Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e203631333137.roa
File: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=
Subject key identifier: 04:D7:F5:AC:76:41:05:10:E5:5C:AC:EF:26:2B:6A:38:01:AC:97:85
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 297F628EC34D2FE1A689BE09C577AC28B4E7ACA1
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e203631333137.roa
Signing time: Thu 08 May 2025 16:54:07 +0000
ROA not before: Thu 08 May 2025 16:49:07 +0000
ROA not after: Thu 07 May 2026 16:54:07 +0000
asID: 61317
IP address blocks: 45.66.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:7f:62:8e:c3:4d:2f:e1:a6:89:be:09:c5:77:ac:28:b4:e7:ac:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: May 8 16:49:07 2025 GMT
Not After : May 7 16:54:07 2026 GMT
Subject: CN=04D7F5AC76410510E55CACEF262B6A3801AC9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:c5:b3:5f:af:f9:77:0c:85:8d:5a:37:46:
f7:f6:85:ca:1e:ff:b8:87:15:c1:0f:d7:aa:26:6f:
f7:d9:33:bc:0f:86:cc:7e:89:5c:c9:5b:47:06:7e:
c8:68:da:e9:46:e5:89:d2:85:3e:81:0c:d9:e3:ea:
34:8c:d3:a2:a0:a9:66:62:16:b3:22:4d:bb:a2:11:
40:9e:51:43:ac:7e:dc:d6:de:b3:3e:55:87:44:57:
62:a9:cd:71:a9:74:08:c8:51:24:3a:78:d5:ec:91:
c8:af:eb:17:08:ae:28:3b:78:88:52:ea:93:94:ac:
6c:07:b7:a5:48:46:2f:51:0b:5d:60:46:a1:e0:a6:
61:b4:92:aa:07:d0:47:aa:bd:1f:19:a6:11:8e:14:
12:f2:f0:01:4f:fd:64:3a:de:70:7f:24:2e:88:e7:
ce:59:7a:fd:87:c3:1b:6f:f3:fa:13:55:34:f1:47:
a5:9a:6d:69:d7:69:df:d6:e0:0d:2a:96:27:75:b9:
2e:8b:ca:ce:2b:28:e9:42:2c:e6:04:ac:94:5c:87:
bf:1d:f0:bb:fc:7a:51:5c:47:7f:95:e4:a7:d8:85:
6e:5e:e3:f8:f7:35:b1:94:6f:89:7c:3f:66:f6:19:
9b:51:6e:0b:b6:54:92:83:57:7c:82:3b:af:d5:a9:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:F5:AC:76:41:05:10:E5:5C:AC:EF:26:2B:6A:38:01:AC:97:85
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3134382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.148.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:46:eb:f2:97:bd:c8:f9:ce:bf:df:d3:73:df:56:48:6a:c5:
93:ef:da:bd:39:4b:23:d4:11:2b:60:f7:7a:2c:58:43:87:41:
d4:b2:56:22:b3:e2:11:77:e1:0e:90:00:eb:03:b4:4e:a9:04:
b7:cf:24:7d:07:c9:b0:54:d1:68:6e:ad:60:4c:d7:00:41:e3:
b2:17:31:57:2d:e3:89:f6:ea:2b:2e:9b:6a:39:1a:28:06:16:
86:7a:a5:31:6e:ec:22:9b:91:ab:24:c8:0f:05:53:aa:9f:e8:
dd:b8:51:77:16:26:54:4b:28:8b:84:60:24:4d:ee:d2:02:25:
69:1d:39:78:45:92:d8:42:39:b9:ed:0c:36:df:a2:6c:a0:03:
36:85:49:7e:d2:9c:b4:9e:46:a6:67:e7:76:58:6d:93:15:5d:
97:56:c1:05:44:07:26:1a:43:ca:a7:de:2e:2d:3c:c2:26:93:
fb:69:9d:39:78:b7:dd:65:53:fd:de:d5:56:63:d8:08:c4:48:
58:8e:a4:b5:17:67:2b:d3:ab:e5:4c:2c:95:a3:96:b7:75:a4:
d0:d0:d7:76:d2:e4:6a:9b:85:c1:95:04:6f:a0:31:a7:af:60:
47:5e:0b:de:6a:06:d9:d6:e7:51:6f:30:87:7c:36:98:68:9d:
c8:d9:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:10:33 2025 by rpki-client