Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37382e302f32342d3234203d3e203438353932.roa
File: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=
Subject key identifier: 0F:D4:D2:F8:8C:F3:51:22:D2:97:62:B2:75:16:41:8F:9E:83:DD:E0
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 01453BA128E98D4868652C6F9603BCB0D115D653
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37382e302f32342d3234203d3e203438353932.roa
Signing time: Tue 25 Mar 2025 06:20:00 +0000
ROA not before: Tue 25 Mar 2025 06:15:00 +0000
ROA not after: Tue 24 Mar 2026 06:20:00 +0000
asID: 48592
IP address blocks: 77.81.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:45:3b:a1:28:e9:8d:48:68:65:2c:6f:96:03:bc:b0:d1:15:d6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:15:00 2025 GMT
Not After : Mar 24 06:20:00 2026 GMT
Subject: CN=0FD4D2F88CF35122D29762B27516418F9E83DDE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:55:a2:09:f1:30:c9:5a:8f:22:e7:c8:73:fb:
90:6a:eb:42:9e:13:c5:bc:6a:0b:01:b8:9d:a7:b2:
26:0a:d2:50:bb:83:23:38:1e:b4:78:21:d2:8a:5d:
e5:ae:64:37:8a:2d:50:99:c5:29:36:46:19:1f:73:
90:ff:76:45:99:58:f8:f6:ec:40:3f:64:8f:c9:c6:
c4:59:cd:e6:69:7d:25:c1:4f:33:99:c4:3a:b4:ec:
a9:43:36:79:27:3f:ec:30:af:e0:61:31:7d:7d:db:
ea:f0:b5:89:25:88:a9:2d:bd:65:99:55:9a:c1:df:
e2:ce:79:85:81:8a:a7:c5:75:95:17:1b:c0:7d:a8:
64:e4:a4:75:f2:9e:8a:4f:96:27:48:d3:0d:0a:bd:
b1:9c:a8:ee:22:60:a9:53:75:2c:83:36:d2:b7:f5:
d4:8a:9c:54:dc:c1:4d:a6:4a:ff:54:60:20:5c:a1:
56:67:60:f9:f3:2f:60:f4:e9:6a:25:0a:af:af:ae:
66:44:54:70:6e:ca:de:da:a5:78:63:27:92:5b:55:
32:f0:33:4a:2b:c1:ed:58:38:7c:95:a9:3e:7a:39:
32:f5:5b:8f:9b:05:2a:c8:ed:e8:46:4a:08:e7:a3:
e2:7f:fe:13:97:73:45:c0:7a:7f:ec:be:e5:5d:12:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D4:D2:F8:8C:F3:51:22:D2:97:62:B2:75:16:41:8F:9E:83:DD:E0
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37382e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.78.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ec:18:63:9e:9f:ba:79:8d:54:ea:4e:8a:22:4e:39:36:07:
e4:39:d6:7d:79:58:35:18:88:84:fb:4e:c7:d7:d5:c7:e1:17:
f3:22:04:d4:c9:6b:a2:b4:c2:3f:93:a1:c9:1c:22:17:20:23:
5b:33:68:a7:e3:8f:4d:36:86:02:07:d9:37:2b:a6:f5:a4:f1:
88:0a:b3:40:b2:28:e2:29:f7:45:a1:ec:54:11:1f:02:7c:35:
8b:88:49:f6:cb:c5:f1:a5:85:c5:53:22:9a:25:ff:f5:50:47:
c8:d3:28:c2:8c:c7:8b:0c:c1:09:68:e6:fe:a2:b5:00:c3:a4:
02:19:60:63:a0:82:5d:90:32:a4:ab:af:e5:c0:d3:cf:f8:f1:
0e:e5:3a:9f:ef:60:33:70:f1:7a:fa:35:c6:75:6c:a3:e3:34:
c5:e0:1a:e5:52:d2:20:62:6c:ee:42:49:3b:d5:6a:bc:a0:60:
99:bd:fd:8f:6b:8f:ef:90:27:48:40:66:1d:9e:a3:99:6d:8a:
bf:90:e1:8c:7b:e0:69:5a:70:26:bf:1d:7d:e5:49:d7:42:0e:
f8:75:67:b4:fa:2e:0c:c6:f3:68:32:d3:57:0b:1e:f6:3a:12:
d6:b0:64:bf:f4:ba:e6:c9:e3:8f:d6:b1:47:b4:92:d6:16:c6:
78:2f:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:57 2025 by rpki-client