Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e2034353135.roa
File: 3137382e3133322e3139332e302f32342d3234203d3e2034353135.roa (raw, json)
Hash identifier: KXxhbnwquL+aHdUDuLgZN8MKkKra6rINzz82OM/ox3U=
Subject key identifier: D8:AE:62:A5:2F:34:FC:6F:C2:83:F0:CC:A0:00:E2:2D:5A:0C:28:E3
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 690CA78F058A2263983DCF5A285595CA755FC61F
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e2034353135.roa
Signing time: Sun 26 Jan 2025 14:39:22 +0000
ROA not before: Sun 26 Jan 2025 14:34:22 +0000
ROA not after: Sun 25 Jan 2026 14:39:22 +0000
asID: 4515
IP address blocks: 178.132.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0c:a7:8f:05:8a:22:63:98:3d:cf:5a:28:55:95:ca:75:5f:c6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Jan 26 14:34:22 2025 GMT
Not After : Jan 25 14:39:22 2026 GMT
Subject: CN=D8AE62A52F34FC6FC283F0CCA000E22D5A0C28E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:40:13:31:a6:72:0f:d8:37:3f:55:08:05:
3c:16:14:02:56:2c:b5:b8:41:9e:d4:ab:65:bf:53:
71:90:e3:43:e2:f7:3e:36:51:19:3e:05:4f:7a:12:
da:a4:0f:21:38:5d:e6:ff:95:b3:ba:6e:61:10:0c:
c2:5e:60:68:fe:fb:9a:c3:b3:20:06:83:94:82:bb:
19:4f:e7:e7:47:83:3f:32:ff:9d:8e:f1:b1:3d:66:
a3:a5:b8:10:fd:de:4b:c1:22:31:90:5d:f5:2a:37:
f5:9b:4e:78:64:34:ca:b9:c5:6b:83:bf:d2:76:5e:
d3:ae:e5:b2:1a:b4:ea:43:84:3f:f4:55:9f:02:0e:
02:34:bc:68:0c:c7:70:ea:da:63:aa:80:45:3f:0f:
d3:e9:7f:73:84:00:4a:92:ea:97:0a:24:85:81:93:
a6:c7:87:a4:5e:40:24:92:dc:3f:23:17:ce:dc:db:
ec:59:ae:26:8c:5b:ba:13:ec:65:ac:9f:e9:8b:86:
7f:6d:48:be:2e:96:31:20:a9:32:b7:b3:fd:ba:84:
c4:02:b2:55:0b:ad:d7:01:6f:48:1b:6d:72:bd:8d:
b3:48:77:58:12:ec:1c:48:fe:b7:b2:c1:49:db:2b:
78:63:6a:03:3f:15:cc:d4:86:46:90:52:b9:b1:2e:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AE:62:A5:2F:34:FC:6F:C2:83:F0:CC:A0:00:E2:2D:5A:0C:28:E3
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/3137382e3133322e3139332e302f32342d3234203d3e2034353135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:69:d5:91:f1:10:52:24:d2:4a:19:e3:e5:6a:cf:73:13:5f:
c0:9c:7a:58:66:1a:48:ce:79:cc:68:3e:b5:4a:6d:56:21:54:
ea:10:f4:37:2e:1b:de:3d:20:85:ec:23:87:00:ff:b4:df:a8:
d6:3a:1d:94:e0:2e:21:b9:d3:19:62:a3:33:0e:68:3d:ba:73:
23:6b:5e:5e:a8:7b:99:fa:e3:d3:ff:47:1c:92:35:b8:30:9c:
a9:46:b9:24:8a:e8:6f:7e:11:c1:75:49:88:95:4b:a0:63:fb:
f6:10:9c:8b:c2:66:bc:64:df:63:93:35:46:42:56:e8:aa:62:
c4:a5:ce:87:af:72:1a:52:20:83:53:58:99:8b:85:3d:61:2e:
98:18:f7:0b:6c:2d:be:1b:7d:87:8c:8f:bb:ea:8f:68:ae:f8:
ed:80:57:f4:02:74:24:b8:53:0d:e5:b2:3d:2a:10:ca:d5:f2:
bc:ee:b2:62:75:88:06:47:02:8c:8e:60:76:e3:dc:c7:b9:ed:
19:58:10:f4:c3:3a:cf:67:34:41:35:2d:f1:e3:18:7f:4d:a4:
16:3c:23:65:a4:78:c3:26:98:47:a4:a3:fa:d3:3a:6d:4b:08:
4f:75:96:ad:f6:67:ba:ea:97:f1:a8:df:ce:c9:40:29:9d:47:
e1:9b:62:1c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUaQynjwWKImOYPc9aKFWVynVfxh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTAxMjYxNDM0MjJaFw0yNjAxMjUxNDM5MjJaMDMxMTAvBgNV
BAMTKEQ4QUU2MkE1MkYzNEZDNkZDMjgzRjBDQ0EwMDBFMjJENUEwQzI4RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzqkATMaZyD9g3P1UIBTwWFAJW
LLW4QZ7Uq2W/U3GQ40Pi9z42URk+BU96EtqkDyE4Xeb/lbO6bmEQDMJeYGj++5rD
syAGg5SCuxlP5+dHgz8y/52O8bE9ZqOluBD93kvBIjGQXfUqN/WbTnhkNMq5xWuD
v9J2XtOu5bIatOpDhD/0VZ8CDgI0vGgMx3Dq2mOqgEU/D9Ppf3OEAEqS6pcKJIWB
k6bHh6ReQCSS3D8jF87c2+xZriaMW7oT7GWsn+mLhn9tSL4uljEgqTK3s/26hMQC
slULrdcBb0gbbXK9jbNId1gS7BxI/reywUnbK3hjagM/FczUhkaQUrmxLrtpAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU2K5ipS80/G/Cg/DMoADiLVoMKOMwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct
OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzEzNzM4MmUzMTMzMzIyZTMx
MzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzUzMTM1LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
soTBMA0GCSqGSIb3DQEBCwUAA4IBAQAMadWR8RBSJNJKGePlas9zE1/AnHpYZhpI
znnMaD61Sm1WIVTqEPQ3LhvePSCF7COHAP+036jWOh2U4C4hudMZYqMzDmg9unMj
a15eqHuZ+uPT/0cckjW4MJypRrkkiuhvfhHBdUmIlUugY/v2EJyLwma8ZN9jkzVG
QlboqmLEpc6Hr3IaUiCDU1iZi4U9YS6YGPcLbC2+G32HjI+76o9orvjtgFf0AnQk
uFMN5bI9KhDK1fK87rJidYgGRwKMjmB249zHue0ZWBD0wzrPZzRBNS3x4xh/TaQW
PCNlpHjDJphHpKP60zptSwhPdZat9me66pfxqN/OyUApnUfhm2Ic
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:46:40 2025 by rpki-client