Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32332e302f32342d3234203d3e203433383437.roa
File: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (raw, json)
Hash identifier: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=
Subject key identifier: E1:D8:F9:F5:9A:E8:2F:8B:76:FB:4E:AD:BC:A7:4A:A5:BE:FF:A3:5B
Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial: 03A49069E3E07689026D7EC01A3A495B085D2C0E
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32332e302f32342d3234203d3e203433383437.roa
Signing time: Wed 29 Jan 2025 13:36:32 +0000
ROA not before: Wed 29 Jan 2025 13:31:32 +0000
ROA not after: Wed 28 Jan 2026 13:36:32 +0000
asID: 43847
IP address blocks: 46.182.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 18:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a4:90:69:e3:e0:76:89:02:6d:7e:c0:1a:3a:49:5b:08:5d:2c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
Validity
Not Before: Jan 29 13:31:32 2025 GMT
Not After : Jan 28 13:36:32 2026 GMT
Subject: CN=E1D8F9F59AE82F8B76FB4EADBCA74AA5BEFFA35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:4b:b6:e2:bf:cd:fe:81:fc:85:19:f9:00:
a8:53:16:c1:88:9b:d1:29:72:88:a2:4f:d8:db:50:
db:6c:70:b0:45:59:5d:ad:0f:37:d0:75:35:43:93:
f6:8f:b8:d8:eb:5e:85:8d:6d:a7:f6:3d:1f:2a:83:
38:db:84:3a:a2:f9:5d:2d:82:0b:75:7e:e9:16:15:
0b:48:30:f6:02:55:00:ea:4d:96:c2:48:26:1f:75:
15:5a:f7:b6:f9:28:e0:5c:29:a2:b1:e3:58:ed:27:
b0:fb:3b:99:4c:57:95:76:af:e5:26:21:2c:c9:a7:
64:ab:e1:b1:d2:16:94:19:42:0f:45:f2:f5:de:e8:
5d:37:25:1d:1a:14:d4:21:44:ff:89:43:2f:04:0e:
1c:5b:38:d0:ef:3d:78:ac:52:ea:aa:d7:83:89:19:
f4:44:cf:87:1e:2b:b3:f5:53:a7:0c:eb:da:af:c0:
3e:b5:eb:58:10:b3:ea:06:52:10:58:27:21:d0:62:
8b:8b:b0:0d:c3:b9:db:f9:33:b5:6a:0f:d5:e8:4e:
45:89:97:30:67:f6:82:7c:63:ca:f0:70:14:6c:e2:
90:71:84:eb:ba:43:62:e0:df:dc:91:2d:38:4a:e2:
8e:24:c8:4e:91:50:a1:bd:d7:51:01:c4:79:7d:e0:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D8:F9:F5:9A:E8:2F:8B:76:FB:4E:AD:BC:A7:4A:A5:BE:FF:A3:5B
X509v3 Authority Key Identifier:
keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32332e302f32342d3234203d3e203433383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.23.0/24
Signature Algorithm: sha256WithRSAEncryption
16:55:ac:ad:27:cc:69:d7:e8:78:1a:e7:0c:d1:1d:2b:fe:d4:
1d:f5:1b:d7:3f:8c:7a:73:83:5d:24:eb:99:3f:a4:ac:ea:01:
40:7c:c0:75:2f:84:6d:97:de:4c:29:e4:53:0e:fc:0d:20:8a:
09:11:a8:e4:50:cb:a9:3c:ff:d4:8c:e7:11:cc:dd:97:5b:4b:
e4:f1:c0:05:93:31:66:64:e4:03:bc:41:40:a3:9e:80:e5:97:
97:de:3f:c7:01:cb:9e:6c:3f:d4:9a:4c:b8:c5:a1:82:98:51:
8c:8f:79:dc:69:a0:5a:91:95:1e:33:69:9e:b0:06:3b:0f:3a:
f4:5e:54:f0:d1:fa:fe:5d:3a:57:b1:53:57:6e:29:86:ca:ae:
2d:4e:fb:45:cf:31:fe:14:da:dc:17:c8:da:ad:81:99:a2:8b:
4f:76:31:38:9e:d0:3a:e9:f8:15:3a:4b:38:47:7f:55:b9:b2:
06:54:7c:05:b7:69:0a:d0:6a:e0:42:70:6b:dc:06:3b:10:e0:
c1:14:99:73:19:28:46:7f:4f:d3:97:2c:fc:b7:d7:5e:46:57:
35:fe:e5:64:0a:11:d7:60:38:08:3e:64:0b:66:65:63:38:04:
88:4a:53:98:ec:99:c3:39:3b:d7:38:d5:6c:d8:45:ae:b8:12:
6e:73:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:52 2025 by rpki-client