Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa
File: 34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa (raw, json)
Hash identifier: SrUI7p9BkxLbUUoyJaLsvvKn3T5zHjIyvMH7Dv6IUL4=
Subject key identifier: B2:7D:C2:2C:04:3E:9B:17:C1:45:87:76:87:35:90:4E:17:3A:DC:1E
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3F62FD374535233A4AE9B6A2F480F2445BFEDBE6
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa
Signing time: Mon 30 Jun 2025 13:05:05 +0000
ROA not before: Mon 30 Jun 2025 13:00:05 +0000
ROA not after: Mon 29 Jun 2026 13:05:05 +0000
asID: 208483
IP address blocks: 45.155.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 19:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:62:fd:37:45:35:23:3a:4a:e9:b6:a2:f4:80:f2:44:5b:fe:db:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Jun 30 13:00:05 2025 GMT
Not After : Jun 29 13:05:05 2026 GMT
Subject: CN=B27DC22C043E9B17C14587768735904E173ADC1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:1b:ac:85:96:48:3b:70:51:a9:9a:20:c5:
48:f9:3c:56:5d:9b:ff:fc:12:8f:ce:d5:7f:8f:38:
db:27:2c:05:34:d0:4b:ee:52:e1:78:fd:25:6f:ad:
72:7d:56:36:1e:55:a7:f1:c2:04:dc:bc:33:e0:56:
55:02:6c:0f:23:51:89:1f:74:3d:2a:64:ff:8c:12:
02:0a:cf:7e:ec:6a:26:98:cc:30:b0:da:ba:34:10:
10:28:01:73:ff:d1:67:c2:61:e7:2b:00:27:b9:7c:
bd:40:7d:c3:f2:71:29:97:7c:2e:ba:a3:d9:a8:7b:
6f:42:f2:87:0a:e7:93:0e:04:14:c1:fc:60:db:00:
1c:87:4f:2f:93:9a:8c:f7:99:4e:cb:53:50:41:8c:
a5:f2:35:56:1d:09:35:69:af:cb:29:17:7d:9c:0c:
85:79:ee:e8:fa:56:22:a9:34:e2:8e:7b:e8:67:d5:
4e:e3:11:34:ab:0a:d4:eb:5d:9a:96:3b:b7:45:71:
db:2e:b0:cf:09:17:51:c4:ed:77:bd:23:90:46:7e:
83:08:6d:24:17:b0:18:33:13:e9:a1:b1:db:17:4d:
e3:72:c8:e5:67:98:67:c0:c0:86:74:d4:f3:38:9a:
af:e4:ff:67:15:1a:ee:85:2c:0e:cf:89:63:4b:67:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7D:C2:2C:04:3E:9B:17:C1:45:87:76:87:35:90:4E:17:3A:DC:1E
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4e:36:c7:ba:73:94:08:6d:81:f5:ae:6a:b3:b6:4e:09:59:
1b:65:07:c1:40:8b:09:67:b6:1a:e9:06:24:d5:4d:d6:54:1c:
e7:93:39:a2:25:52:d1:ca:54:ef:06:0d:7e:7d:0e:c2:a6:c4:
38:65:6b:fa:fe:b0:6f:95:ac:22:18:d6:e6:6c:22:79:77:d4:
88:97:f6:4a:ae:95:fe:71:23:ba:f4:73:f3:a4:68:1d:14:5e:
be:73:68:0e:71:4a:50:37:41:64:02:77:93:81:57:f8:3e:b3:
22:69:50:63:ff:1c:a6:51:74:fe:f6:9c:f1:f5:c8:c2:c0:d6:
1c:9f:c3:6f:22:47:60:3d:8b:bf:87:21:76:64:7f:ea:f7:f6:
6d:26:26:85:17:12:c7:7b:30:18:a8:66:35:a2:1b:2f:3a:f6:
d1:5b:93:c6:79:9d:21:01:b9:ab:e2:1a:ff:16:18:d8:28:aa:
4c:a2:53:b7:ab:f9:ad:76:d9:3d:38:85:a0:73:6d:02:8d:bb:
d0:6c:cb:bc:32:50:f2:e6:97:bc:e5:6e:3c:2c:4d:35:33:3f:
62:12:8f:00:6e:73:1e:08:ec:58:20:0b:28:7d:91:f6:42:ae:
54:8b:b8:f8:86:3c:c0:a7:9f:6a:f6:fe:10:7d:ef:69:ba:52:
dc:7e:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 08:28:41 2025 by rpki-client