Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38332e302f32342d3234203d3e203438353932.roa
File: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=
Subject key identifier: 1E:32:4B:04:F1:42:F4:93:AA:F6:A8:7F:B8:62:5C:F6:F2:D8:5D:27
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 17360FE9E9720A7C6C2FE05DB49B6C43E00BEA82
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38332e302f32342d3234203d3e203438353932.roa
Signing time: Tue 25 Mar 2025 06:20:04 +0000
ROA not before: Tue 25 Mar 2025 06:15:04 +0000
ROA not after: Tue 24 Mar 2026 06:20:04 +0000
asID: 48592
IP address blocks: 77.81.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:36:0f:e9:e9:72:0a:7c:6c:2f:e0:5d:b4:9b:6c:43:e0:0b:ea:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:15:04 2025 GMT
Not After : Mar 24 06:20:04 2026 GMT
Subject: CN=1E324B04F142F493AAF6A87FB8625CF6F2D85D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:aa:65:5e:49:f4:a6:3b:88:56:31:e5:e1:
15:a0:11:e4:6b:61:92:16:71:35:d2:ad:05:39:23:
fe:8c:e3:4e:32:71:38:05:6c:80:66:76:76:fd:0e:
9e:d2:06:c3:19:e8:4b:a4:e2:33:23:dc:76:be:d2:
16:3c:62:ba:22:e7:fd:46:e5:58:2b:a2:5e:b8:2f:
9e:02:0e:c3:df:70:e8:54:b5:95:96:7b:36:25:be:
52:2a:73:06:70:3c:e9:85:c3:f6:0a:4a:4a:b2:07:
1d:76:fc:f0:e9:aa:67:58:e1:94:e1:19:4c:46:00:
98:cc:c0:81:90:cf:70:e2:c0:6f:39:b0:b5:a3:90:
2b:37:37:ef:25:90:83:cc:b3:fb:1a:b4:5e:0c:00:
3c:ea:f9:57:43:9b:2b:88:4e:14:a5:84:9c:10:01:
a0:02:45:77:c3:40:e2:41:06:55:2a:17:0d:d9:c5:
52:6f:b7:a3:78:37:54:9e:c1:a6:32:b1:93:ff:25:
36:d5:a7:30:09:7c:72:38:a8:a0:21:75:f6:fb:8a:
07:ac:88:04:79:cf:64:de:0f:a5:f7:c7:68:b4:ce:
18:3e:07:05:7e:b2:c9:60:a9:6c:92:c8:20:d4:8c:
45:b3:ff:24:09:1d:05:60:95:f9:c8:5f:f2:06:63:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:4B:04:F1:42:F4:93:AA:F6:A8:7F:B8:62:5C:F6:F2:D8:5D:27
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38332e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a9:f8:e3:48:e1:de:b2:8b:ea:d5:c6:34:56:62:bd:5c:b7:
ab:a6:82:03:8e:af:94:ef:10:a9:fd:8a:4d:17:d1:a4:e7:04:
48:f1:66:8a:1d:60:70:79:14:1f:b8:b8:d0:da:a5:01:f2:16:
50:e9:1b:3a:1f:48:01:e5:78:0a:c1:f5:d0:82:dc:d0:4a:35:
33:2d:03:9b:1a:8c:06:94:b1:9f:b9:6c:e8:7e:2c:e4:da:2c:
ef:da:36:af:c2:c5:ba:84:ad:9d:02:ee:f7:51:fc:3d:70:fa:
f9:81:64:4e:12:e5:7d:25:68:6a:10:73:7a:c6:c4:93:0a:f5:
fb:02:7e:98:b4:60:df:66:e1:d6:21:b7:79:95:4f:97:ea:6e:
34:7d:ed:dd:4a:fc:d6:18:df:b0:f5:fe:ed:fd:f4:bf:01:4e:
32:84:5b:0d:c2:e4:33:ce:56:66:49:9f:32:b8:ed:e9:c9:7a:
ae:f3:7a:0d:c1:c0:85:5c:ed:5a:2d:a9:b9:50:bb:97:07:2a:
d5:cd:69:06:25:d6:74:dc:20:28:c1:f4:b4:cb:96:4b:47:7a:
54:e2:76:d3:67:39:df:fb:2b:7a:e8:2e:37:8d:a8:42:2d:a4:
02:65:5b:36:b1:93:80:fa:1d:0c:d2:16:6e:16:43:df:24:08:
3a:b0:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:46 2025 by rpki-client