Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e203336353330.roa
File: 39332e39352e3131332e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier: XdWmefAZyfxd+tfdlcAJ/nwVibHOt4TWi5DLte79H/Q=
Subject key identifier: 17:3A:C0:BE:30:6D:AB:1A:4B:5D:B9:69:55:62:A5:A0:FC:92:F0:41
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 6EC68503E4C522C41100D138CA5053F1E467E938
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e203336353330.roa
Signing time: Tue 15 Apr 2025 23:19:06 +0000
ROA not before: Tue 15 Apr 2025 23:14:06 +0000
ROA not after: Tue 14 Apr 2026 23:19:06 +0000
asID: 36530
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c6:85:03:e4:c5:22:c4:11:00:d1:38:ca:50:53:f1:e4:67:e9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Apr 15 23:14:06 2025 GMT
Not After : Apr 14 23:19:06 2026 GMT
Subject: CN=173AC0BE306DAB1A4B5DB9695562A5A0FC92F041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:6c:3c:13:62:84:b7:f0:0c:d2:d0:01:ac:
08:84:03:70:df:4d:7f:94:c2:f8:80:75:81:15:e3:
4a:b7:5e:26:60:66:f6:63:30:fb:77:f6:5b:c4:36:
75:1b:ba:33:9b:7c:21:b2:61:a6:b8:0b:b6:8e:4b:
0c:17:69:d1:b3:ed:cb:61:b4:93:66:0d:49:72:f9:
7d:db:68:ca:f9:92:43:2e:bd:de:b0:27:99:ec:7e:
82:07:4b:a5:d0:eb:5c:65:9a:38:0b:a3:8f:39:f6:
bf:45:75:6c:62:fc:bc:5e:a0:54:47:f2:d2:0d:3d:
d1:22:1d:20:54:cb:67:8e:a9:bb:6a:14:96:ad:c7:
9b:b6:d3:e2:6d:1b:de:3e:72:3a:7a:27:bd:e4:87:
44:6f:f4:80:a4:77:bd:1e:68:a6:cc:9e:ad:66:be:
13:00:a7:ad:c9:f2:e9:22:c4:0d:30:95:99:f7:28:
d2:1d:d5:0c:22:1f:9f:31:4f:fe:78:23:62:bf:2a:
01:11:02:71:be:41:ff:83:cc:ad:89:cd:ca:38:0a:
c6:2e:0f:50:f1:87:ee:c4:07:84:36:c7:39:70:9a:
32:55:6f:07:d0:c5:28:d3:15:74:41:0a:03:0e:a9:
00:fe:db:4c:03:c2:fa:4c:b4:48:2d:49:72:98:51:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:C0:BE:30:6D:AB:1A:4B:5D:B9:69:55:62:A5:A0:FC:92:F0:41
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e203336353330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:e3:2f:d6:ab:f5:da:6d:0e:f8:8b:bd:2c:01:75:a1:97:1d:
de:ec:35:7a:d3:6f:a8:fa:82:84:ae:32:96:24:3c:f6:bf:85:
eb:03:58:b5:4b:b1:97:ce:3a:d4:7f:9f:47:53:5c:8a:95:8a:
1c:5e:b4:eb:dc:6a:32:cd:51:a7:94:44:b3:70:2f:29:1b:4d:
72:d7:88:07:b8:44:59:02:fe:ca:04:74:60:01:6e:31:7c:d8:
56:b2:0f:db:5f:55:da:51:4c:18:2f:2c:76:c2:2b:9c:b1:a0:
6a:55:ec:2f:ed:e3:1f:ca:9c:99:52:c8:87:bf:a3:c4:bb:ae:
20:34:a9:fc:65:f4:99:18:00:19:14:2d:33:6f:d6:b9:c1:68:
ff:61:51:64:98:b2:37:5a:e7:7d:80:58:2f:15:b4:03:58:8f:
13:3f:c5:c5:fb:3c:bd:e5:3e:ae:a7:fb:ad:c2:81:48:1a:19:
85:70:ed:76:5e:40:8f:f9:16:f7:eb:66:9c:01:1b:25:28:bd:
b6:33:0d:ce:1d:9d:22:0f:b6:55:2a:04:94:a0:3e:b3:33:d9:
92:47:38:99:a2:ed:42:50:48:a8:78:8e:13:b2:8d:ee:a3:37:
29:00:72:d9:8d:c4:ed:77:fa:22:35:aa:a0:14:7c:d2:26:b2:
82:a9:61:5f
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUbsaFA+TFIsQRANE4ylBT8eRn6TgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh
NmM3MTMyZTAeFw0yNTA0MTUyMzE0MDZaFw0yNjA0MTQyMzE5MDZaMDMxMTAvBgNV
BAMTKDE3M0FDMEJFMzA2REFCMUE0QjVEQjk2OTU1NjJBNUEwRkM5MkYwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MWw8E2KEt/AM0tABrAiEA3Df
TX+UwviAdYEV40q3XiZgZvZjMPt39lvENnUbujObfCGyYaa4C7aOSwwXadGz7cth
tJNmDUly+X3baMr5kkMuvd6wJ5nsfoIHS6XQ61xlmjgLo4859r9FdWxi/LxeoFRH
8tINPdEiHSBUy2eOqbtqFJatx5u20+JtG94+cjp6J73kh0Rv9ICkd70eaKbMnq1m
vhMAp63J8ukixA0wlZn3KNId1QwiH58xT/54I2K/KgERAnG+Qf+DzK2Jzco4CsYu
D1Dxh+7EB4Q2xzlwmjJVbwfQxSjTFXRBCgMOqQD+20wDwvpMtEgtSXKYUaY9AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUFzrAvjBtqxpLXblpVWKloPyS8EEwHwYDVR0j
BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk
MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti
SEV5NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt
ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzNjM1MzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF1f
cTANBgkqhkiG9w0BAQsFAAOCAQEAw+Mv1qv12m0O+Iu9LAF1oZcd3uw1etNvqPqC
hK4yliQ89r+F6wNYtUuxl8461H+fR1NcipWKHF6069xqMs1Rp5REs3AvKRtNcteI
B7hEWQL+ygR0YAFuMXzYVrIP219V2lFMGC8sdsIrnLGgalXsL+3jH8qcmVLIh7+j
xLuuIDSp/GX0mRgAGRQtM2/WucFo/2FRZJiyN1rnfYBYLxW0A1iPEz/Fxfs8veU+
rqf7rcKBSBoZhXDtdl5Aj/kW9+tmnAEbJSi9tjMNzh2dIg+2VSoElKA+szPZkkc4
maLtQlBIqHiOE7KN7qM3KQBy2Y3E7Xf6IjWqoBR80iaygqlhXw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:40:05 2025 by rpki-client