Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230342e302f32332d3332203d3e203531313637.roa
File: 34352e3134392e3230342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: ES3OsxQz+PzDa1LcIrNyFp6tRJWwKbKKAo58/dt9edM=
Subject key identifier: 0B:BA:60:1A:96:D5:30:2E:EA:0C:0E:61:E4:1C:8F:EB:69:B5:AD:C1
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 3B6CED4F1C853B808D1ACAB85CE38E567270BE5E
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230342e302f32332d3332203d3e203531313637.roa
Signing time: Wed 23 Apr 2025 13:46:08 +0000
ROA not before: Wed 23 Apr 2025 13:41:08 +0000
ROA not after: Wed 22 Apr 2026 13:46:08 +0000
asID: 51167
IP address blocks: 45.149.204.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6c:ed:4f:1c:85:3b:80:8d:1a:ca:b8:5c:e3:8e:56:72:70:be:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 23 13:41:08 2025 GMT
Not After : Apr 22 13:46:08 2026 GMT
Subject: CN=0BBA601A96D5302EEA0C0E61E41C8FEB69B5ADC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5f:9b:07:96:28:52:b0:59:b4:3b:1f:df:49:
5f:ae:ab:9d:65:d8:f9:2b:d8:65:96:2b:dc:3e:99:
f1:c2:b9:cc:fb:73:1c:55:83:59:64:f4:07:eb:43:
dd:fe:d9:70:30:e7:a9:20:9f:0f:0c:db:fa:b1:cc:
f8:df:61:fa:03:31:5d:75:ca:43:d6:79:0b:78:8f:
ad:c3:36:1f:fa:63:64:93:77:39:55:e1:a6:dd:3f:
26:d5:5c:28:10:46:e6:a0:e7:df:6a:6c:fd:e5:b9:
62:ce:0c:e0:56:95:bf:f2:98:50:ef:72:e4:67:e2:
d3:b2:3b:7f:73:11:c0:08:03:45:8b:66:15:d2:ef:
23:ef:a7:d4:0f:b1:93:b9:ce:1d:66:88:6b:79:2a:
5a:49:4b:8d:26:eb:21:f5:a1:c7:c7:14:fe:dc:1b:
d4:8d:e8:6d:72:15:6c:27:7e:70:3e:97:59:6e:06:
77:fc:0f:d8:9b:6d:23:84:a5:1b:e7:09:46:51:a2:
0f:91:7d:5d:c0:d4:82:75:20:83:75:79:9f:34:b9:
19:fc:6e:22:b1:c8:ad:c5:e3:0d:98:2a:41:c8:f3:
40:37:cb:bb:d1:d2:69:1e:81:3c:a4:ba:ea:65:4e:
5a:5e:93:2c:ad:dd:bb:0a:1f:72:85:0c:77:4b:24:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BA:60:1A:96:D5:30:2E:EA:0C:0E:61:E4:1C:8F:EB:69:B5:AD:C1
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.204.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:62:55:13:8c:3a:34:d8:63:70:72:0d:1f:22:7c:da:23:13:
01:4e:ce:4a:d5:6d:33:6d:75:48:f2:a9:46:e6:08:f8:83:f5:
bf:29:93:a5:36:27:0c:60:0c:62:ad:a1:42:a5:21:27:84:4f:
82:0c:c6:07:13:ea:40:cb:e7:1e:c3:1a:d4:53:a8:56:1a:47:
18:14:78:f3:a0:97:1b:cc:bf:a0:d5:37:c2:ea:36:5a:c5:e8:
42:cf:1a:75:77:19:a2:66:af:87:14:b1:3b:c9:72:1e:7f:33:
c7:76:3f:bd:e3:4d:5d:1b:4c:17:51:b3:a4:47:93:16:dc:46:
d6:18:d0:af:35:34:47:e3:ba:a6:f7:6e:86:19:12:04:b0:60:
27:0d:16:59:d5:e1:62:e7:12:b1:06:c1:81:5a:39:b7:28:32:
84:2e:b1:1d:96:dc:10:c9:00:40:d6:c9:05:60:72:8b:ff:43:
0a:5a:1e:d3:4d:e3:18:88:37:a8:1d:89:7b:33:9a:ed:32:1b:
6d:bc:91:41:64:2b:fa:2d:b6:c2:c8:f9:40:3a:ae:f1:d2:b6:
30:f6:50:ab:80:0c:fb:24:18:d5:a9:1d:ea:2c:c6:72:2d:be:
bf:8b:9e:72:c0:e4:58:19:a4:5e:74:d8:a3:1f:61:4e:c0:48:
f5:35:e1:88
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUO2ztTxyFO4CNGsq4XOOOVnJwvl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj
MjMxM2EzYTAeFw0yNTA0MjMxMzQxMDhaFw0yNjA0MjIxMzQ2MDhaMDMxMTAvBgNV
BAMTKDBCQkE2MDFBOTZENTMwMkVFQTBDMEU2MUU0MUM4RkVCNjlCNUFEQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSX5sHlihSsFm0Ox/fSV+uq51l
2Pkr2GWWK9w+mfHCucz7cxxVg1lk9AfrQ93+2XAw56kgnw8M2/qxzPjfYfoDMV11
ykPWeQt4j63DNh/6Y2STdzlV4abdPybVXCgQRuag599qbP3luWLODOBWlb/ymFDv
cuRn4tOyO39zEcAIA0WLZhXS7yPvp9QPsZO5zh1miGt5KlpJS40m6yH1ocfHFP7c
G9SN6G1yFWwnfnA+l1luBnf8D9ibbSOEpRvnCUZRog+RfV3A1IJ1IIN1eZ80uRn8
biKxyK3F4w2YKkHI80A3y7vR0mkegTykuuplTlpekyyt3bsKH3KFDHdLJJjVAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUC7pgGpbVMC7qDA5h5ByP62m1rcEwHwYDVR0j
BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J
eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzEzNDM5MmUzMjMw
MzQyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LZXMMA0GCSqGSIb3DQEBCwUAA4IBAQChYlUTjDo02GNwcg0fInzaIxMBTs5K1W0z
bXVI8qlG5gj4g/W/KZOlNicMYAxiraFCpSEnhE+CDMYHE+pAy+cewxrUU6hWGkcY
FHjzoJcbzL+g1TfC6jZaxehCzxp1dxmiZq+HFLE7yXIefzPHdj+9401dG0wXUbOk
R5MW3EbWGNCvNTRH47qm926GGRIEsGAnDRZZ1eFi5xKxBsGBWjm3KDKELrEdltwQ
yQBA1skFYHKL/0MKWh7TTeMYiDeoHYl7M5rtMhttvJFBZCv6LbbCyPlAOq7x0rYw
9lCrgAz7JBjVqR3qLMZyLb6/i55ywORYGaRedNijH2FOwEj1NeGI
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:32 2025 by rpki-client