Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa
File: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: ii72WRjo+pDoTtYybgLKaFsOG8JUV0CPdunTnf7/tAg=
Subject key identifier: 09:DB:D7:53:91:68:B3:09:E1:AB:97:B6:37:0E:58:68:66:26:2C:BA
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 34D0EAEACE6112B4CCD23CE98A30033ECE45D662
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa
Signing time: Fri 13 Dec 2024 10:53:48 +0000
ROA not before: Fri 13 Dec 2024 10:48:48 +0000
ROA not after: Fri 12 Dec 2025 10:53:48 +0000
asID: 9009
IP address blocks: 46.183.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d0:ea:ea:ce:61:12:b4:cc:d2:3c:e9:8a:30:03:3e:ce:45:d6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Dec 13 10:48:48 2024 GMT
Not After : Dec 12 10:53:48 2025 GMT
Subject: CN=09DBD7539168B309E1AB97B6370E586866262CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:10:9e:23:6f:40:2e:b0:12:57:00:a1:fc:
0a:47:a3:26:6f:78:4c:9d:12:22:63:e6:df:19:6f:
84:a1:b3:0b:19:20:3e:a0:89:0e:90:e0:78:fe:0e:
60:62:e9:e4:23:eb:cd:63:87:f5:b9:ba:8e:93:10:
46:15:c9:3d:9c:80:2d:ae:82:ee:5e:b5:7d:35:15:
26:c9:2f:25:d9:24:6d:c7:12:3d:6f:97:bd:ca:b7:
80:b2:61:19:af:09:ae:04:e9:c1:64:ae:99:99:ce:
72:27:ec:b6:69:a0:22:48:f4:56:73:cd:fb:4a:e6:
ea:16:85:aa:00:33:eb:db:ee:4e:54:c6:fd:b0:50:
f1:6a:af:11:74:d3:33:a4:72:75:a6:53:7a:4f:ec:
1c:f0:19:6a:95:c2:4a:4b:d3:f3:cc:8c:e1:75:c9:
41:5b:e8:0f:f0:49:1a:ef:48:00:55:56:07:90:05:
a4:24:b0:45:1a:a7:3c:56:f3:56:f7:1b:a3:74:64:
9b:07:fd:ec:71:ec:0c:34:d6:ab:a0:78:29:22:4c:
fc:f0:d9:3f:55:6f:a8:8a:38:16:8b:8a:07:9f:a9:
44:32:06:66:9d:53:2f:d2:8a:19:0e:c4:19:bb:c2:
38:c4:33:26:a6:27:00:eb:6a:7c:51:4e:0d:84:81:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DB:D7:53:91:68:B3:09:E1:AB:97:B6:37:0E:58:68:66:26:2C:BA
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.26.0/24
Signature Algorithm: sha256WithRSAEncryption
80:33:0e:db:39:e6:d9:11:e4:8a:2e:5d:8f:1e:8c:a1:a6:a2:
7a:a1:ef:a8:1d:39:dc:93:9d:e3:9b:30:3e:7e:8e:8f:37:ef:
52:bc:f2:e7:a9:23:4b:c6:e6:8f:a3:0a:f0:b1:34:2f:6d:bb:
1c:a2:f3:b8:d5:05:fb:8d:e4:4f:e7:c5:51:bc:28:3b:df:f5:
f0:12:9d:4a:38:35:28:2b:a7:a8:bb:ea:f7:6f:09:26:89:ae:
68:66:1e:12:48:e1:06:9b:55:aa:b8:35:59:ef:fb:08:e4:9f:
51:c5:4e:69:e9:6b:93:58:ff:ff:c6:50:d2:c3:e9:f0:3d:e1:
da:46:ed:f8:89:2c:5b:c9:80:f9:29:a6:cc:9b:fe:3d:1d:77:
ef:ea:6d:7e:9b:46:a2:4a:3a:69:7e:ca:2b:94:dd:da:19:09:
8b:b8:c1:82:74:b6:47:95:d1:48:44:db:ac:ef:94:3c:1c:21:
ee:bc:ba:32:57:60:80:0b:cb:9c:25:2b:93:fd:f3:f6:80:7f:
41:5a:96:52:8b:d1:32:a5:32:9b:68:1a:6c:2a:c6:c1:8a:dc:
a2:f8:b1:93:cb:a2:ea:d6:e6:5b:67:1e:0f:84:0f:21:69:73:
bd:d3:76:3e:79:dd:0c:36:72:99:b3:ab:10:4f:84:a4:f7:91:
51:93:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:52 2025 by rpki-client