Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20313531353736.roa
File: 34352e3133322e39392e302f32342d3234203d3e20313531353736.roa (raw, json)
Hash identifier: iOgVFGpRhpm0jYFu0m90Za0ZQI3WFr9ioeMX4kgYHI0=
Subject key identifier: 58:42:44:6D:98:14:DA:78:61:6E:5A:F9:BE:E9:FB:3F:9E:C9:49:E7
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 3F5C4C78B79E358C1A020C6D8CEB59193C049D33
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20313531353736.roa
Signing time: Mon 12 May 2025 15:19:12 +0000
ROA not before: Mon 12 May 2025 15:14:12 +0000
ROA not after: Mon 11 May 2026 15:19:12 +0000
asID: 151576
IP address blocks: 45.132.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 06:51:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:5c:4c:78:b7:9e:35:8c:1a:02:0c:6d:8c:eb:59:19:3c:04:9d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: May 12 15:14:12 2025 GMT
Not After : May 11 15:19:12 2026 GMT
Subject: CN=5842446D9814DA78616E5AF9BEE9FB3F9EC949E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:96:9d:83:cb:78:7f:7f:2e:ac:ab:60:86:
a0:0d:5d:8f:52:0e:f8:79:57:dd:9e:cf:67:4f:86:
55:29:4b:c8:b0:5a:2a:60:c6:b7:35:0a:6e:06:b1:
83:c3:52:2f:e9:1c:a5:d2:f1:12:f4:b9:3b:90:35:
40:14:32:2e:ae:44:1f:2b:3c:25:2f:38:6f:a5:96:
09:d6:6b:cc:ba:04:70:94:d3:ec:4f:f9:b0:cf:a2:
55:f6:6c:9f:14:25:73:79:39:90:6f:37:03:f4:55:
f0:6c:e5:db:c8:e1:55:3a:df:81:1c:b1:4c:e0:e3:
e7:20:ea:2f:0c:62:63:f4:7c:e5:39:43:2c:53:07:
cb:ce:44:45:54:ca:a5:ef:c7:46:49:e1:a5:85:a9:
6f:82:4a:da:c9:f5:5b:d2:4d:28:1f:56:c6:0b:18:
56:01:2c:da:d9:56:27:44:37:3e:f9:6a:a1:a1:cc:
c9:97:d9:f6:ae:c9:76:74:73:8c:15:dd:c4:ac:f1:
9c:fa:e1:16:20:e0:5e:b3:40:dc:27:25:c4:d8:1d:
93:a3:3b:32:3f:b8:df:33:60:32:17:c3:39:e2:2a:
f2:68:bd:1a:04:45:25:6d:a8:85:e5:19:4e:ae:ea:
9e:60:0f:7e:9b:eb:90:a4:f0:e1:18:ff:8a:fd:f5:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:44:6D:98:14:DA:78:61:6E:5A:F9:BE:E9:FB:3F:9E:C9:49:E7
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39392e302f32342d3234203d3e20313531353736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.99.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4c:dd:6f:4f:0d:1b:5a:29:9d:a9:a0:ea:02:2d:c0:1c:71:
86:cd:62:09:60:f5:f1:8f:42:49:d7:4c:0d:42:41:2d:b4:2f:
b0:38:7a:14:ee:89:50:66:e7:c1:cf:25:70:ec:e5:30:2b:9a:
6a:b5:62:97:cb:d7:4f:07:e5:ea:91:ec:58:f0:cf:d7:87:6c:
4c:1a:47:12:5a:14:e5:ab:b1:2c:09:2e:75:b5:e2:5d:4b:e3:
0b:67:7b:90:ba:55:94:35:9c:c8:8f:b0:5a:c2:3f:ab:f5:27:
57:d6:ca:07:32:90:70:0c:d4:34:62:7c:46:e1:44:5a:fa:36:
3a:1e:9e:e3:d8:0d:44:02:66:00:c9:c6:6e:5b:4b:1a:91:5c:
26:27:9e:30:0b:02:58:0f:d4:fe:4c:ef:b2:44:19:99:73:ae:
c0:20:f0:79:09:36:cc:74:81:bc:12:54:12:90:85:57:ed:72:
29:82:1c:37:3a:89:05:8b:88:d9:34:2d:66:fb:6c:fa:ef:0d:
69:51:33:61:16:af:e0:37:b9:2b:16:ad:64:da:9e:dc:f8:07:
2f:17:8c:ff:cb:48:6c:c7:93:a3:ea:4f:59:52:9f:43:53:15:
aa:2a:5d:0a:51:ca:90:b9:73:a8:c7:36:45:3c:b8:59:d3:4c:
eb:2a:e7:ea
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUP1xMeLeeNYwaAgxtjOtZGTwEnTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3
ZTMwNTY0YTAeFw0yNTA1MTIxNTE0MTJaFw0yNjA1MTExNTE5MTJaMDMxMTAvBgNV
BAMTKDU4NDI0NDZEOTgxNERBNzg2MTZFNUFGOUJFRTlGQjNGOUVDOTQ5RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3Zadg8t4f38urKtghqANXY9S
Dvh5V92ez2dPhlUpS8iwWipgxrc1Cm4GsYPDUi/pHKXS8RL0uTuQNUAUMi6uRB8r
PCUvOG+llgnWa8y6BHCU0+xP+bDPolX2bJ8UJXN5OZBvNwP0VfBs5dvI4VU634Ec
sUzg4+cg6i8MYmP0fOU5QyxTB8vOREVUyqXvx0ZJ4aWFqW+CStrJ9VvSTSgfVsYL
GFYBLNrZVidENz75aqGhzMmX2fauyXZ0c4wV3cSs8Zz64RYg4F6zQNwnJcTYHZOj
OzI/uN8zYDIXwzniKvJovRoERSVtqIXlGU6u6p5gD36b65Ck8OEY/4r99YgFAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUWEJEbZgU2nhhblr5vun7P57JSecwHwYDVR0j
BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5
ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0
d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt
Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzMzMyMmUzOTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzNzM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYRjMA0GCSqGSIb3DQEBCwUAA4IBAQCyTN1vTw0bWimdqaDqAi3AHHGGzWIJYPXx
j0JJ10wNQkEttC+wOHoU7olQZufBzyVw7OUwK5pqtWKXy9dPB+XqkexY8M/Xh2xM
GkcSWhTlq7EsCS51teJdS+MLZ3uQulWUNZzIj7Bawj+r9SdX1soHMpBwDNQ0YnxG
4URa+jY6Hp7j2A1EAmYAycZuW0sakVwmJ54wCwJYD9T+TO+yRBmZc67AIPB5CTbM
dIG8ElQSkIVX7XIpghw3OokFi4jZNC1m+2z67w1pUTNhFq/gN7krFq1k2p7c+Acv
F4z/y0hsx5Oj6k9ZUp9DUxWqKl0KUcqQuXOoxzZFPLhZ00zrKufq
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:02:55 2025 by rpki-client