Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30058.roa
File: AS30058.roa (raw, json)
Hash identifier: rZLv6M4xF3iN+uL/0r7Bz2dxiO3NpcBCDzuNZ5TB0eY=
Subject key identifier: 40:F9:26:C7:CF:40:44:E7:90:88:A5:32:1B:8C:C3:36:E2:CF:B4:F2
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1F67316D96A2A94243E9DBE266206C326A4A15EA
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30058.roa
Signing time: Tue 18 Feb 2025 23:25:01 +0000
ROA not before: Tue 18 Feb 2025 23:20:01 +0000
ROA not after: Tue 17 Feb 2026 23:25:01 +0000
asID: 30058
IP address blocks: 46.202.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:67:31:6d:96:a2:a9:42:43:e9:db:e2:66:20:6c:32:6a:4a:15:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Feb 18 23:20:01 2025 GMT
Not After : Feb 17 23:25:01 2026 GMT
Subject: CN=40F926C7CF4044E79088A5321B8CC336E2CFB4F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:bf:6f:bd:16:85:64:24:cb:4b:d7:6c:5e:
00:69:47:8c:86:82:54:b7:e9:85:20:dd:04:f2:c5:
d9:8e:5c:10:38:43:e0:24:91:b6:a5:5e:5d:2c:38:
84:9c:a0:5d:76:25:4c:62:f1:36:fc:96:08:8f:2f:
4f:3e:a6:97:8b:64:54:b2:02:97:d5:b1:4c:d1:de:
4d:15:13:3b:1b:c1:6f:87:0f:1d:4c:ad:6a:01:15:
e0:c4:ae:57:93:e8:57:00:2b:9c:0a:99:ac:46:e7:
f2:47:e7:fd:e3:3d:af:1c:a4:95:17:48:8c:8b:ca:
23:09:d0:b8:cd:46:0e:c3:b4:dc:8d:0a:04:c4:fb:
5a:7b:1d:8f:b7:92:62:be:16:af:26:4e:32:08:86:
fe:13:f0:69:fd:d1:06:60:b0:d6:2f:f3:70:47:12:
4d:6e:7a:26:88:46:f4:13:9d:1e:b1:ef:c1:fb:f1:
62:14:21:6b:a3:33:ba:ff:70:e4:83:31:82:21:ef:
f8:64:ff:40:b9:e6:3f:e9:c8:29:7e:e7:5e:85:a5:
de:62:f8:86:42:4e:6d:4f:e0:64:e8:79:ca:c8:20:
2c:7b:b1:d7:2f:9d:ad:c3:d8:19:5b:4e:ad:b5:34:
40:33:85:bb:1d:10:f7:ea:4c:54:7c:16:cd:47:69:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:26:C7:CF:40:44:E7:90:88:A5:32:1B:8C:C3:36:E2:CF:B4:F2
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS30058.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:21:b5:5b:d1:e1:83:d3:03:ee:46:b5:85:b4:5d:e2:2c:53:
1e:aa:82:29:a3:5b:8d:56:a1:f3:51:4b:9c:df:59:56:8f:6d:
ec:57:10:72:6b:d6:e1:77:99:41:44:74:11:b6:bc:3d:83:52:
08:5f:29:e5:6d:c2:61:28:43:d1:63:19:7b:7c:fb:3b:54:93:
9d:6b:8a:cf:08:c6:5c:51:37:af:f5:a0:65:ff:d6:e6:14:e1:
d8:40:89:ab:31:d2:f2:ff:56:30:b4:27:a3:6b:e5:9d:da:6e:
df:63:d6:a5:1a:74:ca:d5:59:0b:50:b4:17:e2:47:70:44:1d:
4b:ed:94:c8:81:9e:cb:0d:57:76:94:aa:14:3c:64:7e:a2:8a:
e1:f4:d2:2e:9c:33:da:26:53:35:ce:ef:a6:45:51:fb:9f:f6:
32:80:89:af:75:1c:eb:ae:3c:2c:00:1f:dc:4b:15:a9:34:3a:
f0:95:a9:3f:5e:be:c3:ae:d2:10:23:4c:b0:ec:25:07:92:55:
0e:d9:48:10:9a:f3:d8:26:ad:7d:f1:d4:0d:4e:67:78:1b:5b:
e6:7a:b9:d0:9a:4f:6a:04:59:6e:6f:8f:fb:44:1f:81:1c:d6:
b8:f5:ee:2f:0e:b0:89:a3:42:8d:ff:47:22:df:d5:40:eb:6c:
2f:c2:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:02 2025 by rpki-client