Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3135392e3233302e302f32332d3332203d3e203531313637.roa
File: 34352e3135392e3233302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: gr9Ml6m0Te/GLX4fRwm0ObwLBo6TS5ukB8fIuQGm/Bs=
Subject key identifier: 85:BE:5E:E3:E6:91:AD:03:D8:CD:8C:60:7F:A0:F7:99:02:F3:1F:50
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5344EF666C12DEB09D794DE3569DAAF5EFD980EB
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3135392e3233302e302f32332d3332203d3e203531313637.roa
Signing time: Wed 23 Apr 2025 13:46:08 +0000
ROA not before: Wed 23 Apr 2025 13:41:08 +0000
ROA not after: Wed 22 Apr 2026 13:46:08 +0000
asID: 51167
IP address blocks: 45.159.230.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 15:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:44:ef:66:6c:12:de:b0:9d:79:4d:e3:56:9d:aa:f5:ef:d9:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Apr 23 13:41:08 2025 GMT
Not After : Apr 22 13:46:08 2026 GMT
Subject: CN=85BE5EE3E691AD03D8CD8C607FA0F79902F31F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:22:71:d7:27:ba:bc:0e:95:94:6a:1d:3d:
a5:2f:13:e2:be:85:7c:e2:f4:b0:90:ff:33:1b:e5:
02:db:a0:33:23:6c:e3:a4:02:20:23:2e:c1:e2:3e:
83:33:b2:f4:27:df:df:95:3e:18:4a:bc:66:40:f6:
58:36:f6:8c:b9:e9:9c:f2:3d:95:a9:9b:96:69:22:
be:f8:b6:fa:c5:86:de:c2:72:71:53:37:9d:cd:f5:
6e:2d:89:3b:ea:1f:bb:55:a5:aa:d4:b2:2b:86:33:
91:33:59:92:be:e1:a1:4d:8a:2c:e5:0d:05:0f:7d:
86:69:f1:79:b1:2f:3a:47:73:97:b3:1c:82:fd:05:
7b:5d:f4:d2:17:ac:d2:02:04:10:8d:59:61:c8:21:
66:75:38:cb:5d:bd:66:5f:a7:e2:e0:f7:ec:aa:c2:
9e:02:e9:2b:e8:cc:24:e1:ef:a8:a2:69:08:d6:ed:
ec:a2:22:8a:3b:63:9b:db:77:4b:ab:c2:1e:09:d2:
a5:f5:f3:3a:6f:0e:56:b8:92:52:86:dc:3d:3c:51:
f5:c2:7e:c2:8a:09:24:fc:aa:5f:32:71:dc:77:a2:
aa:d9:60:39:a8:04:77:3d:b8:ce:fa:96:f3:c3:dd:
ce:14:45:28:64:14:2c:fd:1f:7b:1f:89:84:b0:a4:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BE:5E:E3:E6:91:AD:03:D8:CD:8C:60:7F:A0:F7:99:02:F3:1F:50
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3135392e3233302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.230.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:7e:7b:4e:6c:47:bb:78:0f:6c:48:8d:14:d4:34:66:73:c8:
b5:5e:d3:8a:c9:18:49:d4:71:b6:8d:96:01:25:ae:e7:1e:3b:
d1:4a:9a:a1:6f:ca:f4:fa:72:0f:ec:26:87:1c:92:9e:e0:20:
8c:53:e9:ea:f2:01:12:15:3d:bc:9a:0c:bc:10:cb:c8:84:37:
70:f8:a2:f7:66:60:8a:27:5b:68:75:23:cf:af:ea:84:a2:0b:
a2:51:7e:f2:90:5a:66:7a:b9:04:e3:da:26:28:f8:af:a1:4a:
3b:1d:70:e6:f8:0e:19:78:2f:9e:65:a9:ac:e4:f2:df:40:76:
ae:dd:7f:7d:83:13:a3:06:b7:23:a1:36:61:82:a6:17:c2:c0:
50:25:90:c7:d4:f5:4b:a9:5a:e3:f3:0c:9d:45:12:a5:a6:f6:
a6:bb:ac:ed:f3:a6:d7:8f:4c:54:34:05:05:b1:58:d7:9c:53:
20:87:20:fd:71:0b:3a:5b:e6:0e:b3:d8:13:c3:81:af:cd:31:
35:3f:3e:88:20:fd:ec:1b:e7:a0:7a:a8:f5:7a:89:3f:32:39:
22:0d:54:df:74:b8:81:d8:89:6e:65:c2:59:1b:07:14:ea:94:
33:45:79:69:cf:18:e5:cc:c6:03:57:13:4f:b5:1f:3d:cf:12:
9f:55:41:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:03:45 2025 by rpki-client