Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203432383331.roa
File: 3138352e35382e3135382e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: H0/UOIDOPTZQG2jWBZUuvlV7qmEWppBmDmL+nyn9Jr4=
Subject key identifier: B3:31:6C:BF:44:60:6B:01:C5:54:10:6A:BF:1E:E2:DF:08:33:F3:C8
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 74C807BDF06F8FCD640DA0F2442ED3231C37103C
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203432383331.roa
Signing time: Wed 19 Mar 2025 05:37:46 +0000
ROA not before: Wed 19 Mar 2025 05:32:46 +0000
ROA not after: Wed 18 Mar 2026 05:37:46 +0000
asID: 42831
IP address blocks: 185.58.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c8:07:bd:f0:6f:8f:cd:64:0d:a0:f2:44:2e:d3:23:1c:37:10:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Mar 19 05:32:46 2025 GMT
Not After : Mar 18 05:37:46 2026 GMT
Subject: CN=B3316CBF44606B01C554106ABF1EE2DF0833F3C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:ad:8d:9f:f2:0e:66:99:08:14:4b:a8:fb:
ec:73:35:f4:a7:c2:2d:99:3a:f8:ec:17:61:eb:c0:
4a:b9:5e:b5:dd:76:fb:a5:14:28:c9:72:60:da:93:
f0:83:fd:2e:9d:ee:ee:e1:9b:9e:49:f8:3e:7e:2e:
52:2a:c0:ed:2e:5f:1f:8f:2d:ba:10:38:15:00:ab:
ee:27:1f:66:e1:78:e8:71:e4:89:09:ee:76:f1:27:
3e:17:51:19:d9:e2:f0:8c:b0:fe:ab:a8:ba:26:51:
f2:10:69:f3:54:87:bb:f4:ea:6d:7c:84:83:e7:a5:
b9:e7:5c:a7:b3:f1:34:2b:06:c9:80:f6:b6:16:f3:
33:b2:d3:f0:08:10:52:99:60:09:b4:6a:df:8d:d9:
7b:83:46:9e:eb:e3:57:62:3c:cd:fa:61:af:06:35:
d5:ed:ac:8d:41:e9:77:aa:68:39:35:b4:0e:1a:29:
7c:99:4f:27:0e:f2:40:b1:de:03:17:e6:5b:3a:08:
fc:53:c6:be:79:13:b3:8c:ca:a7:91:9a:80:3c:91:
0b:89:65:65:82:5f:78:c4:8e:71:6e:f8:b2:d3:eb:
46:3f:32:81:b6:fb:c3:c1:46:30:26:92:9b:af:c2:
f8:52:b3:c7:b5:16:a2:a5:eb:ca:69:d2:1e:2f:f3:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:31:6C:BF:44:60:6B:01:C5:54:10:6A:BF:1E:E2:DF:08:33:F3:C8
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/3138352e35382e3135382e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.58.158.0/24
Signature Algorithm: sha256WithRSAEncryption
87:45:36:fa:6b:2f:d2:2e:af:5a:61:ef:74:55:a9:01:d6:cc:
4d:50:32:2d:af:99:19:e1:9c:d1:f9:be:56:fb:0b:8c:5f:aa:
5a:ad:f9:03:7d:b7:da:53:d4:14:95:86:49:81:57:61:27:3c:
02:2d:30:af:dd:6d:fa:16:8c:9f:29:eb:5c:08:97:92:ca:73:
62:bc:48:b7:f2:f7:cf:5c:10:7a:c8:84:b7:c0:92:75:62:9f:
87:34:34:d3:f2:9f:a1:55:1b:7a:7e:03:36:3e:68:81:e4:3d:
b0:7c:53:e8:3d:86:f7:27:19:71:c7:b9:8e:31:8a:91:8a:2f:
3a:e7:16:84:80:ef:08:2f:55:75:ca:b8:93:04:4a:7c:d3:97:
96:92:00:1f:cd:a7:75:df:5d:c5:2f:32:e4:78:0b:73:7f:45:
e7:a5:c0:99:58:cc:12:fb:1d:ae:bb:84:55:09:15:bb:e1:84:
a9:85:a5:35:3b:f9:bd:8a:0b:16:c2:63:8e:d9:c1:0f:41:55:
4d:4e:62:aa:b8:6b:95:86:66:88:0e:f8:b0:28:ab:ee:52:02:
25:86:7a:fa:93:02:0a:c3:ab:2a:81:37:14:b2:61:ae:de:90:
1f:07:43:b9:f9:71:23:73:7c:20:21:91:64:4e:bd:ef:fd:a6:
43:14:96:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:06 2025 by rpki-client