Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35372e302f32342d3234203d3e203438363738.roa
File: 34352e3135382e35372e302f32342d3234203d3e203438363738.roa (raw, json)
Hash identifier: nsO0QRn0rDXXzcAd6nn/6hDfbO9GpR+N2BZJvuUjei4=
Subject key identifier: A7:97:BD:DE:B8:F3:DB:B1:CB:68:7F:3C:79:74:CF:7C:C9:F4:4A:06
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 410E20E8D1B77462FC4638163AB17AC0770F810D
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35372e302f32342d3234203d3e203438363738.roa
Signing time: Sat 14 Jun 2025 15:54:09 +0000
ROA not before: Sat 14 Jun 2025 15:49:09 +0000
ROA not after: Sat 13 Jun 2026 15:54:09 +0000
asID: 48678
IP address blocks: 45.158.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0e:20:e8:d1:b7:74:62:fc:46:38:16:3a:b1:7a:c0:77:0f:81:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jun 14 15:49:09 2025 GMT
Not After : Jun 13 15:54:09 2026 GMT
Subject: CN=A797BDDEB8F3DBB1CB687F3C7974CF7CC9F44A06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:14:dd:5d:8b:15:26:fb:a7:31:f2:d3:70:
18:a7:f5:39:98:b1:76:fc:5e:d3:c2:53:c0:3e:52:
8a:90:1a:91:7c:68:5c:ce:2d:ea:51:ed:79:0c:3c:
1a:a2:72:2d:6b:4c:3f:fb:33:55:88:66:b9:74:76:
08:53:84:56:50:e3:2d:56:cc:78:cd:53:b7:70:34:
1a:41:ed:2b:e6:f4:93:87:fd:e8:36:dc:ef:db:f6:
62:4f:14:a8:3c:d1:27:04:84:ad:33:48:9a:35:be:
1a:2d:dc:a0:25:56:3e:28:60:68:eb:ad:b7:ae:ec:
30:56:3c:11:98:92:9d:f7:1f:b7:a2:c1:8c:99:b6:
ad:4c:d5:34:7e:5c:65:58:54:76:ac:4a:7a:b3:b4:
24:e8:2c:34:d1:7c:8d:83:b7:5c:a2:c6:ec:c0:ea:
40:d9:68:e3:86:90:44:bf:af:12:d8:88:22:47:c7:
1e:72:2d:6c:76:f3:33:6d:51:a6:49:30:08:6e:c0:
49:bc:5a:60:a4:e2:a4:a8:13:e7:2d:8d:bf:c6:7f:
68:7f:83:a2:3f:ea:7a:da:3a:3d:3a:7d:a5:f4:48:
38:e8:65:c5:41:4e:be:6f:fc:ac:51:4b:e5:be:a2:
31:81:d4:c8:1e:b3:12:57:6e:22:af:52:e3:34:50:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:BD:DE:B8:F3:DB:B1:CB:68:7F:3C:79:74:CF:7C:C9:F4:4A:06
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3135382e35372e302f32342d3234203d3e203438363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
03:25:b4:01:ca:90:ae:44:c8:ce:61:43:1b:9a:92:6c:ab:c2:
b8:28:e4:b5:da:81:65:f3:2f:87:d0:3c:8a:44:f8:d8:e1:7b:
dc:b7:cb:49:ed:10:8c:c4:be:78:98:a2:12:86:25:21:ff:35:
75:ea:3c:ce:03:b1:5e:03:23:dd:e2:05:4d:02:78:fe:c5:1d:
41:a3:49:2a:b2:38:d7:94:94:08:ec:78:1a:71:00:62:4a:94:
19:93:d1:8b:e1:97:6c:6f:e0:58:6f:11:5b:21:3c:24:be:07:
b6:15:83:e7:83:ae:89:28:31:17:99:12:2f:5f:ac:a1:ea:2a:
a0:bf:d0:08:07:cb:32:11:13:b1:0e:1a:a5:6d:d3:da:97:a3:
7f:d6:c1:8c:6a:4c:a0:c0:18:5f:a1:56:32:71:ba:36:55:07:
40:fd:78:a2:5c:62:bc:f2:b5:e9:00:8c:7b:95:b9:b5:2c:44:
5e:88:67:64:24:5d:75:e5:1a:11:5d:27:cc:84:ee:88:7d:b1:
87:f5:89:90:bd:87:a4:58:b7:b3:d7:50:d7:63:d9:62:80:20:
72:6e:45:de:96:4d:6f:51:24:33:7d:70:64:83:69:f5:7f:b4:
1f:f2:6d:e9:55:9b:9f:45:94:d2:32:ca:07:48:8a:5b:74:02:
e7:f4:a9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:49:43 2025 by rpki-client