Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34302e302f32342d3234203d3e2035303635.roa
File: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier: vADHpi7lqq2FTz+I44BCLsWOTCezg1eq9mEd669wIuU=
Subject key identifier: 0D:97:15:67:8A:D6:C4:DD:03:81:45:B4:96:65:68:A9:0C:1C:E9:93
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 77ECC399AC411743FA3917AF196217399EA3CB49
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34302e302f32342d3234203d3e2035303635.roa
Signing time: Tue 11 Mar 2025 07:09:42 +0000
ROA not before: Tue 11 Mar 2025 07:04:42 +0000
ROA not after: Tue 10 Mar 2026 07:09:42 +0000
asID: 5065
IP address blocks: 185.250.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ec:c3:99:ac:41:17:43:fa:39:17:af:19:62:17:39:9e:a3:cb:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 11 07:04:42 2025 GMT
Not After : Mar 10 07:09:42 2026 GMT
Subject: CN=0D9715678AD6C4DD038145B4966568A90C1CE993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:43:e2:bc:62:92:02:e2:0a:4b:3b:ce:5b:
0e:df:44:78:b8:c6:65:47:7d:fd:08:8e:ec:2c:dd:
98:18:7f:6e:bd:0f:ec:33:2e:98:12:76:bd:7e:6f:
05:e4:38:75:eb:3e:7c:46:3d:5a:71:ad:cd:4d:0a:
11:19:67:9e:00:f5:c3:c8:94:83:35:88:b9:22:4a:
4f:b0:28:60:6d:5f:33:52:cd:fd:10:a3:41:29:a9:
b1:19:39:a0:41:9c:dc:6d:45:53:16:f3:cb:6d:da:
84:c3:bf:bc:ed:9e:25:3d:5f:01:a7:10:7b:68:1e:
c0:73:49:ab:46:bc:c4:c1:97:58:8f:52:04:5a:53:
c3:90:0b:d0:af:0d:ea:00:c5:6f:22:d9:5b:de:17:
cc:3d:78:9d:72:2f:ef:de:4d:8d:7f:93:ad:cd:1a:
df:32:4f:21:e8:f2:02:1c:a1:f4:3b:6f:62:e5:f0:
4d:fd:6d:97:09:03:44:63:35:9b:0e:18:48:9b:ee:
87:6e:c1:54:23:3b:01:44:2f:cb:ca:f1:8c:34:4d:
4d:6e:da:6f:11:e9:14:11:e4:63:37:1e:92:e7:cc:
47:92:a9:ad:b7:8f:b2:02:06:80:03:b0:bc:66:ae:
f8:b2:cb:e6:13:f6:6b:6f:f1:e2:2c:c4:bd:65:aa:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:15:67:8A:D6:C4:DD:03:81:45:B4:96:65:68:A9:0C:1C:E9:93
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34302e302f32342d3234203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.40.0/24
Signature Algorithm: sha256WithRSAEncryption
39:69:e1:11:41:4b:48:b7:c8:eb:e5:04:7e:c7:9c:58:fb:ab:
c4:bb:38:a8:fb:05:2e:c4:21:83:97:91:9e:81:4d:4d:3b:15:
b7:0a:d2:d2:66:91:7b:bb:7c:ef:b1:8c:e8:62:3d:99:8a:04:
6a:db:85:fa:ff:5d:e6:43:8d:db:00:39:4d:14:0b:a1:55:3f:
c4:d9:bb:36:1f:d3:0b:9c:9d:70:a1:66:7e:fb:7f:58:23:5c:
24:b3:8a:70:9d:5f:ad:6a:8c:f1:bf:15:e7:11:53:a2:98:c2:
0e:f7:a2:c2:bd:5d:9b:73:82:cd:a0:5c:a3:02:ec:32:1f:10:
6b:4a:fa:fe:21:36:8c:7b:14:e8:22:21:e3:ec:7c:da:39:01:
3f:2a:e9:44:88:65:df:72:54:29:f7:25:21:f5:a4:f4:d6:f8:
8f:fb:81:89:4c:6d:bb:5f:2f:de:db:b4:bb:e3:05:80:e2:45:
af:96:c3:ee:2f:15:ee:44:e1:72:29:42:27:c2:06:54:ec:18:
9b:48:6e:0b:2f:99:6a:e9:ed:f9:7b:64:1d:98:2c:5d:3b:f6:
d9:db:f2:7b:71:c5:c9:09:49:f9:fd:84:15:7a:d3:49:0d:16:
9b:0a:2d:db:64:07:42:e7:e3:a8:b7:86:c1:2c:a6:04:8c:92:
01:0a:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:09 2025 by rpki-client