Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35362e302f32342d3234203d3e2039333034.roa
File: 3134362e3234372e35362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: pfMwqvQ0dMhzxyI/lyxkgI3sWlDZ5/WAWZxeCzFbSBI=
Subject key identifier: 22:A6:86:DB:43:97:38:9C:A3:EF:B8:89:9B:EF:C9:99:BF:50:E4:F2
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 309AD1C538F4281C46BE8D27E678D489D30C426B
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35362e302f32342d3234203d3e2039333034.roa
Signing time: Sun 04 May 2025 13:40:11 +0000
ROA not before: Sun 04 May 2025 13:35:11 +0000
ROA not after: Sun 03 May 2026 13:40:11 +0000
asID: 9304
IP address blocks: 146.247.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 02:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9a:d1:c5:38:f4:28:1c:46:be:8d:27:e6:78:d4:89:d3:0c:42:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: May 4 13:35:11 2025 GMT
Not After : May 3 13:40:11 2026 GMT
Subject: CN=22A686DB4397389CA3EFB8899BEFC999BF50E4F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:4c:12:53:c7:db:4f:d7:05:85:2c:63:50:
8e:59:ef:8a:fa:be:38:75:29:53:a4:13:86:b7:d3:
6b:98:f1:84:f9:ea:10:9d:0c:fc:d3:83:83:fb:40:
5e:86:0f:2d:a4:fe:cb:bc:10:d9:42:c4:82:21:0b:
6d:6c:f6:8f:2d:5d:c6:7d:80:6a:b8:0b:ea:34:4c:
b3:03:41:ca:db:48:3e:3e:0e:e5:6c:da:08:f1:dc:
3f:82:7e:51:27:dc:90:04:7c:fa:c9:da:51:37:11:
ee:fd:38:4b:a0:05:21:c1:09:b4:44:55:20:ec:52:
e1:af:54:ad:a8:d0:cb:72:2b:2d:7a:d4:dc:14:cc:
c9:bf:2c:50:c5:8d:50:a2:e6:4a:30:ad:5b:c0:be:
7b:11:89:0a:3d:03:f2:b5:fb:c6:19:80:53:fa:4b:
89:2e:d2:80:5b:4b:86:bd:24:d0:96:56:52:54:0a:
9a:bf:74:3f:35:62:9f:97:f0:bd:b9:6d:65:ef:8f:
6c:05:90:79:73:d4:ae:29:67:74:88:f8:23:e4:24:
e6:4d:dd:4b:80:46:f0:34:c8:97:2b:f8:d2:96:dd:
eb:f7:5a:16:f9:d7:76:ab:39:dd:a1:11:c0:41:94:
a3:3c:f9:1b:9e:06:3f:9b:7f:85:9c:27:11:e9:5f:
d8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A6:86:DB:43:97:38:9C:A3:EF:B8:89:9B:EF:C9:99:BF:50:E4:F2
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35362e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.56.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:4a:91:24:e2:6c:4b:40:2c:c4:5f:8e:51:5c:ed:ba:26:fe:
d7:4d:f3:2e:8a:11:cf:ab:06:de:7b:88:f1:1f:15:bc:8b:a3:
2f:2e:48:bc:51:05:a8:e0:30:42:57:f5:76:75:d8:b9:51:4a:
d1:fd:ff:22:40:c3:7e:35:5e:a0:55:d9:97:3c:10:39:83:3f:
63:82:54:28:a3:44:f7:d7:89:21:02:4b:f5:b3:93:2b:5d:5e:
5e:61:39:44:74:42:11:1a:a3:df:25:5f:76:08:e2:fc:4f:a7:
bb:e7:5f:42:04:44:95:4b:64:d2:2d:18:fa:4d:d2:ef:58:e5:
ec:40:0c:23:dd:ae:7b:28:04:fb:fe:0c:00:5c:77:2c:c0:3a:
79:8c:ba:ec:f3:fb:82:bd:2f:05:85:91:64:b8:31:c8:31:45:
df:eb:97:22:a3:a7:35:51:4c:81:10:62:d8:23:cb:7f:94:a2:
95:97:6a:9c:1a:29:6a:1b:93:f0:d7:6f:bc:19:2f:c7:02:c9:
2a:81:5b:31:ca:22:e6:ae:a0:2f:32:b1:35:de:8e:66:22:38:
9a:9e:d4:e5:5b:3f:df:d7:4a:ba:2a:7c:6b:6d:e3:81:a1:a3:
3e:9d:35:4a:00:5a:b7:53:06:6b:70:a2:6c:c9:cf:6b:99:d8:
09:3c:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:29:31 2025 by rpki-client