Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203631333137.roa
File: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 1rledH/nQm8w0NijGoGbm37JgiwE6dNG9uQzsEzjcaQ=
Subject key identifier: 2B:BE:A2:C9:28:71:FF:6E:4B:C6:C5:0D:AA:EE:B0:72:16:7D:BE:F6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 528AA13A8C071D34457BD71B87C1CE46F358A627
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203631333137.roa
Signing time: Thu 05 Sep 2024 11:05:20 +0000
ROA not before: Thu 05 Sep 2024 11:00:20 +0000
ROA not after: Thu 04 Sep 2025 11:05:20 +0000
asID: 61317
IP address blocks: 45.95.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8a:a1:3a:8c:07:1d:34:45:7b:d7:1b:87:c1:ce:46:f3:58:a6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Sep 5 11:00:20 2024 GMT
Not After : Sep 4 11:05:20 2025 GMT
Subject: CN=2BBEA2C92871FF6E4BC6C50DAAEEB072167DBEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:d6:32:29:1d:03:64:56:7d:53:90:ce:8c:
9a:27:e3:44:31:4e:7b:74:28:b4:5c:0d:d2:af:3d:
53:60:0b:81:7e:18:ba:1f:a9:52:ea:e9:3c:a6:71:
0f:1a:58:8e:14:e9:c9:bb:bf:58:0f:6c:89:38:93:
6f:8a:e2:68:d8:29:68:ca:51:d1:99:9d:a0:25:45:
7a:0e:a6:5a:c6:c2:15:d8:18:91:05:0c:40:c7:68:
1c:56:df:d9:29:85:f3:a5:08:26:18:96:70:9a:6f:
9a:23:01:6c:03:17:dd:df:ca:69:a4:2a:46:f8:2f:
4b:d2:5e:2c:2b:ac:2d:8d:01:9e:56:52:5e:1a:84:
79:c3:a6:e3:16:c4:be:6d:95:a0:7e:bd:5a:55:c9:
58:0e:d7:c9:54:aa:b6:03:47:46:11:bb:b6:b0:7b:
02:b7:4e:51:d8:5a:29:93:99:4e:3c:ae:8e:ec:6b:
7c:10:c8:81:8d:dc:0b:65:22:87:dd:e2:f1:b1:99:
4f:0a:75:a6:6f:91:28:6b:94:7f:70:29:fa:02:73:
fe:f1:33:1e:ee:43:db:85:cb:3c:a1:61:c4:30:52:
8d:a1:b3:4a:15:bc:bf:12:03:dc:00:ef:fc:49:7b:
01:d5:fa:33:e0:c9:39:5c:cd:40:10:ae:ae:24:4f:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:A2:C9:28:71:FF:6E:4B:C6:C5:0D:AA:EE:B0:72:16:7D:BE:F6
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:6d:ed:87:1d:06:9a:39:b6:ea:70:6e:da:fb:ab:94:99:c7:
39:21:58:2b:64:ed:3e:2f:a2:aa:5d:c9:e3:2f:6c:4e:2d:d8:
2d:f4:af:55:90:90:f6:9f:38:c7:22:11:21:22:74:84:1a:e2:
63:c1:8b:53:c5:fd:e7:c9:f6:15:3d:d5:77:2a:1f:7a:c7:94:
1e:a4:9a:69:39:4d:7c:e8:0f:af:28:66:69:76:83:47:b9:2b:
c9:22:16:8f:22:93:81:6d:ad:91:92:4d:81:1b:92:d5:7e:fb:
2b:02:7b:57:d4:b1:2c:c4:93:e9:3a:18:83:24:a6:eb:0e:c7:
4a:0e:6b:ca:ce:e1:e6:3c:8d:b8:72:1f:cb:95:0f:07:e3:30:
12:fd:ec:0b:5b:06:ea:ae:db:0e:23:c6:e1:2d:51:a7:43:51:
4e:02:cd:52:ef:61:e0:8b:9a:4c:c0:1a:af:c5:ed:66:05:aa:
06:e3:0d:0c:53:ce:ff:ae:be:1b:d3:a4:3b:bc:ce:4f:1f:31:
20:1a:3e:63:ed:45:bc:c6:de:e9:9e:01:4a:17:55:41:94:09:
82:74:61:83:3a:16:28:89:6d:7d:d3:00:e1:50:c8:c1:95:d8:
af:ed:66:78:7f:18:c3:b3:08:e4:32:bb:42:aa:aa:27:c9:ee:
a0:cf:31:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:08:14 2025 by rpki-client