Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
File: 34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: g8Z4nkAYCro7GLHWiHXLL8CBVe/e8kRr3gyeuKBqjAw=
Subject key identifier: 3B:8A:A7:9C:04:77:D9:83:BC:10:22:A0:BC:DE:4D:DE:B6:E1:93:01
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 6CE026B7552716305D25F43F23C98450079C3E81
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
Signing time: Fri 04 Apr 2025 11:25:15 +0000
ROA not before: Fri 04 Apr 2025 11:20:15 +0000
ROA not after: Fri 03 Apr 2026 11:25:15 +0000
asID: 834
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e0:26:b7:55:27:16:30:5d:25:f4:3f:23:c9:84:50:07:9c:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 4 11:20:15 2025 GMT
Not After : Apr 3 11:25:15 2026 GMT
Subject: CN=3B8AA79C0477D983BC1022A0BCDE4DDEB6E19301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:ff:37:b5:7e:8e:de:43:16:64:c9:48:c7:
86:dd:3f:b9:e0:49:f8:84:21:70:37:51:85:81:40:
d8:bc:f0:e5:5f:e3:d7:cc:4d:d8:bc:9b:5e:d2:21:
92:b4:e2:00:16:5c:7e:6f:1f:05:00:fe:e1:36:a3:
eb:1a:18:86:06:32:bd:b8:d1:db:64:25:11:3c:04:
e7:3f:2d:2d:03:2d:c4:d8:6d:78:03:07:d4:5c:55:
80:7d:44:e5:8a:19:ca:66:f3:1b:1a:12:14:c0:c8:
41:16:f0:f7:5a:8c:e5:06:94:d3:f9:77:82:0e:07:
79:1e:b6:92:ff:03:ac:a8:82:34:cb:13:0f:85:e6:
67:aa:78:b7:32:a4:2e:7c:9e:64:e4:80:ac:97:ab:
40:72:42:a4:95:52:f1:a8:b3:52:85:e7:8b:2f:23:
75:c6:75:9b:d3:44:3a:f4:fc:23:d1:05:df:8a:74:
0c:ac:6c:44:56:95:ff:1b:40:03:7e:40:c6:13:fe:
c6:9d:0f:fc:0b:36:bb:4d:d2:bb:16:41:28:6f:1f:
86:7b:7a:25:a7:db:c7:0d:d9:9a:2f:54:e8:5f:b0:
99:15:d6:a9:ba:ed:27:27:8d:ee:fa:64:e9:ec:24:
45:47:45:dc:f9:5e:f4:61:f4:b6:0f:bc:fb:5f:18:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:A7:9C:04:77:D9:83:BC:10:22:A0:BC:DE:4D:DE:B6:E1:93:01
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:da:37:bc:43:b8:4d:42:a1:d9:3a:eb:e9:39:5b:29:53:3f:
e8:42:ff:6b:1a:50:72:dd:86:ef:62:4b:23:43:0a:5b:e6:97:
0f:a4:d6:61:22:3e:2f:00:a1:7c:0c:5e:e2:0e:ec:7b:cc:15:
a1:f4:c2:e3:3d:a8:5b:db:a4:8a:d9:5f:9b:a5:50:3b:f3:bc:
e8:1a:08:66:13:ec:35:f9:b9:80:9f:c2:de:d9:39:79:13:e1:
b2:45:6b:13:48:90:8d:5e:80:38:77:a9:94:de:1a:b5:21:13:
3d:18:72:ae:0b:02:71:ac:a9:b2:53:9b:2e:62:27:52:ac:50:
c7:89:c8:12:88:89:d2:03:8f:ca:70:07:42:5c:6f:da:7f:f8:
96:43:b2:ec:e8:8a:50:fd:d3:ff:41:54:5e:54:3c:2b:7f:13:
db:36:8c:26:9b:01:20:98:ab:9f:9d:89:79:63:45:62:a8:57:
aa:5c:0f:b4:6a:b6:c9:32:2d:a1:e4:38:f2:f5:40:e1:b8:b4:
45:8d:88:06:f2:a0:95:3e:8d:3f:f4:79:38:34:7c:91:1a:5d:
6d:f9:c4:d2:ac:9d:7f:0a:c3:28:e9:39:f2:78:0f:01:de:2d:
34:60:2a:4f:9f:7d:69:3c:70:db:3d:fd:0f:66:9a:c2:26:e2:
e9:99:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:01 2025 by rpki-client