Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
File: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: K+lj4PgUMV/qqAFPS/D9qL9eVMM6XvNwaS/gS3mXo1E=
Subject key identifier: CE:44:B2:7D:60:5F:6C:70:BD:C1:DB:E0:0F:50:C3:A4:97:05:39:1F
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 43CB72113164EA16FF4C506218FE8FBBEFFE88F8
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
Signing time: Wed 28 May 2025 00:04:29 +0000
ROA not before: Tue 27 May 2025 23:59:29 +0000
ROA not after: Wed 27 May 2026 00:04:29 +0000
asID: 834
IP address blocks: 45.132.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cb:72:11:31:64:ea:16:ff:4c:50:62:18:fe:8f:bb:ef:fe:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: May 27 23:59:29 2025 GMT
Not After : May 27 00:04:29 2026 GMT
Subject: CN=CE44B27D605F6C70BDC1DBE00F50C3A49705391F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:5a:4b:9f:c6:11:5c:8a:ea:3e:bb:3a:5c:
95:f2:44:ac:1a:d3:03:6a:b1:ab:01:7e:1a:b8:ad:
92:56:7a:ec:2e:3a:19:63:fc:b4:c0:0c:7a:d5:c2:
9d:e8:b8:44:f3:f3:8f:7f:c4:f8:f8:de:67:3c:23:
58:0c:1f:c4:52:0e:db:ae:d5:b0:86:be:e4:d0:90:
97:ce:3a:3a:f0:1b:73:56:fc:3a:14:35:b7:8b:73:
c9:51:69:fb:ef:22:43:1c:58:f4:46:15:35:2b:cb:
d2:a7:53:95:f5:9f:0c:03:74:ac:bc:f0:ff:4c:42:
54:48:a2:d9:f4:0d:b8:78:38:ef:ba:f7:87:96:47:
38:31:48:37:bd:0e:23:b8:67:f9:e8:3d:61:9e:bc:
ed:f2:44:a4:63:02:c4:9b:a7:0a:b4:af:28:7e:57:
e3:81:33:fc:ad:bf:c9:39:d3:22:f9:ba:ca:e9:54:
1e:3a:8d:e6:4f:d4:90:b8:ff:ae:df:3c:6d:9e:81:
b1:b7:55:24:2b:94:e0:4e:69:b7:12:1f:59:28:03:
64:b9:ff:f7:da:42:ce:b4:dd:c2:75:f0:b7:e9:6c:
2f:20:07:f9:e3:76:ee:88:50:c6:54:22:56:e2:d4:
ef:3f:23:1b:0c:a9:2f:fd:56:2f:b6:e7:5f:15:fe:
ee:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:44:B2:7D:60:5F:6C:70:BD:C1:DB:E0:0F:50:C3:A4:97:05:39:1F
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.218.0/24
Signature Algorithm: sha256WithRSAEncryption
28:aa:63:8b:7b:17:be:e1:dc:51:a1:97:45:d4:fa:f5:d6:1d:
fa:fe:27:21:9f:f0:96:e3:72:f3:49:d7:22:78:5e:2d:c8:22:
71:76:ee:04:32:7c:38:b9:98:ef:8b:f5:67:cd:3a:cc:18:0b:
0a:b9:9f:e3:50:02:89:96:49:a0:a1:c1:12:64:8e:30:00:4c:
d7:87:d8:e2:9b:10:16:da:94:8c:76:88:1a:54:c9:43:9f:4b:
1d:a1:12:85:39:58:c2:9c:b6:20:b5:00:42:a6:49:6d:11:21:
ae:2e:bb:4b:e6:b0:b1:6d:6c:b6:04:63:7c:83:f9:c4:6b:63:
8e:bf:21:64:c0:79:26:76:c2:4c:8f:8d:ec:00:32:3e:e6:13:
7e:be:f1:fd:d9:a5:2e:2f:53:ee:de:ce:66:b1:f6:48:74:49:
23:e4:24:7d:77:1d:7d:13:32:8b:25:4d:fa:82:49:d4:f7:d0:
44:dc:60:bf:a8:4d:7d:2a:30:c2:10:c3:d1:9c:ee:22:13:9d:
84:3e:fe:bb:57:c9:ef:ff:fa:e2:55:27:32:2f:c6:3f:c1:e3:
b4:a8:aa:1a:d6:c9:6c:40:af:36:e4:45:b6:42:61:11:ec:48:
be:29:bc:6d:79:d2:26:8d:c6:ff:75:32:6b:45:c8:6f:1f:8c:
56:07:96:53
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQ8tyETFk6hb/TFBiGP6Pu+/+iPgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNTA1MjcyMzU5MjlaFw0yNjA1MjcwMDA0MjlaMDMxMTAvBgNV
BAMTKENFNDRCMjdENjA1RjZDNzBCREMxREJFMDBGNTBDM0E0OTcwNTM5MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NFpLn8YRXIrqPrs6XJXyRKwa
0wNqsasBfhq4rZJWeuwuOhlj/LTADHrVwp3ouETz849/xPj43mc8I1gMH8RSDtuu
1bCGvuTQkJfOOjrwG3NW/DoUNbeLc8lRafvvIkMcWPRGFTUry9KnU5X1nwwDdKy8
8P9MQlRIotn0Dbh4OO+694eWRzgxSDe9DiO4Z/noPWGevO3yRKRjAsSbpwq0ryh+
V+OBM/ytv8k50yL5usrpVB46jeZP1JC4/67fPG2egbG3VSQrlOBOabcSH1koA2S5
//faQs603cJ18LfpbC8gB/njdu6IUMZUIlbi1O8/IxsMqS/9Vi+2518V/u5tAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUzkSyfWBfbHC9wdvgD1DDpJcFOR8wHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt
YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMzMyMmUzMjMx
MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthNow
DQYJKoZIhvcNAQELBQADggEBACiqY4t7F77h3FGhl0XU+vXWHfr+JyGf8JbjcvNJ
1yJ4Xi3IInF27gQyfDi5mO+L9WfNOswYCwq5n+NQAomWSaChwRJkjjAATNeH2OKb
EBbalIx2iBpUyUOfSx2hEoU5WMKctiC1AEKmSW0RIa4uu0vmsLFtbLYEY3yD+cRr
Y46/IWTAeSZ2wkyPjewAMj7mE36+8f3ZpS4vU+7ezmax9kh0SSPkJH13HX0TMosl
TfqCSdT30ETcYL+oTX0qMMIQw9Gc7iITnYQ+/rtXye//+uJVJzIvxj/B47SoqhrW
yWxArzbkRbZCYRHsSL4pvG150iaNxv91MmtFyG8fjFYHllM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:54:24 2025 by rpki-client