Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e203236303432.roa
File: 3138352e3132332e3135362e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier: ynUXE+LDYJH/GYuDiJI+HLAJ3jTXbGgrvxOxfk3f5R0=
Subject key identifier: 3D:12:3F:8D:3E:19:C1:4E:FA:15:FB:6E:B9:10:93:1B:29:CF:29:04
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 3CD4BDEC92AE80EF0C313A94700EC2EA71C37AD0
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e203236303432.roa
Signing time: Tue 27 May 2025 17:10:34 +0000
ROA not before: Tue 27 May 2025 17:05:34 +0000
ROA not after: Tue 26 May 2026 17:10:34 +0000
asID: 26042
IP address blocks: 185.123.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d4:bd:ec:92:ae:80:ef:0c:31:3a:94:70:0e:c2:ea:71:c3:7a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: May 27 17:05:34 2025 GMT
Not After : May 26 17:10:34 2026 GMT
Subject: CN=3D123F8D3E19C14EFA15FB6EB910931B29CF2904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:19:7c:70:8e:c9:81:0e:8b:94:7c:2f:74:
a9:70:53:28:f2:b4:68:df:af:c3:5e:e0:4c:77:a7:
8d:85:f6:45:e1:79:8a:f6:11:d2:fa:f8:7a:73:5c:
7c:5a:e3:8b:59:35:72:9e:8b:7b:76:9b:9e:bb:0d:
44:3c:ca:59:ef:bb:ac:81:dd:b6:0a:1b:ed:b0:ed:
e0:fb:05:da:c8:2b:cb:29:89:ce:b9:35:25:58:17:
b2:10:d2:35:e8:8d:f2:f3:ed:c1:10:74:e8:95:58:
aa:d9:9a:ea:a0:9e:2b:69:12:e6:ed:ca:13:ec:51:
88:5f:ea:7c:5f:31:3a:59:3c:ea:79:c5:18:de:4a:
28:ca:cf:d7:11:fa:d6:0a:8b:40:67:e8:86:96:dc:
ce:6e:2f:a0:0f:e3:5c:40:77:c8:3b:8d:af:99:06:
f2:74:68:8e:a7:fc:52:78:63:51:fa:15:49:88:6a:
5d:7d:9c:61:da:30:2d:a5:02:ed:62:92:fa:95:ab:
db:99:db:94:e2:ad:a7:2c:b4:9c:22:7d:0f:38:fb:
9b:42:f3:03:c9:3e:22:9e:2b:7e:c2:f6:4e:15:8c:
ac:06:d1:c6:c0:e4:8c:1a:9b:e9:25:41:12:7d:7d:
f7:26:1f:cb:23:16:08:23:9f:c8:13:95:76:92:96:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:3F:8D:3E:19:C1:4E:FA:15:FB:6E:B9:10:93:1B:29:CF:29:04
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/3138352e3132332e3135362e302f32342d3234203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.156.0/24
Signature Algorithm: sha256WithRSAEncryption
25:47:c2:9c:3e:1b:20:76:52:97:fe:12:00:49:35:11:2d:50:
ec:5c:ef:f5:a5:a1:30:3e:3c:3b:a7:ab:0e:c7:65:f7:67:0b:
88:bd:8e:bc:db:89:bd:c4:9b:df:82:0a:10:95:33:f7:4c:6e:
70:87:57:21:c2:f9:1b:23:8b:46:fb:03:5c:80:17:c2:46:b8:
23:19:42:8f:bf:2a:8d:93:61:4d:50:31:fe:6b:a9:1e:04:a6:
05:c5:39:58:10:a0:7d:f7:02:35:8f:7b:41:b6:2e:ce:40:8c:
dd:df:f7:2d:37:22:65:93:6e:96:74:c1:ad:b0:67:8b:23:59:
08:ff:7f:60:77:b6:12:46:6e:09:45:8a:ac:cf:19:3a:82:55:
b6:6f:10:25:f7:55:72:e0:e4:f7:1c:e3:8d:09:b7:fe:b3:c1:
65:58:2e:90:c6:5b:d7:76:42:ee:e1:43:69:e3:22:26:9e:df:
e5:49:93:32:a9:84:4e:85:e4:11:f8:2b:21:f3:d3:c6:2e:28:
89:32:18:ac:d0:a9:11:19:3b:60:9b:92:ca:18:3a:74:1a:51:
43:0f:cf:b7:4a:28:4b:79:8e:fb:0b:da:e5:f8:d4:66:68:b2:
31:7d:fd:d8:be:de:3f:bd:dc:0b:fe:42:d2:70:eb:1a:1a:5f:
30:10:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:12:24 2025 by rpki-client