Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232302e302f32332d3234203d3e20383334.roa
File: 38352e3233372e3232302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: N0EqM769NvG8xMsTd0amZwNehoiMvcsqZ11YLHh7Te8=
Subject key identifier: 57:4C:0B:82:2A:19:68:10:EB:1B:DF:E1:3A:92:37:2E:84:B2:99:6B
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 2D236B8E8A1209A1EEB4979E637856E20FA8600E
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232302e302f32332d3234203d3e20383334.roa
Signing time: Sun 01 Jun 2025 00:02:36 +0000
ROA not before: Sat 31 May 2025 23:57:36 +0000
ROA not after: Sun 31 May 2026 00:02:36 +0000
asID: 834
IP address blocks: 85.237.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:23:6b:8e:8a:12:09:a1:ee:b4:97:9e:63:78:56:e2:0f:a8:60:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: May 31 23:57:36 2025 GMT
Not After : May 31 00:02:36 2026 GMT
Subject: CN=574C0B822A196810EB1BDFE13A92372E84B2996B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:04:67:02:b1:45:f3:cc:e8:f0:94:93:b1:
c1:d3:c7:b2:79:82:95:cb:14:62:5c:c1:89:99:de:
28:67:3f:80:66:71:6c:b6:8b:52:ad:40:bf:b8:b2:
66:37:f1:69:05:7c:23:02:c8:80:45:d5:21:40:11:
49:8e:e8:12:1b:29:04:af:e7:23:ec:f9:f5:55:34:
f0:08:4b:39:53:54:a2:91:b4:e7:d6:c1:c2:78:c0:
3b:7b:bc:d0:3e:8e:46:62:62:b9:cc:a8:d8:52:8e:
34:2f:7e:a9:3b:41:30:ae:22:0c:a6:7b:cd:31:7a:
e5:db:bb:f9:33:ae:ed:86:33:89:56:aa:5a:7d:62:
80:cb:19:f1:bb:8b:71:01:6d:c5:36:74:53:55:6e:
41:b0:ce:14:62:90:a0:99:a8:3c:8d:f3:00:12:8d:
35:ea:c4:25:d8:7c:dc:9f:f1:71:42:a6:85:64:ec:
95:7b:e0:82:3a:e1:72:a6:91:8e:ab:cd:db:81:93:
c8:37:ba:03:ee:a2:9e:8c:68:fb:87:f3:92:3b:62:
cc:83:80:bc:8e:68:3f:09:b1:c8:01:6a:3b:20:dd:
5b:ea:11:bb:11:2b:ad:64:1b:96:05:23:13:9c:46:
7a:5c:28:20:63:0f:ef:8e:1d:7f:6b:a8:94:2f:52:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4C:0B:82:2A:19:68:10:EB:1B:DF:E1:3A:92:37:2E:84:B2:99:6B
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.220.0/23
Signature Algorithm: sha256WithRSAEncryption
48:61:6e:cd:c2:75:1d:7e:4c:10:17:0c:e5:6c:20:1e:d4:41:
b1:63:dc:c0:3e:1c:e7:52:36:2c:8c:1f:66:0a:0a:c9:38:73:
75:e6:49:bb:c0:28:b3:f9:d1:fe:fa:49:67:7d:a5:09:cb:05:
1a:cb:b8:da:4e:84:5b:bd:7a:4b:65:e6:6a:6c:db:a8:8c:35:
14:0b:50:5e:b2:45:d8:bc:98:b7:c3:5f:95:6c:2d:c0:6c:c9:
39:42:ac:61:76:8c:d3:a3:73:b7:fe:a1:a4:f2:84:07:bb:f6:
63:9e:42:e3:9a:b5:ec:59:d9:b2:22:ec:b3:7b:76:14:56:f7:
d0:7e:80:65:73:26:2e:07:1d:21:6d:75:bc:b0:ac:df:71:c2:
ee:79:7e:84:b3:d1:e4:ab:c9:24:e8:f0:09:fc:8f:26:d4:1c:
ac:32:41:2b:a8:a4:03:4a:64:99:12:3a:f4:22:23:31:76:65:
70:5b:0a:03:8d:1b:83:a1:fe:07:dc:77:87:b2:e0:34:69:ca:
d9:7b:2a:6e:f3:1b:53:28:3d:d0:ef:af:ee:7c:a4:7e:ae:88:
80:a4:bf:7a:8f:78:d2:3e:de:c6:27:0c:39:ce:3b:fe:de:8f:
a1:9b:71:1a:2a:27:7a:bf:d0:16:47:9d:4c:cf:2b:30:55:f1:
56:fe:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 07:14:40 2025 by rpki-client