Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e35352e38332e302f32342d3234203d3e203536333637.roa
File: 3138352e35352e38332e302f32342d3234203d3e203536333637.roa (raw, json)
Hash identifier: EO5FUx9wp3K/AGFAPlrZs/bk9YuV/xgCtjavIzvd3sk=
Subject key identifier: 27:92:64:9F:51:9B:A8:A0:C7:A6:03:C6:19:18:42:57:48:C9:27:2B
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 69450F3ED41D410E07C38909BE771783BAA1BA94
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e35352e38332e302f32342d3234203d3e203536333637.roa
Signing time: Fri 21 Feb 2025 16:41:14 +0000
ROA not before: Fri 21 Feb 2025 16:36:14 +0000
ROA not after: Fri 20 Feb 2026 16:41:14 +0000
asID: 56367
IP address blocks: 185.55.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:45:0f:3e:d4:1d:41:0e:07:c3:89:09:be:77:17:83:ba:a1:ba:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Feb 21 16:36:14 2025 GMT
Not After : Feb 20 16:41:14 2026 GMT
Subject: CN=2792649F519BA8A0C7A603C61918425748C9272B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:4c:29:52:c7:2e:cf:05:bc:0a:42:2b:65:
df:53:3d:91:23:96:5f:2b:68:12:de:eb:e2:8e:ed:
bc:bb:d8:d4:c3:ef:e6:90:a2:8a:b2:6b:fd:6e:03:
88:ad:b7:f7:c2:f7:47:47:d7:48:4f:17:04:a3:43:
6b:50:e1:6f:27:05:9d:5a:cd:d7:e8:9a:13:dd:38:
01:cd:14:d6:22:36:be:39:40:fe:18:57:8d:2f:b1:
5a:4e:44:2a:10:e3:ad:7d:6d:74:34:e3:64:60:6b:
03:ff:02:a9:fa:ed:85:9a:25:e8:e9:06:29:71:04:
4c:de:d1:93:21:91:8e:62:aa:00:bf:42:99:9c:cb:
e4:93:c9:be:4a:c5:f3:88:62:ad:5a:b3:49:32:1a:
a0:1e:58:7c:9d:14:56:c8:2f:ad:f0:c7:fb:f9:16:
c6:dd:c4:f2:02:08:16:7a:8d:8a:c4:0a:69:09:b8:
6e:fa:9f:5b:c6:0f:d6:99:ca:6b:ae:3c:7a:f9:13:
4e:a8:df:ba:4f:68:b2:df:fc:9d:5b:62:0e:c3:0f:
60:90:23:db:45:04:c3:a3:ea:e3:9c:85:e6:6f:0f:
0b:d0:5b:7f:47:81:1d:79:ab:ec:43:1f:67:f9:c8:
eb:84:1b:03:55:d5:fa:df:28:25:5e:57:08:23:31:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:92:64:9F:51:9B:A8:A0:C7:A6:03:C6:19:18:42:57:48:C9:27:2B
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/3138352e35352e38332e302f32342d3234203d3e203536333637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7c:4b:63:25:67:8d:3d:d3:e9:22:0b:be:91:54:37:15:18:
60:db:d0:fe:01:cd:86:10:40:d4:3e:c0:8c:93:61:9f:97:43:
32:ad:5f:ee:36:f4:ed:c7:b4:6a:8e:f5:79:01:7c:0c:fa:c4:
70:38:3a:b6:df:32:d1:97:71:59:cd:35:21:ed:9c:33:f5:5d:
48:f1:b6:c8:26:40:cc:72:88:77:bc:f6:2c:2a:b1:53:ac:31:
86:44:4c:69:74:bb:3d:98:82:06:58:43:72:04:f4:02:dc:43:
c6:e9:06:a0:a6:74:d3:39:bc:98:ef:69:92:be:e4:76:1e:e3:
46:24:5c:40:54:39:8f:e8:74:1e:bb:7c:81:b4:57:70:43:6d:
ac:78:35:f4:c0:72:b2:f9:dd:34:da:e1:5e:d7:81:a5:ab:48:
3a:ab:0b:6a:36:df:7f:a7:24:41:08:30:2f:76:60:b1:d9:7c:
41:87:00:a9:52:ea:2b:f0:8a:65:ba:da:10:ba:10:49:f0:3e:
bd:ad:8c:c4:5a:8e:f2:5e:e3:02:9b:8b:ae:09:2e:63:8a:94:
dd:ef:f4:8f:a6:0a:42:13:1f:29:ad:34:8f:38:f8:8f:4a:fb:
10:ea:7b:3b:4d:00:bb:80:f2:50:5b:77:f6:10:7f:7e:6a:f5:
60:21:21:2c
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaUUPPtQdQQ4Hw4kJvncXg7qhupQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWRiOWYzZTZkOGU0YjU3YzQ5MzAxYWE2MjFlZjFmOTAz
ODllMDU3YTAeFw0yNTAyMjExNjM2MTRaFw0yNjAyMjAxNjQxMTRaMDMxMTAvBgNV
BAMTKDI3OTI2NDlGNTE5QkE4QTBDN0E2MDNDNjE5MTg0MjU3NDhDOTI3MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftEwpUscuzwW8CkIrZd9TPZEj
ll8raBLe6+KO7by72NTD7+aQooqya/1uA4itt/fC90dH10hPFwSjQ2tQ4W8nBZ1a
zdfomhPdOAHNFNYiNr45QP4YV40vsVpORCoQ4619bXQ042RgawP/Aqn67YWaJejp
BilxBEze0ZMhkY5iqgC/Qpmcy+STyb5KxfOIYq1as0kyGqAeWHydFFbIL63wx/v5
FsbdxPICCBZ6jYrECmkJuG76n1vGD9aZymuuPHr5E06o37pPaLLf/J1bYg7DD2CQ
I9tFBMOj6uOcheZvDwvQW39HgR15q+xDH2f5yOuEGwNV1frfKCVeVwgjMa+3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUJ5Jkn1GbqKDHpgPGGRhCV0jJJyswHwYDVR0j
BBgwFoAU7bnz5tjktXxJMBqmIe8fkDieBXowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMtZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3
NWZkLzAvRURCOUYzRTZEOEU0QjU3QzQ5MzAxQUE2MjFFRjFGOTAzODlFMDU3QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdibno1dGprdFh4Sk1CcW1JZThma0Rp
ZUJYby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMt
ZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3NWZkLzAvMzEzODM1MmUzNTM1MmUzODMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMzMzYzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALk3
UzANBgkqhkiG9w0BAQsFAAOCAQEAC3xLYyVnjT3T6SILvpFUNxUYYNvQ/gHNhhBA
1D7AjJNhn5dDMq1f7jb07ce0ao71eQF8DPrEcDg6tt8y0ZdxWc01Ie2cM/VdSPG2
yCZAzHKId7z2LCqxU6wxhkRMaXS7PZiCBlhDcgT0AtxDxukGoKZ00zm8mO9pkr7k
dh7jRiRcQFQ5j+h0Hrt8gbRXcENtrHg19MBysvndNNrhXteBpatIOqsLajbff6ck
QQgwL3Zgsdl8QYcAqVLqK/CKZbraELoQSfA+va2MxFqO8l7jApuLrgkuY4qU3e/0
j6YKQhMfKa00jzj4j0r7EOp7O00Au4DyUFt39hB/fmr1YCEhLA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:11 2025 by rpki-client