Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20313337323335.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier: wnlcweQWeYqMxoUwgQa77C2ZsrxQiFB/Eeq+98TrzvY=
Subject key identifier: CD:16:1B:53:C2:24:1D:88:2A:45:21:15:8C:BB:52:41:2F:B6:00:E2
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 531ECFD916F8DF8469A51F332696CDCB94BEF971
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20313337323335.roa
Signing time: Fri 01 Aug 2025 07:51:33 +0000
ROA not before: Fri 01 Aug 2025 07:46:33 +0000
ROA not after: Fri 31 Jul 2026 07:51:33 +0000
asID: 137235
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1e:cf:d9:16:f8:df:84:69:a5:1f:33:26:96:cd:cb:94:be:f9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 1 07:46:33 2025 GMT
Not After : Jul 31 07:51:33 2026 GMT
Subject: CN=CD161B53C2241D882A4521158CBB52412FB600E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:90:98:a3:2f:dd:e4:13:c1:68:10:36:4b:
83:e5:b8:dd:38:6b:8a:01:50:cd:69:30:57:bb:1f:
5d:ec:66:1b:9b:8a:e9:eb:a5:13:0a:85:f9:8d:41:
fa:96:b2:6a:bd:7a:d2:f4:87:58:e0:e0:e0:e9:b5:
e3:99:0e:03:15:14:d9:58:4d:b1:c4:01:21:a8:54:
4d:28:b8:c1:60:3e:75:f1:85:05:0f:98:55:1a:37:
69:87:c4:0f:62:a3:c2:1d:76:bf:18:b9:67:39:86:
56:7d:ae:84:53:4b:3d:92:1a:68:21:ef:f3:73:22:
7d:a8:2f:42:26:fd:e8:b7:60:6e:81:70:19:a7:1e:
ae:38:4e:6b:96:cd:65:bd:16:af:93:6a:34:1c:f4:
9f:b3:12:1b:15:71:96:50:c8:b2:43:48:3a:d6:60:
a5:de:8b:f2:df:53:99:67:00:33:96:2d:79:e6:c6:
69:ea:13:8c:ff:f3:17:81:fa:4e:0d:6e:d0:e7:a9:
10:99:b9:3a:c8:7e:af:02:a9:da:22:2e:98:eb:d4:
3a:a7:c1:5c:c6:15:6a:40:b3:2e:d9:b6:0a:d5:7f:
fe:eb:1c:1d:b5:3e:d0:a0:55:a6:a6:94:b8:04:f2:
4b:9a:32:c6:59:98:5a:0c:c1:eb:91:ec:75:01:11:
e8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:1B:53:C2:24:1D:88:2A:45:21:15:8C:BB:52:41:2F:B6:00:E2
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20313337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e0:42:81:e5:2c:63:ed:20:ba:12:45:9a:4f:45:09:88:b5:
a6:44:35:28:eb:ef:45:a2:68:13:1d:0c:ab:e2:05:15:e3:ee:
72:68:9e:a4:26:b9:cc:bf:4b:6e:e7:3c:4b:36:ba:c4:00:e5:
1d:a3:bc:fe:d3:ff:62:03:c0:49:dc:cd:8a:f0:b5:0e:0d:6c:
f0:7d:7d:1d:76:34:36:09:f1:b9:e4:fd:2c:77:18:d9:3b:f3:
13:40:ac:c1:39:73:bf:c9:db:0a:e9:84:6e:58:36:75:3f:3b:
92:26:0a:86:2b:5c:7d:0d:60:ea:06:82:d6:fa:ba:db:fd:5d:
d5:05:c6:39:ea:70:c3:27:c2:43:ec:b3:73:a5:14:a6:67:8d:
c6:f2:5a:4c:6e:99:b1:0b:01:55:97:60:a7:c7:1f:ae:0d:cd:
7c:0d:16:ec:a5:c8:1f:e2:97:bd:f9:76:ee:34:8a:30:45:86:
8b:c5:67:f0:50:01:6d:d3:70:d7:9c:e2:87:6b:d9:3b:97:b9:
80:15:e4:5f:64:36:08:41:9d:9f:e3:cb:b2:67:f9:a7:f3:1a:
97:74:f4:bc:b9:34:ef:54:1f:33:4a:08:37:45:47:df:0c:64:
86:28:b7:2e:55:d8:07:8c:3d:ef:7b:05:78:c9:54:ea:0e:48:
76:89:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:27:27 2025 by rpki-client