Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35382e302f32342d3234203d3e20313335333931.roa
File: 38352e3135382e35382e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: cQawuKGNQGww0UL52mTF8QamD9Tw1fo6sIsSrU5ExZk=
Subject key identifier: F1:8C:E1:5F:7A:E7:29:F6:AD:C0:92:B1:40:CF:33:AD:F5:21:20:52
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 7B642125EF2452807F1EBAF6A88CC2F510658388
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35382e302f32342d3234203d3e20313335333931.roa
Signing time: Wed 28 May 2025 06:54:08 +0000
ROA not before: Wed 28 May 2025 06:49:08 +0000
ROA not after: Wed 27 May 2026 06:54:08 +0000
asID: 135391
IP address blocks: 85.158.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:64:21:25:ef:24:52:80:7f:1e:ba:f6:a8:8c:c2:f5:10:65:83:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: May 28 06:49:08 2025 GMT
Not After : May 27 06:54:08 2026 GMT
Subject: CN=F18CE15F7AE729F6ADC092B140CF33ADF5212052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a2:cc:20:10:eb:d7:9c:60:a4:a3:bc:8f:20:
23:62:7d:2f:79:67:da:fe:57:40:f1:ab:c9:bc:18:
e2:9d:20:18:43:54:9e:ab:48:59:46:75:8d:f7:92:
93:b4:e3:a7:a3:fd:71:9a:bb:60:54:df:f5:05:4f:
35:e8:72:a6:6e:ea:1c:63:93:35:72:f6:9d:5f:0a:
ef:76:6b:33:05:6c:69:f9:ef:70:b0:cb:7e:d2:91:
0c:49:a2:66:47:ab:5b:33:af:c7:c0:ba:07:4b:c3:
df:2d:45:5d:65:4f:80:56:3c:46:44:d0:62:24:cf:
b9:f3:78:56:d1:49:d4:0e:4f:f4:cc:63:f4:52:ab:
82:8d:bf:87:77:5b:7a:54:87:26:42:5b:ce:a5:0a:
a2:b7:fb:34:8c:6f:d1:12:95:b8:20:2d:96:a0:01:
80:9b:f2:a9:9d:8e:ac:cf:46:df:28:d7:80:e3:1b:
49:d8:75:fa:84:14:bc:89:62:32:75:51:0d:71:a5:
43:19:c6:76:bd:91:19:2a:7f:52:31:b1:7a:1d:41:
d0:8e:05:69:8e:de:41:a4:44:52:be:ec:8d:ac:a6:
cd:14:ef:b2:d1:c5:84:0b:11:9e:98:69:95:cc:5d:
f6:79:2e:7d:1a:68:3e:62:8a:6a:70:7b:dc:2d:de:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8C:E1:5F:7A:E7:29:F6:AD:C0:92:B1:40:CF:33:AD:F5:21:20:52
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35382e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
54:51:46:30:96:78:19:53:d4:f6:44:79:3f:3a:5c:94:49:33:
6f:a7:56:c0:02:9c:1f:d1:45:0d:33:41:48:d7:b0:90:14:d7:
5b:12:bf:7a:57:43:62:77:e8:fa:b1:91:cd:f3:e5:de:0e:85:
12:3b:92:be:ef:ed:11:6b:ec:d4:c7:be:16:23:9b:2d:bf:89:
a9:10:80:1f:60:f8:c7:f0:44:0f:5f:8e:78:cf:8d:ca:47:01:
ee:77:13:dc:63:ca:b7:b7:c0:c6:98:b1:c5:3b:dc:3e:69:ee:
77:a8:d5:39:f9:22:72:01:aa:36:21:75:68:ba:ed:88:4f:e3:
82:5b:0b:84:41:62:e1:cd:a3:f0:1d:f4:b0:a1:87:d4:56:3a:
6e:ae:87:0f:6a:d0:5b:53:d5:36:4e:23:9b:4e:a6:65:b9:3a:
e7:64:a1:5d:d9:01:88:b9:94:ef:9a:a9:96:29:19:26:b4:5e:
25:99:f6:30:d3:8a:67:2e:c2:ec:23:71:c1:15:7d:6a:52:5e:
0b:87:99:5f:89:3f:3a:5e:5d:2e:da:89:42:91:63:73:74:92:
76:bb:8c:b0:1e:06:7e:c0:8c:f8:c2:b2:8a:d0:c5:5c:dc:1f:
d7:44:92:92:22:8b:7b:ea:7d:84:f0:10:ce:e8:33:4f:9d:c3:
ec:ec:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 07:22:09 2025 by rpki-client