Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e203138363331.roa
File: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (raw, json)
Hash identifier: C/6HJC1mRnTjt5un9I/ly/ex3eg1Ngny62cwbLuyXag=
Subject key identifier: 0F:A9:F1:8F:92:5F:B9:1C:D6:D3:E3:AE:2D:08:9C:97:BC:06:B6:40
Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Certificate serial: 1C4015038DA012F781542A8AA93A5A1B48A29D60
Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e203138363331.roa
Signing time: Fri 31 Jan 2025 17:38:56 +0000
ROA not before: Fri 31 Jan 2025 17:33:56 +0000
ROA not after: Fri 30 Jan 2026 17:38:56 +0000
asID: 18631
IP address blocks: 45.146.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:40:15:03:8d:a0:12:f7:81:54:2a:8a:a9:3a:5a:1b:48:a2:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Validity
Not Before: Jan 31 17:33:56 2025 GMT
Not After : Jan 30 17:38:56 2026 GMT
Subject: CN=0FA9F18F925FB91CD6D3E3AE2D089C97BC06B640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:e4:27:bb:d8:12:a4:b6:0f:03:51:c4:21:
7d:9c:36:63:f4:0f:54:ae:8d:c1:1c:19:1a:9c:70:
3a:23:90:d3:9a:3f:9c:b9:e7:fc:4d:23:4a:09:ee:
37:88:9c:5a:68:6f:df:94:c4:a1:aa:60:9a:a4:50:
e9:31:79:12:25:51:34:d1:6c:11:0c:76:1c:ea:1e:
3e:21:7a:72:97:6a:2d:a8:97:05:17:9b:aa:57:ac:
e8:a7:21:89:49:5e:5f:ac:d6:ea:de:9f:bb:69:71:
63:8b:09:75:83:a4:f4:c3:5c:76:28:ea:7f:a1:bf:
58:97:db:a5:75:08:0f:a8:59:d1:5a:2a:4d:f4:4d:
c2:db:0e:98:bc:87:b3:6c:ea:66:d7:7f:f4:92:d0:
f5:09:be:d9:6a:2d:dc:04:7a:27:e1:07:9e:ef:00:
85:c2:fe:84:bd:83:8d:4d:8e:4d:f0:3e:bf:5d:a4:
dd:81:ae:11:64:31:d6:91:54:a8:13:2a:21:c0:98:
03:9a:6a:a1:96:0c:37:50:13:60:fb:43:0d:87:69:
18:dc:5c:da:84:0b:5c:13:05:cc:37:2b:a3:7d:dd:
19:d4:fa:31:c7:d6:de:a7:aa:42:73:b6:d0:a3:50:
0d:57:9c:75:1e:a6:69:93:12:8b:3f:35:48:35:9d:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:F1:8F:92:5F:B9:1C:D6:D3:E3:AE:2D:08:9C:97:BC:06:B6:40
X509v3 Authority Key Identifier:
keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e203138363331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f7:a5:3d:28:25:c3:89:f9:90:df:f8:b9:cf:9e:6a:3f:2e:
bb:67:4b:0c:fe:19:90:32:bd:95:af:f2:0f:3a:f6:7e:eb:79:
da:98:31:c6:18:93:99:09:65:e0:23:4a:79:dc:df:e3:68:3c:
74:eb:2e:c2:2d:bf:51:56:aa:dc:bf:9a:4d:3a:32:b9:1c:9a:
1e:f0:50:56:94:0d:06:6a:eb:57:70:37:1f:72:7a:30:f4:f6:
04:31:62:cb:9b:e1:e6:c0:94:5d:2e:45:72:96:e3:f0:eb:7a:
7d:aa:f2:00:3a:cd:7a:b5:32:b6:cc:eb:3f:a6:88:6a:8d:ea:
1b:c6:e3:1a:5c:c7:05:66:d8:69:4e:74:c1:53:d1:83:b9:8f:
79:3b:de:f4:47:bd:73:9b:55:19:9a:1c:37:ed:2e:70:3d:bd:
1b:68:1a:ba:8b:bd:fb:b8:3c:b8:3a:24:53:a2:7a:8d:fe:a1:
9d:d6:ea:57:46:7d:d5:f1:f8:ee:96:02:ec:e1:c6:45:aa:3b:
7e:8e:cc:42:d8:d8:1f:86:66:21:79:19:90:6e:b4:9d:bf:3a:
4b:e4:89:6c:1c:b7:a7:ee:9a:da:53:4a:87:dc:ed:85:5d:c8:
d7:85:6d:d6:df:96:15:ba:ba:c7:27:48:63:bc:1d:6e:fe:bd:
1c:f2:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:52 2025 by rpki-client