Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3234203d3e20313734.roa
File: 34352e39352e38322e302f32332d3234203d3e20313734.roa (raw, json)
Hash identifier: j5uBx1ZwzePSy8f9EGQJPGu8wElQLvhVLCemoigNpZM=
Subject key identifier: 4A:CF:92:4E:3A:57:5A:9B:82:81:EF:26:B4:97:98:AC:EA:B8:56:EC
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 5BE6CA8AFAC6F7F01BA8EAAA72967ACA1C764B8A
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3234203d3e20313734.roa
Signing time: Wed 05 Feb 2025 18:35:03 +0000
ROA not before: Wed 05 Feb 2025 18:30:03 +0000
ROA not after: Wed 04 Feb 2026 18:35:03 +0000
asID: 174
IP address blocks: 45.95.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e6:ca:8a:fa:c6:f7:f0:1b:a8:ea:aa:72:96:7a:ca:1c:76:4b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Feb 5 18:30:03 2025 GMT
Not After : Feb 4 18:35:03 2026 GMT
Subject: CN=4ACF924E3A575A9B8281EF26B49798ACEAB856EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:f3:bb:32:27:bc:88:29:b1:a3:82:64:84:
57:4b:c9:82:61:a1:27:2f:5c:53:1c:fe:6f:01:09:
68:a5:29:2b:c2:7c:59:19:47:76:70:8a:76:ca:97:
56:63:44:c9:4d:d7:6d:23:c3:a6:e8:9b:7b:5c:68:
47:5b:7d:c1:83:0f:29:e2:8c:b6:8f:a6:10:db:84:
98:7b:ff:02:48:0a:f7:8d:10:ea:05:3b:9a:cd:d6:
61:90:5f:f4:d2:74:05:cc:d6:1f:47:bc:b7:f3:8f:
58:f4:5d:d8:9c:07:ea:5a:aa:b4:b2:ee:c1:d7:53:
6f:7d:eb:9d:a1:6d:32:39:10:a1:7e:65:96:5e:8a:
e6:24:00:d6:c6:53:4c:87:3b:ac:e6:6d:db:b7:51:
9b:ae:bc:03:09:c8:39:1d:d3:d8:59:e0:f5:48:70:
34:36:71:f6:e3:e1:28:93:7e:7d:55:b8:66:bf:60:
c8:fe:2d:61:68:de:72:5e:55:3f:8b:0b:d9:75:b4:
a4:76:f3:b2:a5:c3:70:f5:2c:5d:0e:64:1e:6c:00:
99:40:f2:a5:94:6d:e6:a8:74:e8:83:03:47:20:d4:
36:3f:53:0d:28:11:58:dd:29:f6:3b:a5:7c:eb:dc:
28:9f:ed:50:5a:e0:e9:79:24:51:61:05:dd:ff:f1:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:92:4E:3A:57:5A:9B:82:81:EF:26:B4:97:98:AC:EA:B8:56:EC
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/34352e39352e38322e302f32332d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.82.0/23
Signature Algorithm: sha256WithRSAEncryption
54:40:cd:ab:32:0b:12:29:8a:64:39:14:f7:2c:df:37:d0:75:
72:bd:34:e5:e9:c8:b2:d1:e6:51:5e:f2:76:6a:10:94:7f:94:
81:79:2a:5d:bb:93:bd:49:b6:b2:97:4a:8c:ea:10:27:1e:f6:
0c:44:04:92:86:14:c2:3c:a5:f1:3f:e9:74:1b:c5:40:1b:53:
0e:74:47:fa:10:86:e2:01:0a:97:fb:32:5c:02:73:8e:5d:59:
2f:1c:c7:1f:32:07:13:ba:46:1c:e6:2d:7c:65:59:30:44:2f:
e0:3e:dc:46:e9:cc:4b:53:00:90:cf:4d:f1:4e:a1:01:cd:12:
9e:4a:c1:83:ea:4a:16:0d:5b:86:4a:b0:59:07:17:a7:5a:b4:
68:f0:ae:e0:75:39:9c:93:02:a2:c2:a2:8e:2b:43:c6:39:43:
5b:e8:d4:53:29:e4:d1:ec:ab:61:8a:85:c8:35:c3:ee:34:7f:
2b:a6:36:9c:db:2a:b5:b1:f5:e7:cc:43:16:58:1f:e5:14:dc:
79:2d:8e:90:53:26:f6:e1:39:36:a7:35:15:a9:fe:39:92:dd:
45:50:4d:0e:6f:47:1a:bb:cd:90:7e:db:ce:9d:73:53:de:f5:
5a:40:56:7d:1c:bf:b1:49:c7:bc:14:7a:47:81:90:97:ef:1e:
d8:e0:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:21 2025 by rpki-client