Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa
File: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (raw, json)
Hash identifier: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=
Subject key identifier: DD:A4:AA:4D:57:05:66:A1:7C:A6:AA:C9:E0:06:53:35:86:B2:2F:19
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 274F2384703A0138343E15F4606BBE2EC4C50EF5
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa
Signing time: Tue 25 Mar 2025 06:19:43 +0000
ROA not before: Tue 25 Mar 2025 06:14:43 +0000
ROA not after: Tue 24 Mar 2026 06:19:43 +0000
asID: 5065
IP address blocks: 188.214.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:4f:23:84:70:3a:01:38:34:3e:15:f4:60:6b:be:2e:c4:c5:0e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:14:43 2025 GMT
Not After : Mar 24 06:19:43 2026 GMT
Subject: CN=DDA4AA4D570566A17CA6AAC9E006533586B22F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:8f:09:44:7d:eb:d0:49:7c:56:b5:af:14:
d0:fe:96:a7:99:30:b2:45:5b:f7:e0:c3:f8:8b:a3:
7c:b3:d5:3b:24:fc:50:89:05:1f:d8:f0:79:ad:e9:
53:02:6c:5b:df:37:90:50:7a:0c:d7:71:81:bd:b4:
99:6e:8f:e7:df:69:fc:2d:6b:e9:4c:2b:78:96:4c:
93:3e:7f:09:ad:cf:b3:29:70:cb:ce:99:97:ce:d7:
c4:6b:e9:b6:9f:c5:69:a2:0b:1c:94:e7:1b:b2:fa:
29:0e:34:34:b3:74:08:50:8b:46:89:d2:e9:ed:04:
4c:65:0a:f1:9a:7f:1e:f1:69:3b:9c:ea:c2:ef:a8:
83:fc:65:df:b1:1b:4b:2c:27:ce:ec:e5:8d:e5:5a:
e8:d4:6b:c8:e7:87:6a:1c:08:4c:ba:9f:1f:d4:3d:
ea:87:3e:d9:b5:43:b1:ad:f8:ba:d8:55:ea:5d:d8:
78:e3:0a:07:1e:d2:44:02:cb:04:48:6d:f6:fa:b7:
34:a4:e1:b5:96:f6:b7:56:af:be:43:53:d9:50:08:
c5:06:b2:b3:31:a4:eb:64:9f:71:e8:da:41:79:d4:
4e:91:3d:c7:65:26:29:ba:a3:fb:62:bb:c3:7d:52:
bc:87:83:fd:c8:e4:a6:9d:46:35:34:bc:54:e7:86:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:AA:4D:57:05:66:A1:7C:A6:AA:C9:E0:06:53:35:86:B2:2F:19
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.232.0/23
Signature Algorithm: sha256WithRSAEncryption
65:a4:a8:fb:fa:6f:7b:8b:67:92:83:74:35:98:a6:7e:e4:a8:
27:fd:ff:ff:b7:2f:77:33:f6:1d:db:dd:d4:30:3c:7b:99:ab:
10:41:ad:8a:a4:a2:c2:76:7a:0a:c6:1e:10:bc:15:14:88:01:
90:50:a7:6d:0c:0b:79:73:e8:64:a5:1c:89:fd:9d:a9:f0:ef:
8f:18:90:f0:be:fa:16:f9:54:c7:5b:1c:86:34:81:6a:3c:9d:
f2:88:d0:a1:ce:3e:16:f5:97:2a:db:c8:1f:a8:c9:90:6e:f5:
9f:73:7f:cf:4c:15:da:bb:52:b0:2c:da:4d:70:94:fa:53:55:
06:cd:3a:62:dd:94:9a:4c:ae:e3:b0:22:63:0f:06:91:af:9e:
61:a1:84:c8:5e:03:95:8e:44:68:ca:4c:84:cc:f0:87:17:17:
ac:8c:3b:02:bd:f3:d3:76:ca:23:30:71:53:84:98:87:de:d1:
4f:c1:04:c1:44:9b:3c:c2:45:53:5e:62:68:aa:e3:24:68:68:
c1:7a:ea:00:9b:82:43:a4:68:aa:05:b3:47:5c:7d:c7:39:43:
a6:57:4a:8c:d9:ee:35:0e:f8:85:6c:6d:69:c1:7b:1b:06:b8:
e3:8c:8a:66:ce:a1:b3:b4:9e:f2:e1:f2:47:69:37:fb:87:eb:
e6:2c:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:08 2025 by rpki-client