Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20323133303230.roa
File: 34352e3133322e39382e302f32342d3234203d3e20323133303230.roa (raw, json)
Hash identifier: 9AYk7/8SavllsDHcTHpi3Xvnhgfy4O50K8OFpKjbUfE=
Subject key identifier: 74:20:51:F8:4C:CE:25:D2:D9:C3:43:F1:BD:07:9C:6F:68:A0:44:B1
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 3BDD34E1785D39FB6B1DC836079BCD4B5A4EAAF2
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20323133303230.roa
Signing time: Thu 15 May 2025 17:40:13 +0000
ROA not before: Thu 15 May 2025 17:35:13 +0000
ROA not after: Thu 14 May 2026 17:40:13 +0000
asID: 213020
IP address blocks: 45.132.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 01:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:dd:34:e1:78:5d:39:fb:6b:1d:c8:36:07:9b:cd:4b:5a:4e:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 15 17:35:13 2025 GMT
Not After : May 14 17:40:13 2026 GMT
Subject: CN=742051F84CCE25D2D9C343F1BD079C6F68A044B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:cf:72:50:35:dd:94:b7:46:14:78:61:1a:
2a:3a:4b:4f:dc:df:b7:7c:3a:c6:08:23:7b:20:bc:
c2:4f:bb:81:e2:d1:66:c8:17:63:af:47:0f:8b:9a:
bd:20:67:2a:8f:89:3c:bc:f0:eb:23:ba:08:d7:90:
e5:74:98:0d:21:66:71:8c:f2:6f:91:1d:96:a4:57:
b5:0b:83:c3:d1:d4:3a:87:e9:99:e3:87:ad:11:33:
9a:e9:5b:3f:14:6c:3c:cf:dc:ca:e1:1c:5f:d8:90:
30:60:7d:5f:67:91:91:d6:42:33:89:43:4c:32:72:
d2:57:eb:64:45:c7:54:79:69:9c:95:7e:96:40:bb:
f9:7a:85:d8:d0:d4:01:e1:82:dc:4c:da:37:bd:41:
34:cf:f4:a5:e0:d9:95:72:40:be:39:9e:52:5c:eb:
ec:d1:36:05:07:16:18:b2:07:4e:a4:05:83:63:a9:
06:7e:a0:2d:be:e7:ad:e4:32:08:d5:bb:91:79:af:
0b:ff:ce:b0:55:1c:d2:7b:37:cd:28:f1:5b:b4:7a:
fa:b0:aa:45:5f:89:89:c8:22:46:29:84:08:5b:7f:
97:4d:7e:83:ff:cd:0c:53:2b:d9:16:e5:26:30:5f:
25:78:6b:36:09:97:fa:fd:e1:0d:a5:f8:94:0b:52:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:51:F8:4C:CE:25:D2:D9:C3:43:F1:BD:07:9C:6F:68:A0:44:B1
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39382e302f32342d3234203d3e20323133303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a1:24:5d:eb:b9:35:23:7f:80:af:13:fd:c7:d0:b4:b0:31:
81:00:cf:ed:36:1f:e5:e1:65:d6:3f:06:09:f5:04:83:bf:d7:
c2:a7:fd:a1:ad:ab:16:72:78:c1:cc:d7:51:c6:ef:6a:6a:be:
0c:9b:ee:ea:41:d7:12:90:52:c9:f6:52:33:2c:eb:55:6c:30:
db:6e:72:8f:f3:e4:5c:da:82:48:20:38:d0:88:32:d2:68:a5:
64:3b:b4:38:3b:29:23:cf:6d:f5:a9:b6:2f:74:1e:ae:51:5b:
f0:11:0b:d6:81:da:27:2d:45:5e:8e:ec:be:f2:6f:a1:4e:d9:
03:31:59:44:c9:40:78:bf:08:8a:af:52:4b:4a:0e:89:aa:d6:
1d:01:61:cd:6f:73:4a:31:c0:56:1b:bb:16:1d:19:d5:cd:b0:
f9:33:ea:2c:9d:f5:2b:41:b9:30:97:b1:12:47:73:a6:65:13:
a9:ac:a9:e4:11:6e:6a:a8:94:8e:8e:3f:32:e5:a2:41:27:4d:
65:b2:db:c1:7a:b1:f6:b6:ef:84:e7:da:83:1d:ca:a6:70:60:
98:19:7a:17:9b:4d:a8:c8:3f:35:cd:d1:2f:6b:d5:00:6d:78:
2f:5f:56:59:88:1c:40:aa:3b:6b:64:c0:37:c1:3d:21:46:fe:
84:ea:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:07:43 2025 by rpki-client