Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230362e302f32332d3332203d3e203531313637.roa
File: 34352e3134392e3230362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: nsW4DPbZ/PjxlHRLWP2HY8qJ2tSTZQ6qnEoQqhleCj0=
Subject key identifier: DD:CA:00:21:B4:13:A0:33:42:7F:9F:55:FB:3B:F5:1F:13:D4:D7:AA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5C6E6D383F93674D46C6CFBD8F739645BA7B7814
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230362e302f32332d3332203d3e203531313637.roa
Signing time: Wed 23 Apr 2025 13:46:08 +0000
ROA not before: Wed 23 Apr 2025 13:41:08 +0000
ROA not after: Wed 22 Apr 2026 13:46:08 +0000
asID: 51167
IP address blocks: 45.149.206.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:6e:6d:38:3f:93:67:4d:46:c6:cf:bd:8f:73:96:45:ba:7b:78:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 23 13:41:08 2025 GMT
Not After : Apr 22 13:46:08 2026 GMT
Subject: CN=DDCA0021B413A033427F9F55FB3BF51F13D4D7AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:47:58:38:50:9e:06:b4:14:4a:f0:60:8a:
3e:e7:90:93:ca:c0:99:07:87:cb:4c:7e:37:84:a4:
cf:28:41:1f:f2:8d:46:b5:8b:f9:c1:f4:e0:83:4e:
a6:96:92:d7:f7:68:83:8f:78:03:f0:d3:46:f9:b6:
79:e7:a4:2a:76:36:f8:0b:c9:c6:4b:98:47:c8:ea:
43:88:cb:37:8f:6f:15:25:4e:cb:f9:21:66:d2:49:
a5:6f:96:2a:c8:29:8a:0b:01:c0:c0:a1:b2:6d:b7:
a6:17:c2:f8:50:08:3e:d1:cd:16:de:fc:48:bd:6a:
76:ad:d9:6b:9c:24:0e:35:37:dd:26:bf:5e:ee:f9:
96:da:6f:3f:d2:1c:ae:69:34:fd:6e:68:7a:e8:21:
8d:0e:60:4c:f9:a9:10:1d:73:e2:4e:0d:4f:6d:63:
73:c2:ab:d8:37:bd:9c:16:cd:39:ae:0e:2e:5e:93:
43:04:a4:7e:d8:be:0b:33:ea:9b:01:5a:44:fe:bb:
da:bd:bb:25:e3:ef:5e:ea:6a:c3:e2:88:9c:8d:26:
6c:9c:69:ec:f0:44:74:ba:e7:86:ea:f3:0b:4e:43:
bc:b9:ed:df:04:82:98:98:52:55:2f:84:7e:0d:39:
f4:eb:67:a4:84:40:0b:71:82:6d:4c:60:48:f1:18:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:00:21:B4:13:A0:33:42:7F:9F:55:FB:3B:F5:1F:13:D4:D7:AA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134392e3230362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.206.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:e2:c2:42:b2:c1:90:75:70:3a:e2:93:fc:c3:28:ca:57:ee:
41:cf:4d:cf:ac:10:ed:e0:87:75:ea:8a:27:0c:79:0a:32:5d:
af:c8:af:ab:e0:77:92:43:2e:b3:57:ae:9c:18:31:f3:f9:3a:
15:f8:78:0f:13:29:7d:8a:16:95:0d:fb:b9:8e:88:41:fb:1f:
28:ad:ec:32:f6:2d:ab:6a:93:15:be:41:5f:1e:18:21:d7:6a:
c7:69:50:e5:60:3d:88:44:74:3f:df:d7:b0:ca:82:e1:f9:09:
0a:2a:1c:ff:e2:e5:75:cf:5d:c3:0c:5e:bc:a8:71:c7:8d:a2:
c3:d6:ee:42:fb:c0:0b:6b:e4:8e:85:19:43:69:39:74:f7:22:
82:7a:94:13:bd:dc:58:30:2c:8a:9e:ba:d7:ef:50:e2:34:7f:
2d:f0:cb:04:3c:63:4e:91:81:55:09:ba:7a:95:04:c1:1f:4f:
97:db:30:f1:eb:ba:bb:c2:bf:af:7d:16:00:bf:14:07:98:cb:
bc:a0:5f:81:45:c1:68:d2:39:86:ca:cb:d9:f4:d4:54:08:67:
88:b7:76:5f:09:75:da:63:cd:5c:49:f1:24:dd:57:23:87:15:
d2:6d:c2:0e:c6:fc:53:78:7e:dc:a4:1e:cf:b3:ae:06:87:72:
98:43:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:39:58 2025 by rpki-client