Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa (raw, json)
Hash identifier: qWfm3p5SYkoavEEgnpb2k6Fp4PYXQ3FghcbdWXQgIgk=
Subject key identifier: FB:CE:34:56:32:CB:05:25:53:FB:07:3B:DF:F3:1D:C0:A0:B0:5E:D4
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 688DC7095CF10E8BB616937AD136055431BDAEBC
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa
Signing time: Thu 17 Apr 2025 16:30:45 +0000
ROA not before: Thu 17 Apr 2025 16:25:45 +0000
ROA not after: Thu 16 Apr 2026 16:30:45 +0000
asID: 213962
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8d:c7:09:5c:f1:0e:8b:b6:16:93:7a:d1:36:05:54:31:bd:ae:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 17 16:25:45 2025 GMT
Not After : Apr 16 16:30:45 2026 GMT
Subject: CN=FBCE345632CB052553FB073BDFF31DC0A0B05ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:4b:16:ba:40:e5:2a:22:ea:33:80:a9:20:
6e:01:76:88:bd:a7:4d:93:32:97:9e:66:2d:b1:54:
02:f9:6b:f0:13:c7:05:60:d7:6d:4c:0f:c0:63:1c:
07:cb:2d:75:b7:e8:a9:06:d3:3d:56:db:0e:78:08:
3e:4b:44:fe:39:e0:c8:fd:1c:63:25:ae:d2:51:ac:
cc:df:ad:b6:cd:a0:47:a5:ca:be:58:2a:2d:da:4a:
c6:d5:5d:2a:b9:c1:b1:c9:5c:9c:6e:39:b4:01:81:
c0:39:64:94:ba:78:ba:0b:23:d2:aa:c0:aa:b5:dc:
88:dd:80:e3:b5:e9:f3:ac:7a:58:aa:41:37:5e:b8:
fd:92:e2:4b:29:dc:2c:4e:11:bd:1e:a7:25:86:06:
84:bb:f8:c3:1c:83:51:a0:c3:66:04:cf:5a:96:4b:
c8:3a:60:b7:9a:b0:ec:df:01:79:76:20:bb:9b:e8:
d0:a3:e3:71:4a:04:b9:75:51:ff:6b:5e:74:53:7a:
1f:bc:a3:4d:5c:5b:c3:7b:3e:ab:99:eb:19:e0:03:
64:f9:df:c5:bb:6d:2f:03:80:47:51:88:c9:6b:bb:
68:08:f5:ee:d9:9d:1c:58:13:4d:ed:3a:57:f8:19:
47:13:8e:86:1c:1e:85:f6:61:e7:5c:d8:f7:45:0b:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CE:34:56:32:CB:05:25:53:FB:07:3B:DF:F3:1D:C0:A0:B0:5E:D4
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20323133393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
18:7b:bf:1b:d1:ba:46:dd:4c:c3:ab:e5:29:ac:71:57:bb:4a:
12:77:b6:80:b6:ba:07:fd:b0:4f:33:43:f7:22:b4:69:20:91:
57:01:04:73:ac:0a:36:50:e6:2d:e1:40:23:16:78:eb:f1:9c:
3c:16:d2:95:da:d2:d2:59:a8:24:36:a9:f7:00:6d:0a:bd:f0:
f9:b8:a9:86:b4:41:e2:a7:10:d0:e3:2d:5d:cb:62:e8:21:3f:
0e:af:f1:e3:c0:55:cb:35:93:d1:0a:e7:3f:06:0d:9d:79:61:
97:a0:1a:54:a4:33:f3:10:2b:c9:a0:48:cc:d5:8b:a6:7f:5c:
2c:52:1c:db:8e:a0:de:1f:05:34:ec:60:11:1b:54:73:0e:70:
ef:92:e0:70:e0:cb:09:46:90:86:36:26:98:f8:5f:83:49:44:
08:79:f3:bb:bc:b1:a8:f8:da:bd:b2:61:45:b1:30:86:b8:4e:
2c:ea:8f:f9:6b:dd:14:de:aa:cb:33:a6:b1:25:6c:09:81:8e:
b1:90:f4:8d:b8:13:6a:cf:9f:d7:21:6e:c3:a8:73:5f:b6:6a:
e8:14:82:a2:dc:46:5f:1e:6e:b1:93:cf:a9:69:65:7d:22:30:
3b:bc:3d:a3:d6:4d:7c:a1:15:b9:ff:58:14:ed:7e:4c:a8:15:
d3:da:fc:4a
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIUaI3HCVzxDou2FpN60TYFVDG9rrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTA0MTcxNjI1NDVaFw0yNjA0MTYxNjMwNDVaMDMxMTAvBgNV
BAMTKEZCQ0UzNDU2MzJDQjA1MjU1M0ZCMDczQkRGRjMxREMwQTBCMDVFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyp0sWukDlKiLqM4CpIG4Bdoi9
p02TMpeeZi2xVAL5a/ATxwVg121MD8BjHAfLLXW36KkG0z1W2w54CD5LRP454Mj9
HGMlrtJRrMzfrbbNoEelyr5YKi3aSsbVXSq5wbHJXJxuObQBgcA5ZJS6eLoLI9Kq
wKq13IjdgOO16fOseliqQTdeuP2S4ksp3CxOEb0epyWGBoS7+MMcg1Ggw2YEz1qW
S8g6YLeasOzfAXl2ILub6NCj43FKBLl1Uf9rXnRTeh+8o01cW8N7PquZ6xngA2T5
38W7bS8DgEdRiMlru2gI9e7ZnRxYE03tOlf4GUcTjoYcHoX2Yedc2PdFC2X9AgMB
AAGjggJBMIICPTAdBgNVHQ4EFgQU+840VjLLBSVT+wc73/MdwKCwXtQwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMzM5MzYzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAG1uuTANBgkqhkiG9w0BAQsFAAOCAQEAGHu/G9G6Rt1Mw6vlKaxxV7tKEne2
gLa6B/2wTzND9yK0aSCRVwEEc6wKNlDmLeFAIxZ46/GcPBbSldrS0lmoJDap9wBt
Cr3w+biphrRB4qcQ0OMtXcti6CE/Dq/x48BVyzWT0QrnPwYNnXlhl6AaVKQz8xAr
yaBIzNWLpn9cLFIc246g3h8FNOxgERtUcw5w75LgcODLCUaQhjYmmPhfg0lECHnz
u7yxqPjavbJhRbEwhrhOLOqP+WvdFN6qyzOmsSVsCYGOsZD0jbgTas+f1yFuw6hz
X7Zq6BSCotxGXx5usZPPqWllfSIwO7w9o9ZNfKEVuf9YFO1+TKgV09r8Sg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:56 2025 by rpki-client