Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e203136323736.roa
File: 3138352e39312e3131322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: 816LcoMP7IzyrdlbDQQeycStorYxYzCTT1WckHhtHIY=
Subject key identifier: F3:EE:62:44:7E:CD:A3:D5:36:CB:64:B8:7B:FF:44:33:1E:14:86:2F
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 5A5A95E32A273670524B416319964391EDCA880E
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e203136323736.roa
Signing time: Mon 02 Jun 2025 12:24:41 +0000
ROA not before: Mon 02 Jun 2025 12:19:41 +0000
ROA not after: Mon 01 Jun 2026 12:24:41 +0000
asID: 16276
IP address blocks: 185.91.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5a:95:e3:2a:27:36:70:52:4b:41:63:19:96:43:91:ed:ca:88:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Jun 2 12:19:41 2025 GMT
Not After : Jun 1 12:24:41 2026 GMT
Subject: CN=F3EE62447ECDA3D536CB64B87BFF44331E14862F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:04:84:c3:8b:a9:f5:a2:38:f0:c8:f7:90:
ef:df:fe:46:6b:91:9c:fa:55:70:f3:f4:22:60:7f:
42:87:e1:40:cf:9d:07:94:60:e2:fe:06:e2:6b:bd:
7f:e1:9f:1b:cd:05:d9:d3:9e:11:3e:26:96:00:60:
df:a6:98:3b:a6:91:9b:2f:f2:dc:f8:e9:b0:f8:1b:
53:3a:9b:52:97:4c:7f:a2:af:19:9c:16:53:75:2f:
6b:71:1f:0d:81:75:37:32:4d:f1:16:b3:76:45:27:
ec:d0:02:76:0f:32:e8:3c:4a:5c:c9:0d:8f:3f:e8:
7d:78:21:12:56:dc:01:b6:7e:27:96:4f:93:fe:84:
ef:58:98:36:3a:25:a4:e2:8f:28:c8:50:77:70:c0:
52:48:dc:39:ff:a3:42:95:cd:59:07:07:e7:52:cb:
e5:c7:2e:c4:5a:64:3e:9c:20:ee:75:30:9a:55:cd:
f9:9b:aa:b9:e1:a5:11:36:1b:3e:f7:a0:23:cc:94:
dc:19:34:9b:6e:28:cb:ca:3e:d8:6a:b2:04:be:68:
3f:aa:15:37:55:3b:05:dc:03:dd:ca:7d:aa:9a:d5:
fe:f1:dd:58:8d:0e:d0:bd:ec:b3:6f:90:3a:da:20:
77:1d:64:97:8e:d7:d6:03:bd:75:8a:53:e1:41:d7:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EE:62:44:7E:CD:A3:D5:36:CB:64:B8:7B:FF:44:33:1E:14:86:2F
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131322e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a4:b3:34:1d:73:75:bf:8a:c8:e3:f0:76:51:e0:ff:40:21:
68:f9:e4:89:ac:b8:cc:d1:52:de:99:b8:3d:a3:b3:b5:d7:79:
20:e8:de:6a:58:07:41:68:8d:a8:86:04:46:1d:1b:78:2b:cd:
a5:cf:d8:dd:fe:e1:c1:51:8e:5b:26:0b:07:73:8f:44:b4:80:
5a:95:6b:74:eb:74:30:a4:c6:b0:e4:cc:08:65:fc:7b:12:ab:
50:c4:c1:d5:0a:04:1b:07:51:1f:d0:ed:93:8b:01:66:d7:d8:
d1:df:b7:6c:c5:5d:12:83:c7:eb:78:30:e9:72:06:92:19:ef:
ab:d4:10:0a:21:b9:91:cf:a3:f6:52:02:d1:f1:0f:e9:3b:eb:
af:90:ff:70:2c:d5:5b:37:36:ad:21:5d:ed:a7:da:4e:23:fb:
e4:00:68:86:89:28:df:eb:71:45:f5:4f:94:3a:39:a0:e0:33:
b1:0b:cd:04:1b:ea:f8:59:d4:a8:34:56:3c:7a:7c:dd:2e:c5:
64:b5:55:5c:06:4a:7a:32:20:d1:10:21:9a:49:80:02:c7:33:
b7:46:0c:70:b8:d5:6a:69:dc:f3:81:13:76:c4:83:8b:be:89:
1d:28:d5:4d:c8:a9:d4:95:6c:ce:12:d1:dd:eb:60:5a:03:87:
b5:53:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:05:46 2025 by rpki-client