Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20323135323837.roa
File: 3138352e3234302e3130352e302f32342d3234203d3e20323135323837.roa (raw, json)
Hash identifier: +0THkzX29inBKKwe48Y2pKEbomX7avoCZF5U6SDswlY=
Subject key identifier: 19:F2:93:8A:E7:48:A7:69:28:1B:D3:AF:8E:D6:4A:5F:E1:B4:73:F2
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 19E2C4479DC4064E65ED1F636E8D38007A6CB6F2
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20323135323837.roa
Signing time: Tue 03 Jun 2025 13:22:49 +0000
ROA not before: Tue 03 Jun 2025 13:17:49 +0000
ROA not after: Tue 02 Jun 2026 13:22:49 +0000
asID: 215287
IP address blocks: 185.240.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e2:c4:47:9d:c4:06:4e:65:ed:1f:63:6e:8d:38:00:7a:6c:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jun 3 13:17:49 2025 GMT
Not After : Jun 2 13:22:49 2026 GMT
Subject: CN=19F2938AE748A769281BD3AF8ED64A5FE1B473F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:3d:81:0a:28:af:25:45:5b:1a:3b:b1:39:
81:aa:93:1d:a2:4f:e2:7c:c3:53:26:67:b4:e7:de:
94:3e:00:7b:16:57:5b:cf:b4:65:bd:b9:55:8f:36:
ad:27:6e:67:f0:db:cf:b3:f0:c2:47:7e:ee:ad:00:
3e:a4:44:8e:51:a8:60:46:04:56:a7:ca:2a:1f:59:
ad:86:1d:24:28:8b:c1:fa:02:57:0c:1a:a2:17:7f:
9a:52:fb:fb:01:99:5e:67:f8:df:ef:97:f4:64:ee:
0a:c9:f1:58:b6:bc:1c:0e:ce:bb:ad:57:6d:f5:ac:
00:42:dd:d8:82:3e:4f:8f:2e:3b:6b:98:86:58:c5:
b0:d8:86:45:1b:1f:29:f7:3f:66:6a:94:f9:c9:46:
19:2d:95:78:2c:ca:ce:fe:7f:36:ac:46:86:fe:0a:
6c:6b:79:24:ce:bc:57:25:e9:b4:63:b6:2c:41:b1:
dd:50:ff:7d:a9:8d:58:99:12:5d:b0:5b:60:64:fb:
fa:7b:50:23:2e:5d:16:48:2f:46:bf:04:07:a4:d1:
8a:e3:5f:7a:1f:2e:c6:3c:db:6e:6d:b6:37:8d:4e:
07:28:24:70:1e:37:91:8f:95:2c:d9:c1:eb:2b:e2:
4e:70:d4:d0:3f:86:83:cd:22:5d:2e:ec:c5:bb:18:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:93:8A:E7:48:A7:69:28:1B:D3:AF:8E:D6:4A:5F:E1:B4:73:F2
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3138352e3234302e3130352e302f32342d3234203d3e20323135323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e8:3e:32:d5:0b:7c:8d:75:5b:7b:b6:a0:fa:52:c4:d8:07:
6d:3a:be:96:5d:8b:43:a6:95:3b:f4:57:c0:a0:45:e8:3c:ac:
a4:4e:a6:90:c2:61:e8:76:40:68:86:1d:99:4d:b1:11:8c:eb:
d2:27:10:35:fa:13:75:64:5c:4f:2f:db:bc:5c:0a:c0:84:de:
3b:be:53:ac:e4:35:38:57:30:31:c2:8d:06:3c:a6:16:bb:87:
72:b2:5a:95:8b:e0:f9:52:b0:2d:61:70:60:b4:a7:2e:79:92:
7c:3a:14:bb:fd:55:03:2e:0a:bc:20:b5:67:92:9d:ac:8a:3f:
20:0f:b8:56:d5:53:55:27:0f:dd:ac:a8:ec:0b:ed:94:9b:ce:
93:58:c4:41:2a:b3:55:95:4c:61:3f:4f:24:4d:14:4c:2b:f0:
f0:e2:95:a8:d2:29:fb:1f:6f:de:ec:ed:b9:88:4e:3f:5e:aa:
51:7f:c3:c7:3c:0e:20:34:50:42:36:6d:37:76:ce:36:b7:a7:
41:62:55:da:94:7b:77:f0:be:aa:50:c5:92:69:47:31:a3:8b:
24:26:75:3f:db:30:60:da:81:b0:39:a7:d2:0f:13:5f:fe:cf:
be:9c:91:de:19:00:91:23:73:ec:a1:a1:b4:2b:07:a1:62:fb:
38:c3:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:37:55 2025 by rpki-client