Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137342e302f32342d3234203d3e2037353632.roa
File: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (raw, json)
Hash identifier: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=
Subject key identifier: 99:55:53:09:CD:4E:5E:D7:E9:B6:36:AA:B7:71:B4:7A:DC:FC:A8:BA
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 1716DA4E3A2607AF9CC7ABF5D0E14746F39749DE
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137342e302f32342d3234203d3e2037353632.roa
Signing time: Thu 08 May 2025 16:54:07 +0000
ROA not before: Thu 08 May 2025 16:49:07 +0000
ROA not after: Thu 07 May 2026 16:54:07 +0000
asID: 7562
IP address blocks: 45.8.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 08:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:16:da:4e:3a:26:07:af:9c:c7:ab:f5:d0:e1:47:46:f3:97:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: May 8 16:49:07 2025 GMT
Not After : May 7 16:54:07 2026 GMT
Subject: CN=99555309CD4E5ED7E9B636AAB771B47ADCFCA8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:e2:2a:24:f6:78:06:a7:48:47:b4:a6:f2:
5d:91:f9:7d:ab:cc:58:ed:2c:96:ba:71:38:fd:3b:
80:66:4f:ad:52:4b:17:81:c9:d0:9e:82:7c:c5:2c:
58:f0:5d:b7:83:fb:7f:ba:e3:ce:f1:d9:3c:e9:8b:
1f:38:32:dc:e8:be:06:03:a9:88:2b:d3:1c:fb:34:
ea:70:12:df:02:90:80:f9:0c:c9:83:3f:c4:a3:f5:
19:2c:cd:fd:2a:98:b7:14:bf:3d:04:8d:da:1b:54:
89:f6:b3:6d:a3:93:41:be:0f:a0:a1:9f:20:d8:1f:
69:cb:24:05:98:33:a1:d1:1a:d7:3a:7f:3b:c7:f8:
85:e2:20:a9:73:62:9c:b7:1e:d6:e2:7a:49:1d:20:
cf:13:20:9c:7d:7b:00:d7:70:f1:d5:bc:d8:3f:5b:
71:65:27:ed:c5:e9:ed:1b:67:05:03:4d:36:9f:73:
63:9b:3a:5e:df:98:7a:00:fc:15:f7:9b:6e:f1:67:
f6:8d:33:ad:09:06:4e:09:b3:d3:b4:bc:aa:c7:dd:
6f:fe:21:97:39:eb:d1:32:0e:59:3d:f2:95:bd:0a:
fa:0f:e5:45:5a:36:b7:0d:ab:e8:3f:9e:42:fa:fb:
fb:ed:1b:c7:10:c4:23:4d:b2:80:9a:dd:26:bd:a3:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:55:53:09:CD:4E:5E:D7:E9:B6:36:AA:B7:71:B4:7A:DC:FC:A8:BA
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137342e302f32342d3234203d3e2037353632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.174.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7d:71:f3:01:43:3d:c3:91:a4:44:df:d4:7f:d0:75:b4:20:
6d:3a:e9:08:85:5e:d7:c6:18:2d:f1:b2:76:d2:63:5b:aa:25:
44:a3:48:c1:32:5e:be:37:d4:2b:10:e9:23:e7:47:fc:11:9d:
9e:0f:51:1b:13:ed:68:29:7c:ec:6a:d1:1a:c3:fe:4e:f0:e7:
85:45:e7:1f:4c:37:ce:cf:2f:bf:4a:a8:b2:f3:84:99:f8:b0:
b2:ac:9d:50:ff:46:c4:7d:c4:44:25:75:f0:5d:27:63:e4:50:
eb:b9:58:a2:4c:da:94:53:34:fd:c5:80:fe:bd:e3:a0:8b:f2:
a3:3b:7e:79:7e:7c:ef:b8:56:f0:01:b4:94:3e:3b:e9:0d:9c:
33:a7:e2:2a:dc:85:dd:8e:e4:71:94:c2:6c:b9:a0:6c:13:89:
80:3b:28:e5:80:2b:b2:0d:64:cc:29:8b:1c:53:1f:3c:16:ca:
b0:0f:7f:dc:c6:4c:38:ce:68:5b:55:85:54:7e:64:a3:57:51:
ac:16:ac:52:20:aa:55:b0:6c:22:e4:61:06:8a:ab:22:74:c0:
c5:bf:0d:1f:e1:6d:4b:6e:f3:2f:7f:d1:55:fe:10:f5:92:76:
41:d0:7e:71:02:9e:42:01:26:94:29:9d:81:a3:68:d9:5e:1a:
15:87:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:31:20 2025 by rpki-client