Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20333938373034.roa
File: 3135322e38392e3132352e302f32342d3234203d3e20333938373034.roa (raw, json)
Hash identifier: ME43iMQpPV5vK4OeyHg+u9UrwyD29bACmnMtoy08Ikg=
Subject key identifier: B9:88:89:DF:58:B0:CE:FF:31:B4:C3:7C:41:ED:33:E4:F0:CB:8F:0B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 035BD95D0C4CB8D41A5CBDFD26DB356DE7EE2075
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20333938373034.roa
Signing time: Mon 19 May 2025 10:35:32 +0000
ROA not before: Mon 19 May 2025 10:30:32 +0000
ROA not after: Mon 18 May 2026 10:35:32 +0000
asID: 398704
IP address blocks: 152.89.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5b:d9:5d:0c:4c:b8:d4:1a:5c:bd:fd:26:db:35:6d:e7:ee:20:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 19 10:30:32 2025 GMT
Not After : May 18 10:35:32 2026 GMT
Subject: CN=B98889DF58B0CEFF31B4C37C41ED33E4F0CB8F0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:c8:45:fe:b6:15:c2:16:99:d2:fa:10:02:
e7:8e:4f:7e:f6:b2:03:8f:36:ed:76:a5:d0:01:84:
e1:8f:56:26:d8:96:fe:b2:19:2a:85:37:f9:ef:72:
b5:cd:12:49:5e:db:30:98:16:a4:94:e5:38:ab:37:
0f:25:51:98:50:82:7f:19:70:2a:5d:b2:fa:13:5d:
74:1a:7a:65:ac:d8:0b:ed:6b:24:e6:03:ce:5e:e6:
59:0a:d3:14:19:ad:0d:ec:98:df:b0:dc:2a:65:15:
3d:2b:34:62:36:05:32:3a:01:1f:51:a6:6e:fd:1d:
70:3d:a8:a4:d0:78:a9:1d:7a:78:4b:b0:20:b6:13:
b0:51:2b:8a:d2:8b:58:43:78:ed:81:60:49:e5:ca:
9e:b4:e2:ba:3c:fa:1b:3f:b6:25:58:26:ca:c3:83:
03:23:23:4d:50:77:d5:2c:1d:e5:c8:83:0b:80:88:
3c:de:45:74:07:32:08:ed:d0:4f:8a:3e:3b:e5:f3:
22:87:06:9a:44:37:0e:4a:1d:90:ee:88:49:c4:f7:
46:33:8e:83:4f:34:d2:25:7e:22:ff:84:8b:fe:2d:
61:16:d8:24:fc:68:f9:4b:d0:0b:3d:cf:53:f5:b7:
7d:dc:e5:50:91:dd:ab:09:e2:25:b0:f4:4d:83:7c:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:89:DF:58:B0:CE:FF:31:B4:C3:7C:41:ED:33:E4:F0:CB:8F:0B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3135322e38392e3132352e302f32342d3234203d3e20333938373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.125.0/24
Signature Algorithm: sha256WithRSAEncryption
46:75:6e:33:54:15:81:fe:71:bf:70:41:c0:88:a7:e6:02:88:
01:5e:8a:4b:63:e4:61:dc:75:13:49:13:7d:27:82:8e:ae:4e:
8b:f2:61:5d:51:88:36:6b:06:39:40:ac:1e:ef:a3:a9:a0:a0:
9a:ad:98:b5:f9:98:35:ec:7a:93:99:3f:8f:c6:d5:d8:14:2e:
0f:1e:db:51:8e:7f:0d:c4:5b:7c:00:30:75:35:e6:75:00:f5:
06:f8:b1:26:27:06:5e:df:f6:5f:6b:0f:14:56:4a:fb:05:aa:
3e:22:6b:3f:96:e5:44:80:25:d6:e3:09:86:e5:97:ce:21:85:
9e:6b:56:04:7f:66:5f:15:f1:46:05:43:d7:8b:b2:9d:8b:c9:
55:e2:f6:53:17:5d:08:9a:b3:8f:ee:d0:57:2c:c3:77:f6:da:
43:6e:90:29:88:91:9e:39:fd:d0:92:39:c6:1f:68:42:33:95:
94:de:9f:a7:82:cb:75:e7:81:b8:9d:01:0e:a2:76:5a:0b:7a:
2e:8b:a4:11:70:27:48:95:23:4f:55:0b:03:ae:2a:50:71:26:
20:1a:1a:c0:c7:9d:33:31:bc:ab:11:5f:a3:b0:c5:a2:21:99:
82:9d:43:4d:55:d3:ed:5a:e7:6c:55:56:86:91:d8:d5:b9:a5:
f1:5d:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:58:31 2025 by rpki-client