Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS36530.roa
File: AS36530.roa (raw, json)
Hash identifier: wZHSi+RbcMIMsCkA19Ner8BsYLQHQiO4Gd+x13p00WE=
Subject key identifier: F4:3E:3C:21:77:40:DF:E7:6A:B7:56:4A:B7:D4:F3:05:54:AD:DA:1B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0F85A8D6D167CF1BED5209AFCB45791E239406D2
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS36530.roa
Signing time: Fri 23 May 2025 17:32:00 +0000
ROA not before: Fri 23 May 2025 17:27:00 +0000
ROA not after: Fri 22 May 2026 17:32:00 +0000
asID: 36530
IP address blocks: 192.166.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:85:a8:d6:d1:67:cf:1b:ed:52:09:af:cb:45:79:1e:23:94:06:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 23 17:27:00 2025 GMT
Not After : May 22 17:32:00 2026 GMT
Subject: CN=F43E3C217740DFE76AB7564AB7D4F30554ADDA1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:f6:5e:9e:1c:f3:12:e5:45:5d:36:ed:5e:
c7:44:76:1d:1a:4e:6e:81:10:1d:e9:10:5a:13:f2:
70:e3:f6:ea:e0:6d:5f:b1:72:1a:09:95:c5:8c:71:
d6:cf:1c:03:4a:8b:a8:ae:22:5d:e7:47:2e:a2:09:
e8:38:a4:cc:b5:5c:9f:e4:ac:3d:1a:6b:4b:d1:0c:
98:a3:44:f4:d3:af:0d:95:05:f7:47:f0:81:f3:db:
89:d3:8d:00:f4:a9:e5:6b:94:cd:9a:65:89:b5:85:
87:5c:7d:af:55:d4:d6:62:4c:04:1d:bd:ff:0e:a9:
ff:06:02:d1:fb:d7:c4:f9:59:76:ac:e9:ac:8f:ed:
2d:7a:37:a7:ff:1c:6c:8b:59:81:0e:e6:30:e5:fe:
8d:13:d9:2d:7f:39:70:12:6f:49:e8:fb:d1:7d:85:
1a:74:2c:d1:72:50:27:3f:c9:ff:12:db:c2:ea:68:
a1:41:f0:93:fd:08:73:4a:1a:15:ff:4e:66:30:92:
5f:a5:8e:63:19:44:00:f9:59:b9:88:f7:6c:fb:4b:
c4:26:68:24:ea:b6:e5:6b:1d:1e:13:e2:1c:bf:27:
e0:32:ef:a9:c1:95:18:eb:4b:e7:6d:69:e3:19:dd:
1a:db:71:b1:bc:bb:11:d6:5f:cb:61:ca:95:25:10:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:3C:21:77:40:DF:E7:6A:B7:56:4A:B7:D4:F3:05:54:AD:DA:1B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS36530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:de:98:3a:f6:20:da:ba:f9:d6:1b:de:67:90:00:7e:28:a3:
39:e1:88:2b:13:ca:3d:20:76:34:9e:b8:7f:78:9f:57:8c:e3:
67:d8:e0:4f:31:8a:ac:33:9d:3c:9e:23:a5:37:f2:bc:f3:28:
2e:83:ef:02:85:f8:9f:6c:ae:5b:97:50:8c:2c:ed:0b:de:bf:
30:e6:41:a8:e1:ee:7e:ec:a4:fa:15:17:90:00:a8:d9:36:ea:
24:69:8f:4c:13:d8:32:00:80:c9:e4:f9:42:97:0d:1e:fc:db:
3a:42:4a:e3:aa:41:0b:7b:a2:d8:47:d7:e8:9b:a1:58:64:b2:
25:d3:a4:16:82:80:48:e6:a8:8b:90:ce:fd:8a:c6:cf:e2:d4:
24:00:55:12:39:fe:31:d8:66:5a:e2:5c:be:82:a6:7c:d8:99:
72:fb:a8:9d:1c:a4:cd:22:59:75:bb:61:4d:77:35:cd:df:a7:
c4:fb:dd:c0:0b:47:b0:fa:7e:ab:d4:0f:4f:3e:d3:81:0a:b9:
38:d3:46:56:1f:33:b1:ca:d2:b0:4d:67:67:b6:91:87:5a:73:
21:e2:33:bc:13:f8:4c:3c:69:c5:90:05:0a:66:a5:1c:30:73:
4f:58:81:b7:f0:f2:e7:6a:08:18:71:b3:c5:26:be:d7:5c:78:
f5:1c:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:00:06 2025 by rpki-client