Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e20333939383631.roa
File: 34352e3134382e3134302e302f32342d3234203d3e20333939383631.roa (raw, json)
Hash identifier: q7KtpUybelNixCf525O7Dpv7K/3pz1m2+pTzUeGTV4I=
Subject key identifier: 32:FF:22:BC:A9:1C:50:2E:03:36:9E:39:B3:6D:CC:B2:52:8A:4A:35
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 7DA1DDF0C52ECDD4851A85143B137FD0681C098F
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e20333939383631.roa
Signing time: Tue 03 Dec 2024 03:37:40 +0000
ROA not before: Tue 03 Dec 2024 03:32:40 +0000
ROA not after: Tue 02 Dec 2025 03:37:40 +0000
asID: 399861
IP address blocks: 45.148.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 17:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a1:dd:f0:c5:2e:cd:d4:85:1a:85:14:3b:13:7f:d0:68:1c:09:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Dec 3 03:32:40 2024 GMT
Not After : Dec 2 03:37:40 2025 GMT
Subject: CN=32FF22BCA91C502E03369E39B36DCCB2528A4A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:b6:a9:57:72:43:94:62:4f:a9:44:2e:2b:
e9:3c:81:28:49:4d:42:bf:47:46:b6:ff:30:c8:72:
56:a8:89:ad:41:c9:36:46:07:13:47:f3:2f:e1:40:
a8:ba:f4:b9:2e:20:d6:fe:f2:2f:33:3a:80:52:64:
63:67:17:22:bd:48:69:f1:07:7f:77:bc:e2:76:01:
5d:fd:2d:83:15:e3:fe:5d:d5:c4:b1:87:db:d0:c8:
97:5d:cf:33:be:75:06:db:27:d4:ea:d5:19:c1:ac:
d1:1f:5c:de:dd:41:57:3e:b0:4f:e0:53:ac:18:12:
d8:f9:0b:c4:f9:c6:4d:55:a7:ff:ab:aa:67:c0:83:
f6:a4:e9:17:0e:c4:0c:ba:29:93:05:f0:f6:17:e2:
c3:e5:e2:50:13:67:81:9b:e3:bb:d2:bf:50:c2:af:
93:74:95:a3:9e:e1:c5:69:3d:1e:d8:fc:eb:78:f9:
3f:24:23:f1:db:ee:bd:e2:28:0a:25:8e:31:30:2a:
98:61:84:c2:10:34:3c:7c:c1:23:e0:32:53:3a:6d:
17:81:63:e9:21:7f:ca:a5:e4:89:ae:02:6a:e6:bb:
95:05:4b:c2:3d:94:56:b2:93:ef:e2:ea:d9:b8:71:
ce:85:37:b2:aa:f6:39:2b:23:84:17:2e:d0:5d:fe:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:22:BC:A9:1C:50:2E:03:36:9E:39:B3:6D:CC:B2:52:8A:4A:35
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134302e302f32342d3234203d3e20333939383631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1d:85:13:39:1c:c0:2e:4a:6d:a8:56:92:5e:46:dc:c0:3f:
4b:32:1f:e7:f7:48:45:80:74:c5:51:ed:8f:29:bd:00:16:a1:
de:65:7a:74:fe:88:9c:64:c1:e7:23:0b:42:3a:51:3d:3c:0a:
e8:c4:5f:f0:be:97:ce:c7:ac:2f:29:d9:b2:b2:cc:f7:10:48:
5f:74:3d:fa:65:8f:31:3b:d3:b4:d4:d8:43:d6:d2:a3:da:1f:
85:f9:c8:6d:2b:ba:98:16:d2:c4:66:1e:f6:f1:17:e0:4e:01:
ae:94:fc:62:f7:67:ba:e5:bc:10:54:9a:63:b6:3c:19:68:61:
d2:ba:d1:8f:96:4f:d2:d6:79:81:08:90:de:46:4e:cc:11:6c:
65:8d:0c:2b:28:db:9b:a5:83:c4:e6:9b:8c:ff:c1:70:52:60:
21:61:ac:2a:38:c1:08:37:54:f2:5e:7a:fe:3f:f9:0d:98:44:
68:98:2d:9c:1d:52:43:76:b2:54:b3:99:19:69:12:9a:c3:f9:
ef:bf:dc:59:04:00:be:79:43:a8:7c:86:2e:7b:f2:07:16:dd:
31:42:7e:17:d5:f1:e0:8d:ba:54:bd:07:69:c4:84:65:52:2e:
e8:60:f9:55:82:9e:d2:c2:bb:6e:dc:d0:e3:9b:eb:25:d7:89:
bd:fb:c4:f1
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfaHd8MUuzdSFGoUUOxN/0GgcCY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNDEyMDMwMzMyNDBaFw0yNTEyMDIwMzM3NDBaMDMxMTAvBgNV
BAMTKDMyRkYyMkJDQTkxQzUwMkUwMzM2OUUzOUIzNkRDQ0IyNTI4QTRBMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2bapV3JDlGJPqUQuK+k8gShJ
TUK/R0a2/zDIclaoia1ByTZGBxNH8y/hQKi69LkuINb+8i8zOoBSZGNnFyK9SGnx
B393vOJ2AV39LYMV4/5d1cSxh9vQyJddzzO+dQbbJ9Tq1RnBrNEfXN7dQVc+sE/g
U6wYEtj5C8T5xk1Vp/+rqmfAg/ak6RcOxAy6KZMF8PYX4sPl4lATZ4Gb47vSv1DC
r5N0laOe4cVpPR7Y/Ot4+T8kI/Hb7r3iKAoljjEwKphhhMIQNDx8wSPgMlM6bReB
Y+khf8ql5ImuAmrmu5UFS8I9lFayk+/i6tm4cc6FN7Kq9jkrI4QXLtBd/qZBAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUMv8ivKkcUC4DNp45s23MslKKSjUwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt
YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzEzNDM4MmUzMTM0
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzkzODM2MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtlIwwDQYJKoZIhvcNAQELBQADggEBAHAdhRM5HMAuSm2oVpJeRtzAP0syH+f3
SEWAdMVR7Y8pvQAWod5lenT+iJxkwecjC0I6UT08CujEX/C+l87HrC8p2bKyzPcQ
SF90PfpljzE707TU2EPW0qPaH4X5yG0rupgW0sRmHvbxF+BOAa6U/GL3Z7rlvBBU
mmO2PBloYdK60Y+WT9LWeYEIkN5GTswRbGWNDCso25ulg8Tmm4z/wXBSYCFhrCo4
wQg3VPJeev4/+Q2YRGiYLZwdUkN2slSzmRlpEprD+e+/3FkEAL55Q6h8hi578gcW
3TFCfhfV8eCNulS9B2nEhGVSLuhg+VWCntLCu27c0OOb6yXXib37xPE=
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:39:20 2025 by rpki-client