Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e203430363736.roa
File: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=
Subject key identifier: 2D:2D:FA:0C:CA:C4:22:B3:4A:5C:FF:79:31:45:35:B9:A7:DD:B8:26
Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial: 4664ECFE0B1F338505F389BA02E6569AFCA884D8
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e203430363736.roa
Signing time: Tue 15 Jul 2025 23:54:13 +0000
ROA not before: Tue 15 Jul 2025 23:49:13 +0000
ROA not after: Tue 14 Jul 2026 23:54:13 +0000
asID: 40676
IP address blocks: 45.150.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:64:ec:fe:0b:1f:33:85:05:f3:89:ba:02:e6:56:9a:fc:a8:84:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Validity
Not Before: Jul 15 23:49:13 2025 GMT
Not After : Jul 14 23:54:13 2026 GMT
Subject: CN=2D2DFA0CCAC422B34A5CFF79314535B9A7DDB826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:58:c0:de:97:6f:59:51:c0:00:87:74:fb:
a8:04:67:21:57:de:16:32:9d:79:0c:2e:39:e6:fd:
10:89:8c:1e:e2:9b:81:c8:91:cc:52:b7:05:1b:0c:
74:58:ee:7a:0d:67:4e:76:89:ee:85:19:6e:69:45:
9d:ad:09:ee:13:d0:f7:e0:05:24:41:54:6e:a8:13:
17:fb:a7:ff:fd:ff:9e:72:a3:eb:75:7e:a7:61:f0:
08:02:7c:41:f3:78:59:46:4d:79:f5:d1:f5:01:a5:
72:95:cb:ce:93:79:2b:f2:55:db:c4:12:fc:6e:85:
33:1f:24:cd:9a:20:9e:78:2b:ab:eb:b6:3b:04:7c:
1b:66:31:02:91:37:67:5c:00:0a:03:2f:2f:6b:91:
17:24:6b:88:d5:ab:90:14:e3:e3:b3:6e:e3:6f:81:
32:ce:43:e9:d5:f7:02:1f:ff:ea:6d:cf:68:d4:c8:
6b:5b:ad:6c:b7:31:60:c4:3d:e2:16:9c:8e:48:19:
51:a6:ce:71:4f:b1:47:96:a3:52:66:d2:c0:b0:f0:
a2:88:53:2a:9e:10:05:7b:59:b8:2e:38:b5:08:46:
68:27:0a:0c:11:27:57:5e:62:64:cb:45:24:ec:a3:
21:c2:91:92:9b:32:11:1e:33:d6:df:a4:8d:9b:ef:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2D:FA:0C:CA:C4:22:B3:4A:5C:FF:79:31:45:35:B9:A7:DD:B8:26
X509v3 Authority Key Identifier:
keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e372e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.7.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e7:d0:2e:47:60:8f:79:f8:4c:f9:73:3c:04:f1:1c:de:2a:
0d:a9:ce:6e:88:d4:d6:d2:58:da:31:68:df:bc:ea:19:3c:cf:
fa:9b:c7:da:e1:86:97:38:a9:6a:c7:04:8e:c6:03:e9:df:b9:
5e:ba:17:97:ea:5f:f0:83:b5:ab:88:01:69:fc:0b:1d:40:42:
68:c8:f2:c9:39:ff:5c:8a:7d:27:7b:e2:e8:66:97:fa:e9:bb:
f2:d1:1a:f9:79:8f:74:57:d8:aa:63:5d:fb:42:df:5e:c8:9d:
ec:d3:05:4b:1e:88:eb:38:37:72:39:c0:be:6a:5e:1d:56:ba:
b0:14:fe:67:6a:bc:36:20:3f:f5:a0:f0:3b:64:e5:f0:7d:c2:
ba:18:c1:69:80:29:de:3b:7f:03:59:ed:fa:a7:5a:74:50:a0:
98:5e:90:65:70:f0:98:c9:50:0f:2a:cf:a5:11:0d:5f:35:a9:
07:d0:2b:03:f9:4f:31:a1:9f:0d:20:c9:ba:34:09:de:77:20:
38:3d:2e:72:39:22:1d:8c:e2:cf:e1:bc:5b:5d:cb:77:4c:12:
50:d9:3b:61:9f:f4:a5:ef:89:9f:df:cd:63:40:5f:7b:95:d2:
85:42:ae:ef:1f:13:d4:8f:66:0a:57:c9:9f:f7:79:ef:c4:30:
10:9f:7b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:38:11 2025 by rpki-client