Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa
File: 38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa (raw, json)
Hash identifier: ohyXGo6Fwg3029u2hdROae+jQf4VI2skgvLUXH3jI8w=
Subject key identifier: 45:94:03:DE:F9:CC:50:DD:79:1E:E2:BB:39:96:CE:9F:58:A7:52:87
Certificate issuer: /CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Certificate serial: 7E3AF6A3446D14B2055CC3E74B04D873896FB1A2
Authority key identifier: 0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa
Signing time: Wed 14 May 2025 15:29:54 +0000
ROA not before: Wed 14 May 2025 15:24:54 +0000
ROA not after: Wed 13 May 2026 15:29:54 +0000
asID: 213724
IP address blocks: 85.117.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.mft
rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:3a:f6:a3:44:6d:14:b2:05:5c:c3:e7:4b:04:d8:73:89:6f:b1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7ffae300def0876bf84890fb6ea17be841a4d3
Validity
Not Before: May 14 15:24:54 2025 GMT
Not After : May 13 15:29:54 2026 GMT
Subject: CN=459403DEF9CC50DD791EE2BB3996CE9F58A75287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:8c:49:39:77:4c:ad:7a:85:c9:82:ed:79:
5f:89:0e:2e:c5:c7:34:0e:51:c2:85:d6:3b:ef:96:
00:93:2a:da:ed:50:fa:a7:d6:68:1c:21:27:f4:54:
ef:8f:8b:23:39:60:6e:9b:fc:b7:be:71:bf:f0:bc:
32:3b:49:a5:c8:f6:9d:37:aa:02:b3:6e:fc:bf:65:
51:66:64:3a:38:1f:05:d6:3b:a3:c0:ba:9d:1e:90:
0c:11:1b:c0:65:b6:d8:bb:83:3c:25:e3:40:6c:15:
e7:db:a2:ab:9e:72:40:5c:b2:9b:bb:0a:a9:33:51:
b6:1c:87:a7:9f:14:56:cb:61:51:1d:04:62:41:88:
76:8b:c5:e6:e1:06:9e:4e:5b:69:80:31:3c:a4:54:
d8:b6:f6:87:55:c8:b0:f8:72:ff:62:fe:7d:e9:ae:
ea:f2:d0:91:5a:b5:66:92:51:18:d8:90:9c:10:a5:
d0:76:ba:18:af:40:54:a4:82:bc:0e:3d:73:b1:59:
04:59:99:bc:89:96:6f:e7:1a:8d:95:e8:fe:d3:a0:
67:d6:a0:74:8e:c5:9c:8d:f1:65:72:d7:0f:b0:65:
23:ef:60:04:88:3a:6b:40:80:93:de:32:1b:8f:03:
7b:f9:15:64:f0:63:6b:0f:2f:8e:7a:9c:d7:14:9c:
7a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:03:DE:F9:CC:50:DD:79:1E:E2:BB:39:96:CE:9F:58:A7:52:87
X509v3 Authority Key Identifier:
keyid:0D:7F:FA:E3:00:DE:F0:87:6B:F8:48:90:FB:6E:A1:7B:E8:41:A4:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/0D7FFAE300DEF0876BF84890FB6EA17BE841A4D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX_64wDe8Idr-EiQ-26he-hBpNM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/1/38352e3131372e3233312e302f32342d3234203d3e20323133373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2c:4c:f1:63:6a:d4:8b:bb:e4:8a:be:ed:db:35:10:fd:bc:
50:a3:5d:ce:45:32:c4:bf:ae:18:51:e8:f5:97:66:7d:ac:13:
4a:0b:47:85:a6:58:39:d1:2d:d9:43:69:0f:3f:24:97:91:7e:
8f:60:cd:7b:dd:fd:9a:68:b9:e7:d9:9c:90:b6:8d:b2:4f:a9:
3b:aa:00:e6:a0:0b:8a:a8:dc:80:f7:d0:8f:69:cf:fc:3b:51:
1e:fc:a3:6a:b4:98:b8:1e:7e:84:3c:bf:06:80:64:dd:22:f4:
bb:45:d4:a2:72:5c:16:85:a3:2f:b5:fc:16:c2:d7:76:96:eb:
60:16:fb:62:ce:8f:72:2c:3f:9a:32:a2:63:77:5c:66:4d:fb:
1e:9f:36:93:2d:24:ec:7c:2a:15:2d:30:33:a3:bc:bc:07:7a:
7a:4c:4f:69:a0:a9:37:72:51:1f:b0:c7:5f:0e:c3:48:2f:d1:
6c:0a:26:49:90:fe:9e:ac:8c:a4:ee:76:1f:74:2f:40:ed:7a:
c0:e5:ed:96:7e:ce:15:c3:9e:cf:0d:2c:66:50:3d:68:6f:7e:
30:d5:6a:44:7c:4b:3a:2e:59:df:2f:e9:75:72:75:1a:b1:ce:
9f:d1:3a:4c:9a:0b:a4:87:2e:53:6c:88:24:e8:08:37:89:e8:
c7:d7:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:31:19 2025 by rpki-client