Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039333034.roa
File: 34352e31332e3135302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: fH6Y3HabR24coXwbEvoMhIU3MH25jblWLctTBECZwNY=
Subject key identifier: 69:58:97:D5:ED:BC:6F:A4:B1:32:BD:77:70:84:B2:D8:46:65:BC:5A
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7025536F990EE27580242041A3A4B3D9807430D3
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039333034.roa
Signing time: Thu 03 Jul 2025 13:57:20 +0000
ROA not before: Thu 03 Jul 2025 13:52:20 +0000
ROA not after: Thu 02 Jul 2026 13:57:20 +0000
asID: 9304
IP address blocks: 45.13.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 04:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:25:53:6f:99:0e:e2:75:80:24:20:41:a3:a4:b3:d9:80:74:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Jul 3 13:52:20 2025 GMT
Not After : Jul 2 13:57:20 2026 GMT
Subject: CN=695897D5EDBC6FA4B132BD777084B2D84665BC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:1a:15:9f:43:36:19:57:c6:c1:1a:55:4a:
9e:f4:d2:0f:05:22:c5:0a:d2:6f:1f:00:c3:d2:84:
43:50:20:35:fc:72:11:e4:34:c3:8e:87:8b:a6:85:
6c:36:31:19:06:64:93:ce:96:68:42:4c:80:8a:0d:
23:77:3b:58:c9:8c:c0:fd:a5:89:f5:d1:02:75:3f:
59:79:1e:2c:cc:a1:42:17:ef:b0:e8:6b:95:de:b5:
ac:3a:09:b9:00:da:60:e3:09:48:25:48:97:d2:02:
b5:90:02:62:6b:b6:e3:79:1a:b9:6b:36:42:38:17:
6d:0a:6f:3c:d5:8d:7b:9d:62:8b:6c:cc:f0:3b:ce:
54:4e:9b:4d:09:e2:1a:a5:66:f9:88:71:a6:b3:0a:
53:34:93:94:35:eb:98:7c:90:75:02:f3:b3:fb:51:
ad:5a:f7:81:d3:9c:2c:cf:48:58:07:0e:a1:ce:9f:
26:be:3a:06:bf:0d:a5:9c:a2:dc:db:b9:74:a1:c1:
9c:12:ca:44:03:4c:f0:13:61:87:3b:f5:ca:5e:79:
8f:ff:82:fe:0b:af:26:0d:d5:e6:96:fe:99:82:3f:
88:4d:6d:0a:22:2d:a3:32:8b:79:18:50:51:31:5f:
23:3f:f2:6c:23:b5:ca:e9:bb:4f:aa:74:83:79:1e:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:97:D5:ED:BC:6F:A4:B1:32:BD:77:70:84:B2:D8:46:65:BC:5A
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e31332e3135302e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.150.0/24
Signature Algorithm: sha256WithRSAEncryption
43:97:60:4f:e8:4d:12:a4:48:70:b6:fb:42:6d:f6:f9:ea:27:
9a:be:9c:b8:38:6f:d4:f5:4c:79:d4:ce:c0:b6:49:a9:b6:07:
9e:9f:9b:95:10:7f:2c:74:f6:26:f0:4e:6e:7b:c4:21:75:d7:
61:c7:e5:4c:1a:54:81:3f:a2:ac:10:99:8d:b1:53:9c:e1:9a:
9d:59:e3:05:89:fc:7a:e4:29:53:54:32:0d:04:3b:f1:fc:ed:
06:c6:da:dc:c0:ae:89:7e:43:ee:19:48:19:2d:21:cb:0e:09:
90:c4:c3:82:ba:33:75:80:06:3b:09:7f:66:60:33:de:c5:59:
56:22:58:e8:72:20:25:54:97:cc:72:d7:54:bf:46:6c:8b:e5:
50:6c:4e:b2:02:97:ac:74:05:40:4f:c3:69:bf:3c:28:3f:9b:
84:3c:06:a2:77:01:b6:8d:48:29:a1:cf:82:21:49:e3:58:36:
3f:51:75:29:7c:f9:76:d7:c5:e8:dd:68:0f:a2:fc:bd:97:c6:
7a:dc:08:ec:04:4e:7b:29:c0:b1:e2:b1:c7:05:60:7d:8d:96:
fc:03:06:aa:33:ae:dc:19:c3:c1:2d:96:e5:c1:eb:7d:f2:35:
73:17:38:52:52:e4:79:9d:53:c5:30:8c:b1:c0:b0:18:67:ce:
a3:1d:fa:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:20:48 2025 by rpki-client