Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20383334.roa
File: 3139342e33342e3235322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 18437WA8CLeUhHiuOq2Q/0Y+PmLFFu5rmegdjMTh56M=
Subject key identifier: 8A:98:64:7E:E0:E6:AD:49:97:C7:79:C1:EF:9C:6D:4C:87:D1:12:4A
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 3C7F76FBA8CE0B96460FCD7E78C5A5176002C1AC
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20383334.roa
Signing time: Thu 12 Jun 2025 00:01:32 +0000
ROA not before: Wed 11 Jun 2025 23:56:32 +0000
ROA not after: Thu 11 Jun 2026 00:01:32 +0000
asID: 834
IP address blocks: 194.34.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:7f:76:fb:a8:ce:0b:96:46:0f:cd:7e:78:c5:a5:17:60:02:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: Jun 11 23:56:32 2025 GMT
Not After : Jun 11 00:01:32 2026 GMT
Subject: CN=8A98647EE0E6AD4997C779C1EF9C6D4C87D1124A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:02:e3:f1:3b:89:fb:63:4b:79:4b:62:c1:
1f:b1:ae:1b:50:9b:6a:71:1b:57:d9:60:72:e3:57:
a1:7f:41:0a:f4:49:3d:88:eb:be:f7:50:d8:e9:5c:
b7:47:25:44:69:43:4a:05:a5:e8:f4:b1:8b:2d:c5:
0d:b3:79:91:b5:f7:92:bd:30:8a:f9:ed:d5:64:4c:
4f:bf:4d:e4:21:52:ef:4c:13:42:8e:4b:45:6d:fd:
38:6b:5d:fc:fd:a6:99:46:ae:50:45:a6:6a:8a:51:
24:4c:26:67:40:8f:4e:92:fd:91:71:64:2b:0d:23:
d7:32:af:e4:23:15:68:91:b5:b3:9a:83:6e:49:05:
5d:76:0f:2c:0e:5c:c2:94:d1:f6:94:08:43:0b:a1:
c3:85:16:b3:a5:5b:81:4d:13:55:99:3d:4c:de:f9:
ba:1f:f4:27:61:7d:17:a7:e7:f2:2b:19:96:81:c3:
09:06:48:c1:8d:6d:35:7e:2d:72:e7:8b:6c:8c:29:
56:4c:6c:fd:d1:4c:c6:00:57:71:6a:f0:13:47:e8:
d4:89:f0:42:23:02:d9:8f:9e:1f:1f:5b:e0:24:1c:
b5:ef:c8:1e:08:4f:5f:58:fb:25:a2:ad:20:e6:d3:
31:ed:ed:61:bd:09:6a:bd:dd:67:51:cd:e3:8d:dc:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:98:64:7E:E0:E6:AD:49:97:C7:79:C1:EF:9C:6D:4C:87:D1:12:4A
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/3139342e33342e3235322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:98:b9:41:34:10:55:77:d1:3e:06:d6:8a:3b:6a:3c:56:d1:
65:d7:30:7b:e7:5f:1f:22:76:63:cf:c4:4a:b7:e0:8a:4a:81:
bb:9f:67:be:5e:31:7a:ce:f9:32:b8:53:41:bf:3e:85:bc:4e:
eb:ae:99:41:ac:54:2f:10:f4:bd:06:fb:aa:72:96:b0:b2:62:
4d:dc:38:8d:18:36:7c:bc:95:42:7a:6e:d3:e0:7a:8f:9c:42:
8d:35:18:b9:a3:8c:19:ea:03:0c:b7:cb:3b:2c:34:65:03:d8:
8a:1f:26:da:72:22:a1:50:75:27:df:74:63:ad:98:54:ff:eb:
d0:cb:b3:2d:13:1b:18:03:c8:41:e6:d1:f4:bf:59:f4:21:f2:
50:43:26:7e:df:e0:9c:68:e4:8f:a0:ad:20:39:d9:ce:4b:a2:
3c:bf:cd:4e:b8:4a:ff:96:23:63:a8:f3:47:ef:d3:60:10:43:
2d:3b:9c:d4:91:b6:3f:ea:40:7f:46:6e:a2:c3:aa:14:f2:c7:
d3:18:82:01:38:6a:c6:d0:00:64:24:f0:a7:4b:5a:00:9b:25:
33:d3:2e:46:cd:ba:e0:2c:53:7f:ef:a2:06:b1:0e:5e:d1:54:
53:12:ac:0d:cb:8d:94:42:bc:b9:5c:7e:96:d0:07:83:9e:b8:
3a:d2:64:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:06:03 2025 by rpki-client