Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203533333536.roa
File: 3135392e3235332e332e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier: uV5gP669aq0NtuCXuZBm6wWsNYwP/024H/522nPjCx8=
Subject key identifier: 0B:66:E1:E1:FA:95:64:84:D4:61:5A:E5:86:F0:1E:83:56:A0:0D:BA
Certificate issuer: /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial: 25486F5D09DF6AD8877B9ED955AF2EE500F38387
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203533333536.roa
Signing time: Tue 27 May 2025 13:46:04 +0000
ROA not before: Tue 27 May 2025 13:41:04 +0000
ROA not after: Tue 26 May 2026 13:46:04 +0000
asID: 53356
IP address blocks: 159.253.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 04:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:48:6f:5d:09:df:6a:d8:87:7b:9e:d9:55:af:2e:e5:00:f3:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Validity
Not Before: May 27 13:41:04 2025 GMT
Not After : May 26 13:46:04 2026 GMT
Subject: CN=0B66E1E1FA956484D4615AE586F01E8356A00DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:c7:34:7f:b7:72:ab:5c:e9:15:b9:dd:a0:
3b:ea:d1:37:61:48:9a:73:93:1e:50:cb:59:96:59:
d3:34:97:22:a7:66:55:b4:08:2d:4e:0c:e5:01:6d:
d2:14:f7:14:3f:3b:c2:e3:48:1e:a7:64:2d:0f:63:
e0:06:51:1a:0c:e1:fa:09:ca:fe:4b:70:b0:dc:44:
79:49:51:11:e3:eb:7e:7d:8b:64:26:e4:84:44:87:
1a:dc:48:e1:d5:0a:60:f1:67:cc:b4:8f:20:7d:2f:
e1:c6:56:7f:bc:20:36:d0:e3:93:83:46:c9:4c:87:
61:03:35:74:ee:e6:69:67:d0:eb:00:8e:e5:50:f6:
9a:d9:46:dc:90:18:0b:4c:72:35:74:3d:94:e1:b5:
c4:c9:df:60:1b:d3:67:5d:d9:4e:c4:b0:84:08:a6:
0e:0e:2b:fa:0d:e2:c5:9e:88:c7:46:1b:a4:04:fd:
52:f2:d4:bb:98:57:32:f9:f9:37:3b:59:3a:50:57:
7a:2e:72:82:dc:6d:6c:4c:99:4c:67:de:6f:3e:e1:
70:35:59:20:7e:87:2e:d9:a5:77:5c:89:47:a2:21:
a0:f3:e6:a3:fa:9d:1c:02:42:ac:4c:0d:bd:6e:6f:
7d:56:7b:6f:9f:ee:e2:74:69:d2:de:33:a4:2b:bf:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:E1:E1:FA:95:64:84:D4:61:5A:E5:86:F0:1E:83:56:A0:0D:BA
X509v3 Authority Key Identifier:
keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/3135392e3235332e332e302f32342d3234203d3e203533333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a7:24:22:e8:2d:b8:ea:ec:bb:2b:9e:e1:60:82:c2:65:9a:
cb:b2:00:d2:aa:12:77:0f:bd:a8:4c:cf:f2:00:07:aa:7f:df:
80:b6:12:76:0d:7b:3b:c4:2b:cd:73:e7:07:cd:cf:5b:c1:63:
79:29:18:b6:95:dc:f8:21:1c:c5:2b:ca:cf:86:73:ac:21:8f:
b2:0e:34:88:9a:e8:1e:42:e1:a6:37:c9:e5:86:e3:64:15:84:
f8:5e:77:3a:39:61:87:69:2c:d1:bb:3e:76:e4:a9:de:f0:1a:
8e:63:1d:39:17:4e:f4:e9:29:54:a8:0a:6a:75:5b:95:89:83:
f8:b2:dc:a8:00:e3:86:8d:f2:e8:9e:6b:7b:75:2f:a4:7f:37:
ae:b3:fc:73:ee:61:f7:72:e2:d3:83:e7:93:aa:bd:0d:b2:74:
00:34:de:80:05:5d:70:20:cf:ec:43:53:ca:0e:b2:a5:85:d0:
41:bf:ed:db:8f:c4:fd:f6:92:b9:80:66:b7:7f:58:cf:99:b2:
6e:43:29:f4:83:44:49:08:6e:3f:bc:dc:85:d2:61:48:12:0f:
92:65:2d:5e:23:7b:71:4c:53:f4:1e:d8:e7:1d:61:43:69:0a:
3c:97:7b:e1:33:8c:c0:13:68:a8:52:5a:16:80:06:fa:13:f0:
2b:bd:a2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:11 2025 by rpki-client