7e:92:bd:55:7c:6c:5a:5a:b3:f7:29:79:a3:c7:91:e9:4a:2d:
3f:b5:c3:c1:8d:df:65:fb:95:56:09:cc:27:bf:fa:2a:76:d9:
34:2a:fa:2d:0d:22:f1:ec:78:a3:7b:88:52:de:da:69:dc:f9:
91:bd:58:ef:17:b6:70:87:71:2c:65:7c:c5:43:f9:c8:4b:a4:
03:51:8d:70:7b:be:d0:6b:39:02:e4:f7:e2:35:04:88:71:40:
13:fe:fc:09:d9:72:28:8a:bd:91:01:f0:d8:91:75:87:6c:32:
a2:82:c8:54:5f:13:d4:84:56:df:89:7f:34:82:11:1b:99:dd:
43:01:28:94:01:54:2d:27:85:51:f5:79:51:19:46:f3:c3:21:
6d:cc:91:52
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUAJLGjwL4PY5RUADDua0j28y3KkgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA0MTIyMzQ5MDFaFw0yNjA0MTEyMzU0MDFaMDMxMTAvBgNV
BAMTKDAwQjg5NUQxOEI4MDQ0Mzc2NTE4QjgxRDVGM0YzNDBBRTY2OUQwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4I5DqciU2y7XNyR6j2r43BYt0
UffZ7Sl+R7XK14eZahMePqcarHDFGTRKvFeOLrJw31HeWSnXFDxfV0tUE3m64wtD
DnHD49ksmiGSm71G4gb1rocQF6p9qDbCFYLuAlQD2DL2rOISufGCqdXeler16Uzs
DxB+GOX6Xq0jLgbraAmy9ycDX/JSyQbVl3s6R6Y2KW3YgDPzypI6mq69ZtFdyOLq
IHjzbNk9I6dOeRXqQr4OaQjcy+pwh7wGYtpmVkBNKc0AbsWAPDX1zeYhzRPHIkqm
wTa5yujUxDAmbp6LTxobgwASEj/DCV4W2YOPDTSe1iwmMNCeHfV2lfqYbEirAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUALiV0YuARDdlGLgdXz80CuZp0IgwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMzE3MC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2VuDAN
BgkqhkiG9w0BAQsFAAOCAQEAwlQ6cg/Vdr1YiWwDl0VFMMuAITzu9sQxT1VhvMv1
PN3E6qML17bUs/T53sxtvL4OGw7/K6XZAuOSLH/bKpxqOoBiPkr/LQvAVDVIvQ3J
25sw46WMPwZcwzoYqfadvMeo7sdKd5uPmoRweBOLfpK9VXxsWlqz9yl5o8eR6Uot
P7XDwY3fZfuVVgnMJ7/6KnbZNCr6LQ0i8ex4o3uIUt7aadz5kb1Y7xe2cIdxLGV8
xUP5yEukA1GNcHu+0Gs5AuT34jUEiHFAE/78CdlyKIq9kQHw2JF1h2wyooLIVF8T
1IRW34l/NIIRG5ndQwEolAFULSeFUfV5URlG88MhbcyRUg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:05:08 2025 by rpki-client