Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135392e302f32342d3234203d3e203633313530.roa
File: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (raw, json)
Hash identifier: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=
Subject key identifier: 3F:87:20:1A:B7:A1:B5:29:81:7C:3D:15:7F:1A:6A:99:5C:60:A0:6F
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 59AFCE22150A845F4A5AAEB1F877A25C49FC822C
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135392e302f32342d3234203d3e203633313530.roa
Signing time: Wed 05 Mar 2025 12:24:58 +0000
ROA not before: Wed 05 Mar 2025 12:19:58 +0000
ROA not after: Wed 04 Mar 2026 12:24:58 +0000
asID: 63150
IP address blocks: 185.58.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:af:ce:22:15:0a:84:5f:4a:5a:ae:b1:f8:77:a2:5c:49:fc:82:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 5 12:19:58 2025 GMT
Not After : Mar 4 12:24:58 2026 GMT
Subject: CN=3F87201AB7A1B529817C3D157F1A6A995C60A06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:71:60:e5:11:bf:0a:33:9c:41:84:99:f9:
1e:d5:e6:61:4d:c4:21:c6:f3:12:2f:99:79:24:73:
48:03:43:c0:8b:4a:f1:d3:26:3d:a3:a6:2b:1c:ab:
c6:11:d8:5a:94:5a:66:2b:b3:7a:44:47:3a:93:a1:
94:1c:13:48:24:36:fa:c8:f8:ca:27:d3:4e:68:03:
64:3e:e8:fa:63:b1:93:03:f1:68:ea:d6:f0:61:91:
57:7c:68:27:9d:3e:c0:8f:17:5a:1e:e3:38:a0:4b:
25:a2:9c:63:5b:4d:60:de:31:d2:66:b2:7b:c3:12:
e2:f0:58:65:4a:af:cf:60:99:7a:8d:10:ae:58:f1:
42:14:66:cc:59:59:57:be:45:92:7c:ff:1b:f6:95:
5a:98:d4:68:65:5c:95:9f:8d:67:d8:94:5e:03:bb:
04:d0:a0:a2:2b:5c:0a:e0:7d:d1:3b:d0:64:b3:23:
33:4b:5f:fd:45:15:33:c1:ec:e9:28:8e:aa:de:31:
75:0c:e8:c7:bb:94:bc:ee:98:ec:4a:d6:a5:9e:ce:
66:c2:72:60:af:2b:19:c9:cc:7e:0b:35:dd:ed:77:
84:50:49:f4:0f:e2:9b:db:75:7c:3a:22:32:cb:67:
27:b0:e3:cb:fb:22:91:81:c8:c9:49:29:ba:90:83:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:20:1A:B7:A1:B5:29:81:7C:3D:15:7F:1A:6A:99:5C:60:A0:6F
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135392e302f32342d3234203d3e203633313530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.159.0/24
Signature Algorithm: sha256WithRSAEncryption
48:7b:dd:e1:18:e1:c7:1e:7c:1e:49:91:03:fa:8a:dd:bf:a6:
4a:e3:cb:32:aa:75:6a:71:a0:3d:fb:20:55:ea:e4:15:a5:cd:
a0:2b:b1:02:b2:5b:80:e0:27:ea:85:bc:9b:96:9f:c8:11:9e:
9c:8b:ff:95:f2:45:4c:24:b9:c4:93:00:80:56:92:21:92:2d:
c9:65:93:10:62:b1:2c:8f:66:71:41:0e:5d:dc:12:b5:09:bb:
db:ec:8f:58:ba:70:97:99:eb:d9:c7:5f:5b:56:7f:52:8b:ac:
3c:55:cf:b1:7c:89:e2:9a:91:87:78:f2:8e:e1:9e:8a:75:bf:
10:79:2b:63:c6:59:c6:91:cb:de:22:90:80:80:a7:e6:0c:28:
3c:90:43:00:d8:c5:da:f7:95:0c:e0:30:f6:8a:2d:71:50:c1:
60:fc:98:57:50:b8:4e:cd:09:d5:8d:55:ae:76:ed:b1:bb:b5:
5e:ff:a3:59:1c:ed:b0:26:26:c4:45:2c:a9:29:a6:b6:4e:7e:
64:1c:e9:c8:f5:4b:6a:ee:90:c1:aa:fe:5f:5b:e7:d5:98:43:
e0:ab:4c:71:dd:ce:94:bd:3f:0e:c7:ee:ef:5c:f3:2b:66:04:
65:68:85:f4:31:5f:34:f3:48:53:50:22:94:b5:04:d9:82:3a:
3c:45:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:36:15 2025 by rpki-client