Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: AOxH8s/+FkjV9NiGaQOo6KgKIhl0SqIr83jD11/WSzA=
Subject key identifier: EE:20:2F:2B:7F:09:71:12:B2:E3:D7:09:01:18:1D:0D:FC:32:9E:5A
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 68EE08E43979A69823A792B5B8086842FAB0805E
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
Signing time: Tue 22 Apr 2025 02:02:31 +0000
ROA not before: Tue 22 Apr 2025 01:57:31 +0000
ROA not after: Tue 21 Apr 2026 02:02:31 +0000
asID: 834
IP address blocks: 193.32.205.0/24 maxlen: 24
193.32.206.0/24 maxlen: 24
193.38.46.0/24 maxlen: 24
193.187.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Apr 2025 22:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ee:08:e4:39:79:a6:98:23:a7:92:b5:b8:08:68:42:fa:b0:80:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Apr 22 01:57:31 2025 GMT
Not After : Apr 21 02:02:31 2026 GMT
Subject: CN=EE202F2B7F097112B2E3D70901181D0DFC329E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:69:2b:82:6d:ae:12:38:a1:8b:84:e9:ee:
f8:8c:f8:10:b2:47:3a:49:7c:6d:1e:dc:9d:57:02:
13:5a:76:94:9e:c3:ab:7f:47:cf:a9:ee:33:ae:39:
e9:ee:a4:9a:72:66:fa:2c:c8:d5:58:9d:d7:ea:d2:
b5:d2:07:9f:58:b9:5a:31:8a:27:7a:6e:77:49:a7:
53:c1:9c:f0:aa:4f:b3:dc:9c:8f:89:23:aa:ec:6c:
a8:a9:69:f5:1a:84:af:4e:00:ae:76:04:b3:78:60:
d0:ca:24:ed:a0:f6:1a:21:e5:de:90:7f:fe:d4:8f:
47:bd:eb:c0:d1:22:ac:e3:d4:1b:92:a7:3e:38:64:
09:b9:3b:f3:9a:8b:5c:b8:e8:55:03:87:f4:b9:0f:
92:b7:de:e3:0d:3c:35:f5:25:57:a1:9c:b7:09:94:
23:a8:15:da:3c:30:d3:e4:58:ff:fe:69:3e:a7:f9:
ff:ab:59:48:e7:69:3f:8a:a8:f5:bc:18:24:73:ce:
b8:08:ce:94:59:07:82:f7:e2:d2:73:96:6a:7a:7b:
1e:0b:c6:ec:73:54:f0:b4:e1:19:2a:aa:c7:75:23:
60:d9:59:5b:d7:39:60:bb:78:96:05:83:5e:6d:05:
16:99:88:ac:d3:ea:d0:7a:79:14:7b:1f:fc:f6:8d:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:20:2F:2B:7F:09:71:12:B2:E3:D7:09:01:18:1D:0D:FC:32:9E:5A
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.205.0-193.32.206.255
193.38.46.0/24
193.187.132.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f1:e7:0a:8b:1f:20:8d:46:8f:4c:4f:90:ad:f8:e8:d0:a2:
05:62:50:b8:d9:c8:73:3f:98:d1:83:ee:fe:21:94:67:52:e2:
07:0f:8f:86:a0:d8:4d:98:83:f4:98:af:da:06:a4:5a:d6:f1:
73:d7:41:d3:bd:7f:00:89:e4:bd:74:4f:77:bf:8d:44:66:8e:
98:ad:f8:e6:a2:12:d5:cd:5c:30:47:90:e7:af:c9:01:ff:7b:
02:38:c8:10:ef:8d:7e:48:3c:0c:0e:68:87:c9:8d:e2:4b:d0:
7d:ab:2b:c5:9c:15:73:01:aa:33:0e:2a:d8:1b:3e:b8:1c:94:
27:b4:dc:0a:e5:96:db:e2:3f:52:f8:74:08:ae:ea:d1:53:f4:
35:3f:88:3f:45:51:ba:59:3f:56:97:c6:08:4c:ed:b6:dd:e9:
c9:72:a3:cf:75:8c:9e:ff:89:82:cf:76:99:9b:68:44:f2:e6:
bb:be:27:b9:e3:63:6e:b1:d4:5d:43:44:3f:61:3b:c5:ed:57:
72:ae:5c:4a:1c:42:d5:33:4a:d3:bd:46:ed:e8:6d:be:11:49:
53:f8:96:2d:de:9e:8b:d3:de:15:b1:6f:db:ad:c0:26:da:6d:
39:d8:e9:a6:3f:a1:dd:9a:c4:c9:2a:af:4b:c8:40:bc:48:b9:
bb:6d:5f:de
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUaO4I5Dl5ppgjp5K1uAhoQvqwgF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1MWI0YzJmN2FlOWVmODBiNTMwMDBiMzJhYjhmNWQy
ZjJmNDE1YjAeFw0yNTA0MjIwMTU3MzFaFw0yNjA0MjEwMjAyMzFaMDMxMTAvBgNV
BAMTKEVFMjAyRjJCN0YwOTcxMTJCMkUzRDcwOTAxMTgxRDBERkMzMjlFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQGkrgm2uEjihi4Tp7viM+BCy
RzpJfG0e3J1XAhNadpSew6t/R8+p7jOuOenupJpyZvosyNVYndfq0rXSB59YuVox
iid6bndJp1PBnPCqT7PcnI+JI6rsbKipafUahK9OAK52BLN4YNDKJO2g9hoh5d6Q
f/7Uj0e968DRIqzj1BuSpz44ZAm5O/Oai1y46FUDh/S5D5K33uMNPDX1JVehnLcJ
lCOoFdo8MNPkWP/+aT6n+f+rWUjnaT+KqPW8GCRzzrgIzpRZB4L34tJzlmp6ex4L
xuxzVPC04Rkqqsd1I2DZWVvXOWC7eJYFg15tBRaZiKzT6tB6eRR7H/z2jdE7AgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQU7iAvK38JcRKy49cJARgdDfwynlowHwYDVR0j
BBgwFoAUcFG0wveunvgLUwALMquPXS8vQVswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWM1Y2U5ZmEtOWE2Zi00ZTBjLTk4MDktN2E0Nzg4NzQ0
ODkzLzAvNzA1MUI0QzJGN0FFOUVGODBCNTMwMDBCMzJBQjhGNUQyRjJGNDE1Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NGRzB3dmV1bnZnTFV3QUxNcXVQWFM4
dlFWcy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzljNWNlOWZhLTlhNmYt
NGUwYy05ODA5LTdhNDc4ODc0NDg5My8wL0FTODM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADBIM0D
BADBIM4DBADBJi4DBADBu4QwDQYJKoZIhvcNAQELBQADggEBADPx5wqLHyCNRo9M
T5Ct+OjQogViULjZyHM/mNGD7v4hlGdS4gcPj4ag2E2Yg/SYr9oGpFrW8XPXQdO9
fwCJ5L10T3e/jURmjpit+OaiEtXNXDBHkOevyQH/ewI4yBDvjX5IPAwOaIfJjeJL
0H2rK8WcFXMBqjMOKtgbPrgclCe03ArlltviP1L4dAiu6tFT9DU/iD9FUbpZP1aX
xghM7bbd6clyo891jJ7/iYLPdpmbaETy5ru+J7njY26x1F1DRD9hO8XtV3KuXEoc
QtUzStO9Ru3obb4RSVP4li3enovT3hWxb9utwCbabTnY6aY/od2axMkqr0vIQLxI
ubttX94=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:48:25 2025 by rpki-client