Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
File: 3130392e3131302e3138352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: H3bUfKUKNVKg6MWYPIzJUhOs4euaDTcW4YKY9eO9aMU=
Subject key identifier: 94:FD:63:EE:BD:3A:FD:27:20:9B:68:64:67:F2:69:37:57:1B:F4:C7
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 0921020708F27B0C4113B01D6326B78A028E0835
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
Signing time: Sat 22 Mar 2025 11:10:52 +0000
ROA not before: Sat 22 Mar 2025 11:05:52 +0000
ROA not after: Sat 21 Mar 2026 11:10:52 +0000
asID: 834
IP address blocks: 109.110.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:21:02:07:08:f2:7b:0c:41:13:b0:1d:63:26:b7:8a:02:8e:08:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Mar 22 11:05:52 2025 GMT
Not After : Mar 21 11:10:52 2026 GMT
Subject: CN=94FD63EEBD3AFD27209B686467F26937571BF4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:6c:bf:24:fb:08:1b:a4:ae:04:d4:08:ef:
2d:0f:71:e2:82:70:72:eb:c5:bc:22:54:be:48:a3:
25:3c:48:f7:ea:e1:9b:28:f9:bf:3a:78:5d:33:b0:
a0:49:f6:d4:87:85:14:0b:d4:c4:11:ff:9e:4a:4e:
6f:90:20:55:f8:6f:33:f0:4f:be:56:0e:4d:55:25:
01:b7:2f:47:92:3a:50:85:c7:aa:8c:cb:05:aa:0e:
00:f3:81:a4:80:ae:d5:13:2b:1c:b8:df:01:53:9d:
58:d6:45:b1:bd:2a:2b:61:cf:ae:c6:ce:95:cd:3c:
86:9f:53:85:76:85:90:24:22:bb:ea:87:93:b0:8f:
e6:b3:60:4b:78:53:81:c7:59:77:32:0c:3c:d8:74:
78:be:ed:31:bc:29:e8:ba:25:3b:7b:d4:b2:8c:fd:
03:59:f4:41:05:24:29:05:cc:16:d9:3c:5e:96:a5:
ea:ad:02:0a:b5:2b:ed:f5:25:a5:01:0d:a8:e2:90:
99:3f:fd:5b:0e:58:b9:68:9d:58:1b:8d:a4:e3:26:
5f:d0:ad:19:6a:5b:a1:a4:a6:80:3f:83:74:bc:36:
1c:21:04:5b:4c:d3:11:58:c9:50:c1:60:2b:59:93:
19:09:ec:32:7d:9d:72:52:0d:1f:63:3c:ca:08:06:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FD:63:EE:BD:3A:FD:27:20:9B:68:64:67:F2:69:37:57:1B:F4:C7
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.185.0/24
Signature Algorithm: sha256WithRSAEncryption
16:36:0c:44:b6:ff:91:5c:62:da:24:d7:8a:a5:96:0d:3f:84:
60:74:dc:5d:d5:40:84:0e:5b:75:c1:fa:1f:ff:e5:59:d9:40:
32:51:d8:90:36:15:bd:93:6c:45:04:32:3f:e2:85:33:93:5d:
3e:1f:51:2f:74:52:33:d1:52:86:fb:c3:d1:b5:3b:63:0e:3c:
95:67:2c:44:2b:28:f8:ae:8e:f9:54:d1:13:27:78:72:90:81:
cc:b8:65:67:d8:58:4a:33:d0:27:aa:31:a0:5b:49:a1:45:bf:
f6:fd:fc:55:56:87:06:c8:e9:19:35:48:7a:7c:64:9c:79:aa:
53:d3:4d:c5:40:80:75:e1:d3:9b:7d:38:b8:33:2d:b5:db:e8:
31:8a:3c:ad:15:a8:32:54:40:1c:2f:3f:1a:7e:b4:66:ee:c1:
b3:b4:97:f6:22:c1:6f:b9:53:af:29:fc:89:ed:0e:27:b4:11:
5f:bf:78:d1:f8:b8:d0:33:c2:f8:8d:bc:86:51:fc:6b:78:d1:
40:c8:ab:0f:6b:08:03:eb:ee:c4:71:97:ea:c8:aa:12:18:26:
12:9b:be:85:7f:18:43:de:e5:a3:fc:33:21:21:7f:53:0c:d4:
70:bc:4e:ab:1a:b0:a1:af:65:42:14:80:6f:94:bc:33:51:10:
66:1e:8a:f0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUCSECBwjyewxBE7AdYya3igKOCDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2FkZjYzZTM3NWIwYjc4NTA4MWI1OTQ1YjFkMThkOWRl
ODZlMGVmYzAeFw0yNTAzMjIxMTA1NTJaFw0yNjAzMjExMTEwNTJaMDMxMTAvBgNV
BAMTKDk0RkQ2M0VFQkQzQUZEMjcyMDlCNjg2NDY3RjI2OTM3NTcxQkY0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQbWy/JPsIG6SuBNQI7y0PceKC
cHLrxbwiVL5IoyU8SPfq4Zso+b86eF0zsKBJ9tSHhRQL1MQR/55KTm+QIFX4bzPw
T75WDk1VJQG3L0eSOlCFx6qMywWqDgDzgaSArtUTKxy43wFTnVjWRbG9Kithz67G
zpXNPIafU4V2hZAkIrvqh5Owj+azYEt4U4HHWXcyDDzYdHi+7TG8Kei6JTt71LKM
/QNZ9EEFJCkFzBbZPF6WpeqtAgq1K+31JaUBDajikJk//VsOWLlonVgbjaTjJl/Q
rRlqW6GkpoA/g3S8NhwhBFtM0xFYyVDBYCtZkxkJ7DJ9nXJSDR9jPMoIBtNtAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUlP1j7r06/Scgm2hkZ/JpN1cb9McwHwYDVR0j
BBgwFoAUet9j43Wwt4UIG1lFsdGNnehuDvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQtOTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2Fi
MDAyLzAvN0FERjYzRTM3NUIwQjc4NTA4MUI1OTQ1QjFEMThEOURFODZFMEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2V0OWo0M1d3dDRVSUcxbEZzZEdObmVo
dUR2dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWVlM2Q1OGQt
OTA0YS00Mzc1LWJmOTMtOGI1ZjM4Y2FiMDAyLzAvMzEzMDM5MmUzMTMxMzAyZTMx
MzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1u
uTANBgkqhkiG9w0BAQsFAAOCAQEAFjYMRLb/kVxi2iTXiqWWDT+EYHTcXdVAhA5b
dcH6H//lWdlAMlHYkDYVvZNsRQQyP+KFM5NdPh9RL3RSM9FShvvD0bU7Yw48lWcs
RCso+K6O+VTREyd4cpCBzLhlZ9hYSjPQJ6oxoFtJoUW/9v38VVaHBsjpGTVIenxk
nHmqU9NNxUCAdeHTm304uDMttdvoMYo8rRWoMlRAHC8/Gn60Zu7Bs7SX9iLBb7lT
ryn8ie0OJ7QRX7940fi40DPC+I28hlH8a3jRQMirD2sIA+vuxHGX6siqEhgmEpu+
hX8YQ97lo/wzISF/UwzUcLxOqxqwoa9lQhSAb5S8M1EQZh6K8A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:44 2025 by rpki-client