Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131352e302f32342d3234203d3e20313337353137.roa
File: 3138352e39312e3131352e302f32342d3234203d3e20313337353137.roa (raw, json)
Hash identifier: X1+DKmCz9fjQ0YFjOBy8DCDKUifeMBU5Rwd+VfLqCPU=
Subject key identifier: 87:AF:DE:06:68:30:C6:A5:E3:AC:2E:98:4F:B6:96:C2:28:EA:61:7E
Certificate issuer: /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial: 30925AED614680A0992B58ABCB8A926A4070C482
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131352e302f32342d3234203d3e20313337353137.roa
Signing time: Mon 02 Jun 2025 12:24:44 +0000
ROA not before: Mon 02 Jun 2025 12:19:44 +0000
ROA not after: Mon 01 Jun 2026 12:24:44 +0000
asID: 137517
IP address blocks: 185.91.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 03:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:92:5a:ed:61:46:80:a0:99:2b:58:ab:cb:8a:92:6a:40:70:c4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
Validity
Not Before: Jun 2 12:19:44 2025 GMT
Not After : Jun 1 12:24:44 2026 GMT
Subject: CN=87AFDE066830C6A5E3AC2E984FB696C228EA617E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:03:6f:ae:96:d9:65:3f:aa:ba:67:79:e9:
07:ca:57:34:54:1d:bf:df:ee:e6:e6:a1:49:5e:b0:
47:ed:7d:b1:be:ff:78:20:9c:4c:29:bf:a6:9e:18:
c1:b0:f3:2c:9a:ba:bc:1e:1d:fc:55:b2:85:b4:61:
77:3e:ca:af:73:f8:4e:08:4b:c7:bb:21:bc:4c:1a:
09:06:fc:c2:18:17:80:93:04:c5:e9:d6:e7:29:a4:
55:3f:4b:5b:8d:01:84:19:b8:92:a0:18:0e:8e:7c:
49:fe:bc:7c:54:79:df:be:89:f3:ff:eb:64:25:2b:
6c:7b:55:a9:1c:78:6a:72:ad:4f:3f:59:eb:cc:46:
d1:75:8a:94:06:51:d6:ae:6e:8b:f2:a7:f5:84:68:
c5:a0:17:af:f0:de:3d:25:11:06:dd:61:b3:fb:19:
b1:e3:5e:89:d5:d5:c9:2a:08:43:a8:1d:ad:43:70:
07:25:27:be:c2:17:31:aa:d6:5d:50:8f:62:80:83:
5b:39:ea:8f:35:41:94:38:84:87:20:5f:cb:99:b3:
7d:57:e5:3d:dc:b2:eb:a8:5e:31:68:01:10:bf:30:
ed:b0:e1:f7:05:bc:a6:c5:3c:08:83:ee:91:4f:dc:
60:d0:23:72:d5:81:aa:5c:f3:e7:d9:6d:be:ec:5b:
1e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AF:DE:06:68:30:C6:A5:E3:AC:2E:98:4F:B6:96:C2:28:EA:61:7E
X509v3 Authority Key Identifier:
keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/3138352e39312e3131352e302f32342d3234203d3e20313337353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.115.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8f:d2:2e:27:52:b8:97:53:aa:36:5e:ba:ee:90:57:82:c0:
84:03:17:93:0f:ad:b6:13:fe:02:c9:51:18:ab:eb:58:c9:13:
3a:32:9e:bc:0e:f6:fa:35:f9:50:a6:4c:8c:11:63:9e:69:aa:
a0:f6:fe:42:12:5d:fb:ec:1f:dd:73:7f:bc:d5:aa:c0:fb:18:
d5:5c:93:3f:e7:63:64:35:7c:75:59:a1:00:2c:d4:e5:56:dc:
b2:e0:96:3f:70:7b:84:33:a4:2d:03:46:8d:c7:a7:0e:26:11:
b0:aa:24:26:29:08:96:cb:c9:aa:cf:57:a2:4b:d5:f3:e5:1c:
01:02:93:50:e1:4a:3a:eb:9f:cf:80:e8:12:b5:2c:2e:69:67:
ae:7f:c8:70:4b:3a:e8:aa:20:2a:a9:a5:89:82:3c:14:08:12:
66:3e:76:79:86:c3:4e:83:31:b5:fe:ca:07:4d:0b:a5:b1:d9:
6d:46:cb:82:76:6a:4b:0b:da:a4:6c:e4:e9:bc:44:1b:a0:2a:
00:4a:47:c6:48:6d:61:ce:44:78:e2:af:d1:8d:36:7b:73:de:
98:85:40:9e:e0:cb:e2:10:c0:bc:9d:0d:25:59:f1:18:bd:9f:
fb:1f:13:66:90:25:9f:12:68:a4:75:5f:cd:c1:fa:14:4e:a1:
c4:cd:b6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:46:05 2025 by rpki-client