Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e203235313938.roa
File: 352e3232362e3138342e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: g/SuuyMEvFJIWbz5EwrvLhOxD8VKMLPH98EweA0bDg4=
Subject key identifier: FE:AD:44:DD:BB:C1:5B:22:6D:ED:9B:7D:55:71:7E:2D:DE:E4:54:BE
Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial: 668004D01CEEC7F5F7E00F54611DE8D29104BADD
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e203235313938.roa
Signing time: Tue 25 Mar 2025 18:48:37 +0000
ROA not before: Tue 25 Mar 2025 18:43:37 +0000
ROA not after: Tue 24 Mar 2026 18:48:37 +0000
asID: 25198
IP address blocks: 5.226.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:80:04:d0:1c:ee:c7:f5:f7:e0:0f:54:61:1d:e8:d2:91:04:ba:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Validity
Not Before: Mar 25 18:43:37 2025 GMT
Not After : Mar 24 18:48:37 2026 GMT
Subject: CN=FEAD44DDBBC15B226DED9B7D55717E2DDEE454BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9b:e1:86:ad:76:2e:14:7d:d4:13:2b:36:89:
c7:52:03:e6:b5:09:51:cf:e9:4d:c7:0c:1a:a8:19:
b2:b6:3d:4f:d2:ce:a4:88:0f:dd:58:fe:96:b3:de:
b4:47:06:ac:9f:ee:97:b8:da:9a:93:8c:7f:b0:e0:
bb:2f:62:2c:3d:6f:f9:a8:21:b8:86:ce:4d:fa:fb:
84:fe:60:4a:d2:13:8f:fd:e4:b0:02:3f:0c:db:83:
fa:2d:3c:d2:b5:9e:1a:04:8c:5e:d3:13:54:63:94:
e6:66:74:13:07:df:63:d3:05:17:de:69:d6:d6:48:
4a:dc:f3:94:34:00:5e:20:2d:10:64:04:95:8b:59:
8f:62:98:1b:c1:e4:b4:c9:37:3a:16:b3:34:a2:27:
2e:d6:0f:d2:63:8d:7c:6c:b9:83:71:9a:90:af:d5:
53:40:59:c2:0c:f9:a3:4c:e9:dd:74:f6:c7:56:5d:
ca:5c:99:0d:5f:bf:a0:27:b1:99:10:33:4b:ab:fc:
43:84:78:1d:37:33:31:2e:36:8e:e1:40:31:d0:b4:
85:7f:91:60:09:fe:f7:22:98:29:70:9b:e2:a7:5c:
dc:ca:f4:cc:68:2f:39:ee:05:e9:53:9b:47:53:e6:
e4:bd:87:97:af:ad:90:82:84:0f:78:74:28:a5:5f:
73:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AD:44:DD:BB:C1:5B:22:6D:ED:9B:7D:55:71:7E:2D:DE:E4:54:BE
X509v3 Authority Key Identifier:
keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138342e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.184.0/24
Signature Algorithm: sha256WithRSAEncryption
75:95:5d:fe:e2:53:41:f9:7a:c7:72:b1:ed:25:ad:01:29:15:
f0:6d:66:4c:59:45:4b:87:cf:1f:53:c4:c7:f5:d6:b5:7f:1d:
1d:d2:04:17:79:01:c5:65:54:49:ab:4d:cb:3e:f7:6d:94:16:
81:52:87:08:52:3a:8f:04:5e:05:c5:ab:c6:ea:5f:95:17:3d:
f2:9f:be:55:e1:29:1e:f5:f0:a7:d2:ee:a4:0a:e7:2d:7d:32:
22:f2:fe:ce:98:2e:e6:56:b5:12:d4:03:e3:da:c6:fd:5f:de:
7b:8f:1c:49:0a:5c:32:c9:b1:e5:fe:d5:91:96:4d:4e:0e:17:
28:f9:df:03:23:2c:9b:49:b3:85:fe:97:64:44:80:7d:75:db:
1b:99:b6:e2:37:33:dd:a6:84:6f:cb:3e:22:46:a0:ec:59:e7:
05:bf:bb:f3:99:59:23:02:28:6c:1b:84:ea:83:d7:24:0b:bb:
17:ff:0e:da:b7:a7:ee:d7:ba:ea:5f:7b:5c:25:c8:17:34:c2:
91:a3:27:83:e0:36:73:14:4a:ff:12:39:bc:b4:f5:c1:47:d9:
ff:06:8a:93:43:1b:d5:2d:ea:d7:fa:16:c1:12:81:c2:5d:83:
ab:46:8a:cc:52:80:ab:e7:86:84:a0:83:fb:ee:81:ef:df:59:
f7:71:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:52 2025 by rpki-client