Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3233203d3e203230343733.roa
File: 37372e38312e38302e302f32332d3233203d3e203230343733.roa (raw, json)
Hash identifier: PUzP/p5Okr3bvZ4WF8kcm0JJSJ70QPVxP+cQ0aO0FQg=
Subject key identifier: 06:26:06:B2:2F:0A:22:8F:20:E0:36:49:12:09:E2:E9:81:8A:5B:57
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 681AB6D758B070965C623A0A4E6A6DD1428DEE99
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3233203d3e203230343733.roa
Signing time: Tue 03 Jun 2025 04:56:07 +0000
ROA not before: Tue 03 Jun 2025 04:51:07 +0000
ROA not after: Tue 02 Jun 2026 04:56:07 +0000
asID: 20473
IP address blocks: 77.81.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:1a:b6:d7:58:b0:70:96:5c:62:3a:0a:4e:6a:6d:d1:42:8d:ee:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Jun 3 04:51:07 2025 GMT
Not After : Jun 2 04:56:07 2026 GMT
Subject: CN=062606B22F0A228F20E036491209E2E9818A5B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:70:bf:1c:a9:fe:a4:97:ef:17:ed:74:5c:
7a:5c:a2:c1:d9:9f:32:bb:ac:a8:a5:3c:3a:6d:27:
b7:4a:92:5b:3b:eb:20:94:58:14:ff:67:07:3e:be:
57:03:c5:08:63:c3:29:94:ed:7a:d7:58:f4:78:dd:
c4:67:83:39:a7:2c:89:b9:5e:69:32:7f:60:68:02:
cf:f2:c6:46:4e:2e:af:3f:b3:9a:6c:f0:e5:66:9c:
52:51:0a:d5:bc:b9:14:1b:7d:d2:70:03:3d:e9:f7:
87:3f:1d:7a:28:51:cb:dd:6e:4e:b1:c9:c2:8f:44:
b5:a3:41:4e:56:b8:91:9b:89:e7:81:35:91:d4:85:
e2:e7:7d:1b:ff:c5:89:17:17:66:06:16:45:c9:57:
df:cb:b0:27:92:7a:da:b9:1c:23:f7:0e:00:4e:57:
ed:79:af:37:a0:5a:16:d8:21:f5:aa:97:1c:6b:80:
26:7e:f8:f2:c5:56:b0:c0:85:07:86:fc:a5:c4:8d:
2c:46:98:0b:15:19:25:99:06:95:a4:89:eb:bf:ff:
3c:32:2a:47:3f:e3:8c:c9:df:f0:b3:e7:b9:b5:fb:
f3:05:7e:53:bf:42:cb:76:a5:9e:24:a4:dd:15:ab:
58:33:e5:d2:75:73:7b:e8:df:78:aa:9a:8f:53:7d:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:06:B2:2F:0A:22:8F:20:E0:36:49:12:09:E2:E9:81:8A:5B:57
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3233203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:61:b7:09:72:ce:70:12:50:8e:9b:c6:31:14:aa:18:32:5d:
3f:c5:26:ef:ed:13:65:2e:7e:24:fe:e0:50:90:51:c2:38:a8:
51:31:0f:2a:3d:5c:12:e2:73:e0:31:f9:7c:27:d8:1e:a0:57:
de:83:71:fd:72:d3:96:23:04:8a:32:c6:59:71:9e:ba:16:0b:
e8:70:6f:29:a9:b2:09:15:eb:1b:9b:d0:c2:4f:87:54:1c:a3:
49:ba:15:12:d1:b4:34:83:32:b1:20:b3:eb:31:0b:77:2b:b3:
74:42:b9:e9:65:3d:1f:12:81:88:9f:c7:9d:f0:21:3b:69:d6:
ed:34:18:5f:f8:95:d0:1c:b6:51:c8:2a:84:43:70:98:d8:41:
b7:cd:c7:d5:99:71:39:65:92:33:b6:c0:c3:f3:d2:3d:e0:9d:
13:7a:66:d1:0e:32:6b:d5:88:5a:d1:55:58:ac:61:10:e1:24:
1c:80:8c:e3:ae:dd:44:e9:68:01:57:ee:90:ea:3f:12:28:d0:
59:03:52:96:54:a2:3f:26:e1:14:c8:dc:63:83:21:f5:d6:65:
f8:24:5a:7c:be:e4:e4:36:6d:46:24:31:70:ed:16:cc:75:ed:
1c:86:4a:a6:f1:74:22:84:9b:9a:82:97:f6:aa:9a:07:99:be:
7f:9b:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:38:38 2025 by rpki-client