Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e2039333034.roa
File: 34352e3134302e3138372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: LR7FxToqwQmtn2cQhHoIlMpP3481hzsFE/Wv+8seL/k=
Subject key identifier: 19:9E:BA:E6:4A:F4:C8:F8:84:67:00:45:D2:74:75:40:82:74:1F:9C
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 789F932AFD76015C4F9C76138462C82984AA41CD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e2039333034.roa
Signing time: Thu 03 Jul 2025 20:20:27 +0000
ROA not before: Thu 03 Jul 2025 20:15:27 +0000
ROA not after: Thu 02 Jul 2026 20:20:27 +0000
asID: 9304
IP address blocks: 45.140.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 16:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9f:93:2a:fd:76:01:5c:4f:9c:76:13:84:62:c8:29:84:aa:41:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jul 3 20:15:27 2025 GMT
Not After : Jul 2 20:20:27 2026 GMT
Subject: CN=199EBAE64AF4C8F884670045D274754082741F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:59:2f:d7:cf:f3:b8:7f:71:c9:7d:90:44:
4a:d7:b4:23:8d:97:de:ff:d4:26:9c:05:68:31:2f:
52:8d:88:44:c9:1e:e2:4a:88:6e:c6:38:c1:4d:63:
8b:b2:15:e3:d9:5c:5a:bb:5d:e2:09:af:35:70:9e:
f6:3a:ca:93:ea:ce:2d:c4:c9:f7:1c:57:2e:61:50:
2c:60:c8:a0:f6:b1:5d:f8:88:50:cc:b1:ff:ff:f0:
48:2e:e8:de:90:e8:31:cf:f9:25:8f:4a:fd:a4:77:
f8:5e:18:75:fc:68:1c:ed:61:fd:94:cd:f2:79:03:
0a:1f:d2:79:81:5a:76:ca:68:c5:da:84:fb:d5:72:
03:e8:16:2b:ce:6b:5d:64:4d:7d:dd:e2:a8:79:77:
65:75:80:d0:78:9f:71:8f:51:60:b3:7b:a2:0a:05:
c6:91:9d:2f:31:b5:64:3f:b2:f5:ce:8d:a5:14:0f:
f9:c5:49:35:d3:33:3a:88:d8:3b:32:83:eb:63:88:
a2:a9:89:ec:93:a6:8f:66:54:e8:bf:12:2b:45:b4:
80:26:a1:d2:b5:76:a7:1c:46:cc:0a:db:7a:98:cb:
5a:f6:d1:76:10:72:7f:a5:7f:90:87:6e:27:a9:5d:
87:c2:36:b4:86:38:6e:fb:52:71:c5:15:6a:62:eb:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9E:BA:E6:4A:F4:C8:F8:84:67:00:45:D2:74:75:40:82:74:1F:9C
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138372e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
95:80:b7:94:05:ad:9a:41:9f:bd:99:e2:ef:73:42:2f:2f:42:
2c:79:79:f1:61:d7:6e:b9:be:3b:95:b7:77:f6:87:e1:b8:db:
97:2d:87:df:73:69:ea:79:2a:66:c7:aa:25:24:c4:dd:ef:e4:
39:42:68:a7:df:8a:f0:9b:84:61:3c:8a:fb:66:c9:5b:87:c5:
e9:a7:c1:4a:ec:76:fa:ce:17:cb:82:19:ed:dc:9e:36:56:e2:
b1:28:3e:98:b8:7d:f6:31:eb:ea:7c:f0:b3:cc:ce:c3:bc:a9:
51:d5:7f:16:a0:68:4f:d5:c3:86:7b:63:8f:85:aa:38:2e:b3:
c9:47:9b:4e:28:b7:f0:94:31:99:bb:b8:9b:0c:4b:20:af:39:
d7:74:ef:7d:9a:f6:56:bb:a8:63:48:da:60:d8:d1:a1:90:1c:
50:2b:3f:20:05:d3:4c:1b:9f:57:82:15:46:25:3f:a0:8c:63:
41:49:7e:bf:8a:9a:96:34:fd:5a:b2:fc:a9:bc:17:b6:d6:2d:
74:2b:33:bc:5c:9f:df:01:25:0a:88:f3:5d:9f:08:97:30:39:
93:91:68:07:da:c6:ea:e5:21:76:e1:5f:8a:46:35:07:6f:a2:
0e:94:28:c8:f7:bc:20:d9:2b:8b:27:a0:36:00:a3:ec:4f:bd:
44:0e:f8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:04:59 2025 by rpki-client