Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e203436383434.roa
File: 34352e38392e3134382e302f32332d3234203d3e203436383434.roa (raw, json)
Hash identifier: I4Zwtx9y1lG5Qu9j58BlxoVuwPPlNmIUlv4j5y+vmAA=
Subject key identifier: 29:32:DF:18:6D:65:D0:89:79:1C:03:6E:C7:68:3B:F6:0A:36:79:42
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1CC55A55BA9B83E7A18100675EDF0A13D5A5483A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e203436383434.roa
Signing time: Thu 02 Jan 2025 05:14:46 +0000
ROA not before: Thu 02 Jan 2025 05:09:46 +0000
ROA not after: Thu 01 Jan 2026 05:14:46 +0000
asID: 46844
IP address blocks: 45.89.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:42:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c5:5a:55:ba:9b:83:e7:a1:81:00:67:5e:df:0a:13:d5:a5:48:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jan 2 05:09:46 2025 GMT
Not After : Jan 1 05:14:46 2026 GMT
Subject: CN=2932DF186D65D089791C036EC7683BF60A367942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:42:42:d0:3d:98:3a:dd:d2:27:19:c1:43:
55:d3:b3:c6:8a:c6:8f:f2:9a:1b:77:4d:3d:d2:48:
ae:63:cf:f9:71:f1:f6:8f:6b:d4:82:e7:09:0d:29:
6d:a1:f4:f0:1c:ae:4c:5c:1b:eb:c3:ba:4e:a3:30:
d0:48:d2:7a:c6:c4:71:62:32:f6:53:91:17:a8:9a:
22:d0:bb:9b:6e:79:43:88:12:e8:47:94:21:d2:5b:
5b:a9:f2:2f:13:d2:a9:6e:cf:12:73:73:f5:de:80:
72:78:af:02:ea:da:01:d6:59:65:af:cf:21:78:9a:
dd:97:6e:f9:5f:e2:a2:a4:49:cc:c5:82:ab:50:04:
c1:7d:0e:eb:bd:c9:f4:a0:b1:f8:d7:5f:be:39:a0:
12:34:4c:79:0c:cf:c1:8b:0e:a3:cd:e4:cc:f1:cf:
4e:d2:66:f9:58:1c:3d:fe:67:83:38:c3:ac:d9:ed:
a3:15:61:17:15:5d:54:a0:fb:e3:19:1c:0e:83:8a:
90:61:85:fd:83:3a:45:8d:70:11:a9:93:3d:0b:6c:
b2:70:e6:f1:7d:08:ba:22:5b:d4:d8:f9:39:7b:a3:
0b:0e:3a:94:72:b3:c5:24:70:05:39:6d:34:41:eb:
de:fd:69:aa:97:be:51:3e:97:c1:ef:51:cb:75:3c:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:32:DF:18:6D:65:D0:89:79:1C:03:6E:C7:68:3B:F6:0A:36:79:42
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e203436383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.148.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:9a:ca:dd:59:ba:d1:fa:ae:48:3a:7f:71:dd:48:a7:e9:b5:
b1:cc:c0:18:27:82:51:69:d7:af:76:20:e6:fd:0f:ae:fc:72:
e3:ff:8c:71:f4:f7:d0:0c:29:79:0a:d1:3e:40:27:29:34:42:
6d:bb:0f:b0:bc:f6:2d:ca:d5:cb:f1:da:12:8c:60:40:b2:e0:
7e:da:38:13:06:1f:3a:5b:4b:06:ac:04:29:d5:74:32:73:03:
54:a5:ca:e2:c3:32:dc:0b:d8:94:bc:55:9b:1f:18:21:9c:8d:
d5:d0:5f:57:a3:79:35:ef:4a:9f:1b:ea:2c:fa:d1:ca:e8:f9:
72:95:13:f3:fb:8b:36:c0:82:c8:e3:e4:f7:ff:16:7d:e1:d7:
6a:c3:7b:4c:ce:48:ec:93:dc:86:f4:49:59:fb:5f:24:4e:4c:
10:38:ae:fe:af:88:04:ea:03:f9:35:b7:ee:36:76:98:d9:c2:
e8:ea:ff:95:f0:76:2e:1a:d7:6a:24:e1:1c:1b:ca:b7:86:28:
f6:68:a4:f4:ff:f3:96:fb:c5:01:78:f2:34:3e:18:d6:f5:6b:
35:1f:f7:fa:77:b4:11:e9:d3:32:e6:f8:ea:5d:a9:35:65:1f:
57:9e:b2:01:f7:4f:ba:31:83:95:21:a2:67:64:74:ce:22:2d:
8d:80:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:46:01 2025 by rpki-client