Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa
File: 34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa (raw, json)
Hash identifier: gZ3sbcEda49eqP8zzQ5aQw1ZgTtidp19H6+x37Z0+/c=
Subject key identifier: 61:DD:60:18:98:4E:B6:AB:5C:9C:F9:26:06:91:B9:9E:E4:15:A5:03
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 3512176563D3D38B3D2836F0785DBB0882DF8F83
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa
Signing time: Fri 13 Jun 2025 01:54:09 +0000
ROA not before: Fri 13 Jun 2025 01:49:09 +0000
ROA not after: Fri 12 Jun 2026 01:54:09 +0000
asID: 214579
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 16:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:12:17:65:63:d3:d3:8b:3d:28:36:f0:78:5d:bb:08:82:df:8f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jun 13 01:49:09 2025 GMT
Not After : Jun 12 01:54:09 2026 GMT
Subject: CN=61DD6018984EB6AB5C9CF9260691B99EE415A503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:ba:2b:48:4f:55:64:db:e5:4a:db:35:93:
6d:46:49:63:29:9a:3a:42:2a:98:81:f0:5c:2b:a3:
f8:89:ba:d2:1b:8f:41:67:08:4f:7a:2c:78:a2:50:
dc:f0:40:e7:bd:f6:12:35:7d:ca:81:a0:8e:bb:5e:
33:5e:40:c8:67:bd:8b:82:2a:de:52:39:2b:7f:60:
ab:f9:ae:f7:7b:ab:3a:a2:3b:55:4f:28:39:10:64:
22:e0:74:60:eb:df:b4:04:74:2e:3d:29:63:d8:57:
4b:6d:42:4b:86:d2:47:9a:a0:81:0b:2e:0e:9a:12:
63:f3:e4:08:4c:68:8c:58:69:a3:24:e5:ce:a5:f4:
0f:89:49:78:82:26:df:b0:05:14:a8:37:ad:a4:6b:
dc:c7:96:cb:e0:33:56:3e:5a:03:27:f9:0f:43:64:
4f:3b:6d:4f:aa:77:59:99:97:75:9e:d1:c0:3b:d4:
d4:09:42:f8:2d:62:27:fb:4d:a2:15:7b:1c:3a:c9:
f1:b5:af:a8:9c:a8:20:37:06:b5:51:14:dc:d8:72:
b2:3c:5a:98:0f:8f:f3:6c:03:3b:79:f9:ee:eb:52:
3e:f4:95:92:7c:fb:35:c9:87:35:94:22:50:5a:a1:
8c:f1:c0:a3:1d:1d:35:5d:8e:17:83:1a:0f:2e:79:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:60:18:98:4E:B6:AB:5C:9C:F9:26:06:91:B9:9E:E4:15:A5:03
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20323134353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
93:9c:2e:20:46:95:d1:88:3c:6e:9c:95:0b:d2:a8:43:9b:56:
b7:4d:f4:db:3a:f2:92:b5:8b:6f:eb:a5:82:3b:19:42:3b:be:
f6:fa:66:72:dd:d1:a1:79:c3:5c:85:9d:cd:0d:5a:1e:44:fc:
34:4d:23:95:9f:37:66:1f:77:65:ee:4d:42:98:c5:27:5c:71:
c0:1e:a3:79:93:25:81:bf:bd:2f:81:f0:1b:a5:60:4e:21:c6:
d5:0b:37:da:1b:db:7b:a0:bc:dd:39:16:cb:45:91:57:ac:15:
ac:e1:de:4b:88:4f:4a:ff:da:da:a8:47:8d:16:8d:8d:1f:c0:
6d:46:18:b9:e4:a6:24:f2:d3:7e:20:67:0d:cd:7a:b0:5c:b7:
dd:8b:d0:cc:f2:09:13:5b:cb:f5:8c:b1:57:97:33:de:7f:a5:
d8:42:e3:1b:00:aa:eb:e7:f5:4c:ca:bb:ba:30:fd:c6:4a:e9:
4e:0e:ed:98:93:b4:b7:f6:74:04:02:77:59:9e:eb:55:a1:3d:
bb:93:cd:f4:ce:c0:82:ca:30:6f:fb:8a:8f:8a:84:c1:c0:99:
0a:bf:e3:6a:90:14:e1:44:1f:0a:69:a5:36:33:83:ac:c2:d6:
03:78:a5:68:cf:77:4e:ef:bf:34:a5:aa:2b:ff:e9:3b:91:fc:
aa:21:ad:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:21:20 2025 by rpki-client