Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30083.roa
File: AS30083.roa (raw, json)
Hash identifier: SvAH5Pr3bHmWZp3qMWr8lr2+mh1y0FOS2gZCXDBbSfw=
Subject key identifier: 8D:B1:17:CB:86:CA:79:C8:2C:7D:48:28:79:E1:EA:78:21:70:FD:97
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 23749BB6E6F89F5A9C83AE1DD98E05BCE2DCB465
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30083.roa
Signing time: Thu 20 Mar 2025 12:15:35 +0000
ROA not before: Thu 20 Mar 2025 12:10:35 +0000
ROA not after: Thu 19 Mar 2026 12:15:35 +0000
asID: 30083
IP address blocks: 2a13:9500:36::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 11:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:74:9b:b6:e6:f8:9f:5a:9c:83:ae:1d:d9:8e:05:bc:e2:dc:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Mar 20 12:10:35 2025 GMT
Not After : Mar 19 12:15:35 2026 GMT
Subject: CN=8DB117CB86CA79C82C7D482879E1EA782170FD97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cc:f5:4b:02:0a:2e:e7:e6:a2:f0:a6:08:13:
a3:d6:96:15:98:bd:8e:07:f7:4a:cd:ec:80:4a:e3:
a9:6a:e2:03:51:3c:1f:cc:fe:0d:0d:ad:0e:13:0c:
3c:76:fe:24:c1:78:58:2e:79:23:4a:0e:e5:86:76:
04:1a:90:ff:62:e8:c2:3b:42:13:4f:ef:3b:b3:96:
b7:28:d1:6d:ff:fa:f7:e0:e9:61:ad:c3:1e:c4:f2:
dc:1b:22:b3:40:eb:4f:8b:57:c1:9d:8e:b0:d0:57:
f4:a1:a9:5c:3f:a9:9f:7e:de:40:da:78:a6:ce:45:
8d:3a:b9:47:09:0f:1a:40:c3:56:86:46:9f:d9:e0:
f6:fa:7f:1c:05:6b:8f:34:42:fd:b0:29:fb:65:e5:
0c:a2:92:07:74:9c:30:31:ef:61:e7:e2:f4:50:91:
18:9e:8f:36:3b:fe:80:13:3e:cf:b5:bf:05:8f:7e:
58:6f:f6:24:24:41:9e:6f:0a:59:46:98:94:92:6d:
81:67:5f:ec:4a:91:e5:e9:c0:12:fc:c1:2b:9c:af:
2e:9b:c8:7d:94:33:ba:2a:20:49:c8:01:a4:f9:4b:
11:c2:34:63:62:7a:6d:98:9a:c1:4c:9a:3c:b7:79:
cb:89:de:54:c1:e9:82:b4:8b:c5:b9:7c:e1:9b:16:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B1:17:CB:86:CA:79:C8:2C:7D:48:28:79:E1:EA:78:21:70:FD:97
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS30083.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:36::/48
Signature Algorithm: sha256WithRSAEncryption
8d:3f:87:ac:06:0a:92:c7:06:15:d1:e5:b8:b7:49:10:04:91:
4b:39:42:f3:65:8a:da:2b:c1:24:63:5a:9a:b0:60:3c:30:30:
19:42:9c:6c:7f:7f:ee:04:22:93:ed:43:cc:d2:96:28:6c:1e:
89:09:dc:3d:a6:b2:e2:42:cb:4a:e6:11:a2:84:08:f1:8b:e6:
88:5a:e8:c1:a5:dc:43:cb:b7:d6:8a:67:6d:28:44:0a:b7:11:
d1:99:7b:06:7c:42:a8:0c:b5:65:e7:6f:48:1c:33:0e:3c:93:
f3:7b:52:b6:de:96:4f:d7:14:ad:7f:9a:77:ed:1f:0b:f6:3c:
02:fd:16:cd:69:a0:ef:37:a4:88:7e:97:89:b9:64:e2:d9:d2:
80:a4:46:82:33:88:10:fa:15:87:30:7f:dd:fc:63:0e:83:fe:
3e:6b:e6:15:1c:0b:dd:c4:bf:d6:ee:2e:e6:49:a9:8a:3f:71:
f3:84:56:f2:e7:1b:fd:f9:fd:36:32:51:67:6b:51:21:2b:5e:
99:d3:48:07:a3:1f:4d:29:81:b4:75:57:91:98:c9:e3:b7:0b:
a7:a5:00:f6:2f:70:86:a2:30:4a:91:da:3d:f6:ae:2c:2b:35:
6f:d9:52:84:4b:4f:22:09:70:95:7e:a0:ad:bb:8d:da:a5:bf:
30:dd:33:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:39 2025 by rpki-client