Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa
File: 3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier: zMoHCJaZZ5vI4uszw9fV0p+6ygU9pfTnJ4jfa1DsJEg=
Subject key identifier: 6A:6E:93:DB:DC:37:13:88:1E:43:D7:25:5C:C0:4E:82:00:B1:57:D4
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 45819A4BAFA8155E5CAA9DAAD6F053193CA69B58
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa
Signing time: Thu 05 Jun 2025 13:12:01 +0000
ROA not before: Thu 05 Jun 2025 13:07:01 +0000
ROA not after: Thu 04 Jun 2026 13:12:01 +0000
asID: 141968
IP address blocks: 178.248.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 11:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:81:9a:4b:af:a8:15:5e:5c:aa:9d:aa:d6:f0:53:19:3c:a6:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Jun 5 13:07:01 2025 GMT
Not After : Jun 4 13:12:01 2026 GMT
Subject: CN=6A6E93DBDC3713881E43D7255CC04E8200B157D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:36:75:fd:ab:f6:3e:39:3b:a7:87:b8:4a:
25:80:c8:fe:e8:b5:d7:aa:ca:ea:29:68:12:f1:87:
ae:89:70:90:01:b7:0b:da:c3:dd:2c:0f:9b:5a:f5:
f7:6c:72:0f:16:b9:6f:67:55:0a:13:96:47:65:be:
9a:1c:24:0e:5f:61:2e:59:5d:cb:3d:c1:63:d4:d3:
87:46:d1:12:c6:c5:83:67:f6:fb:5f:17:c7:f3:90:
ad:69:bc:91:59:2a:b0:53:ff:55:5d:83:34:7b:39:
57:cb:4f:18:55:71:7c:50:9d:70:3d:86:af:c5:cb:
8f:10:7f:91:41:e3:4f:f9:37:63:e2:bb:2e:9a:1f:
ae:50:fb:8b:18:ff:3e:bd:eb:2f:86:00:bb:b0:67:
b0:56:02:cb:e2:b0:b8:51:5e:7a:fb:53:fa:29:f1:
b9:5e:bb:85:47:24:93:1a:70:73:6b:54:18:19:c8:
aa:6d:ea:6a:7e:85:03:03:c3:0d:2b:16:1f:ae:6a:
04:8d:22:64:70:b4:7f:cb:22:97:8c:0e:78:cf:60:
89:f7:75:c1:89:43:cf:1b:b8:36:b3:37:6c:a6:71:
4b:29:4b:31:c4:73:75:15:5b:ef:f5:ee:db:d2:15:
e0:b2:08:62:c2:ab:14:6c:7b:a7:fd:d3:54:08:a0:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6E:93:DB:DC:37:13:88:1E:43:D7:25:5C:C0:4E:82:00:B1:57:D4
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37332e302f32342d3234203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.73.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:11:a7:6f:e9:5e:15:9c:b2:44:6d:25:bc:2b:ac:aa:69:a9:
43:a7:50:9f:19:7c:f3:ae:35:93:ed:f3:27:6a:43:7d:db:59:
e4:5f:ed:04:49:91:eb:76:e4:f9:53:69:39:d9:2a:0c:9a:96:
38:80:7c:86:a7:82:8a:49:2d:98:ae:24:01:52:cf:4d:bc:17:
8d:71:7c:6f:38:41:f8:5b:d6:4d:69:2c:aa:a6:d9:de:90:59:
0a:31:49:03:2b:da:2f:e0:d0:50:f9:32:84:ed:ab:6f:6e:60:
8b:64:46:94:e9:a7:50:df:0a:0a:68:23:53:1d:d3:7c:5c:0c:
05:85:9d:5a:3f:ad:f0:ac:d6:11:ff:aa:2f:5f:0f:8a:8b:71:
ff:7f:3a:9d:df:ba:42:22:5c:70:d3:ab:41:e3:7e:05:8b:95:
cf:be:fa:c9:31:78:95:ac:4b:38:41:1c:45:71:2c:9c:c4:b9:
cb:79:88:af:01:da:bd:40:dc:11:81:5d:66:94:7b:de:18:42:
b9:0a:f8:9e:46:f4:cd:18:e1:39:d3:38:55:22:be:4d:df:dd:
d5:93:02:89:5f:6a:47:6c:5d:29:d4:00:b4:9c:ca:bf:49:ec:
d1:37:92:b8:a3:79:84:b8:fb:b8:ba:9d:48:f0:cd:8e:3a:5b:
8d:8b:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:17:39 2025 by rpki-client