Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e203536393133.roa
File: 3138352e3235302e34312e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: roziV6oiwLxYriq3btcjbyRlDtjQhKQCS8sQ1/6hMWI=
Subject key identifier: 89:30:0A:DF:AD:AD:C0:E1:09:A4:1B:A1:4F:F5:DF:DC:F8:FB:CF:55
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 7429770F74EFA82C133A5B67EC0493580D299FA0
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e203536393133.roa
Signing time: Tue 11 Mar 2025 04:53:58 +0000
ROA not before: Tue 11 Mar 2025 04:48:58 +0000
ROA not after: Tue 10 Mar 2026 04:53:58 +0000
asID: 56913
IP address blocks: 185.250.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:22:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:29:77:0f:74:ef:a8:2c:13:3a:5b:67:ec:04:93:58:0d:29:9f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 11 04:48:58 2025 GMT
Not After : Mar 10 04:53:58 2026 GMT
Subject: CN=89300ADFADADC0E109A41BA14FF5DFDCF8FBCF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:f0:cf:72:6f:8f:7c:2e:3f:01:49:37:53:
a4:72:1b:12:de:29:86:77:53:5e:2f:a8:5d:4a:05:
d0:c3:cd:08:47:8f:8e:f6:9f:a2:ee:23:eb:2f:96:
83:39:77:08:92:ba:8e:d4:92:bc:73:50:bd:6f:7c:
3c:8b:8a:cf:29:f3:7b:cd:3d:5a:c9:e1:dd:87:9f:
67:7a:20:40:6e:86:a6:c1:fe:91:a8:a3:81:fa:96:
b2:13:e3:dd:e6:d8:46:ae:6d:54:31:50:6c:8d:c1:
90:a5:e5:fe:8e:ad:b1:d3:ab:40:fd:48:49:9a:0b:
e6:ca:d8:f8:e3:ae:85:cc:a7:bc:f8:41:fb:a9:0c:
95:2f:39:51:de:1c:45:ab:de:49:75:b9:80:c0:75:
26:8f:5f:44:ca:15:c8:29:22:be:f5:0c:88:3f:23:
af:a0:81:31:3b:af:8c:6b:c5:0d:4d:78:9e:89:47:
8f:b7:a2:eb:89:83:65:7f:45:62:b4:d9:5f:19:82:
2c:6b:80:52:d1:83:d2:4e:68:10:0f:e0:4a:03:8c:
03:52:bd:98:90:16:aa:03:c1:82:ad:b7:49:a3:7b:
b1:c7:c5:d9:1b:94:21:69:6d:a4:a7:23:73:2d:b1:
56:7b:99:50:1d:5d:29:35:e4:57:57:99:9f:64:90:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:30:0A:DF:AD:AD:C0:E1:09:A4:1B:A1:4F:F5:DF:DC:F8:FB:CF:55
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34312e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:6b:ca:29:db:ed:b7:d5:cf:63:f3:c9:27:f8:bc:d7:38:37:
6e:4a:6a:08:25:ae:a9:79:e2:b3:76:3f:48:cf:c4:9b:1b:bd:
1f:df:3e:5d:e8:c5:d7:c9:0f:a7:c9:64:84:64:d9:1c:01:c2:
92:2d:60:b6:36:36:16:df:81:10:40:a5:86:91:23:63:eb:cd:
db:83:c7:05:4a:5e:35:b7:d6:e9:2c:d1:b9:e0:21:87:0d:0b:
88:30:a7:df:b4:1e:5d:ab:3f:40:bd:9f:b9:eb:7b:04:2a:b4:
bf:92:8d:6b:4e:19:95:53:4b:3f:1a:d0:2b:44:67:41:a9:b7:
39:14:01:d3:9c:ff:3d:87:97:50:aa:a1:94:ae:33:50:1a:d0:
02:43:ed:57:2c:9c:05:86:31:29:ed:3c:36:fa:22:73:96:85:
54:cd:b7:8a:3d:11:ea:fb:06:c4:66:57:28:59:89:e9:a9:f1:
87:65:06:ae:5c:4d:79:34:d5:a2:d8:92:f1:f7:53:69:09:ba:
8f:ff:99:9e:eb:85:c7:74:20:17:94:05:7d:e5:2c:3e:d7:f6:
d8:a6:56:bf:0a:15:97:da:ed:9a:4e:7a:7f:80:8b:c4:ef:a2:
49:76:23:4f:53:25:9b:1b:73:76:09:2e:bc:04:d6:54:ec:8a:
5b:7e:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:21:30 2025 by rpki-client