Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
File: AS29262.roa (raw, json)
Hash identifier: hTeidQTFlbY/ULdSkXiyke5TywaxEeJSprK8tEi98TA=
Subject key identifier: 88:0B:94:C8:AC:C0:A8:9F:B3:2D:87:89:CC:1B:75:03:11:7C:9B:A4
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 0821AD00AA4B83FE8B5095FD53E5C7335307D612
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
Signing time: Mon 20 Jan 2025 14:52:55 +0000
ROA not before: Mon 20 Jan 2025 14:47:55 +0000
ROA not after: Mon 19 Jan 2026 14:52:55 +0000
asID: 29262
IP address blocks: 77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
194.56.186.0/23 maxlen: 23
194.169.92.0/23 maxlen: 23
194.169.92.0/24 maxlen: 24
194.169.93.0/24 maxlen: 24
194.169.94.0/23 maxlen: 23
194.169.94.0/24 maxlen: 24
194.169.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:21:ad:00:aa:4b:83:fe:8b:50:95:fd:53:e5:c7:33:53:07:d6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 20 14:47:55 2025 GMT
Not After : Jan 19 14:52:55 2026 GMT
Subject: CN=880B94C8ACC0A89FB32D8789CC1B7503117C9BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:38:23:f1:7f:ee:a4:d5:7d:53:3b:88:e7:
74:41:a3:5c:9f:d1:2b:49:37:6b:22:ca:b9:33:7b:
54:f0:29:fc:87:de:26:53:63:54:6f:c2:ec:9c:33:
ff:f4:d7:cf:79:33:69:5b:95:a2:e1:72:5c:aa:d1:
82:8d:e6:b1:0f:db:ca:77:eb:dc:7c:2c:d9:86:10:
88:e1:de:82:1e:c2:f7:f8:7f:49:2e:cd:39:c4:0b:
a5:0a:d3:56:f1:99:fd:65:3b:d7:27:93:46:dd:77:
d2:18:05:2b:2e:9a:de:7b:89:e4:16:fc:9d:20:7e:
b0:a2:e6:2c:06:8c:37:f3:c9:13:f9:86:69:0c:59:
ee:e1:42:3a:9b:98:46:13:87:77:1f:5d:a1:3b:20:
fa:32:2f:5a:cb:92:46:f7:c6:07:c8:8a:f7:f7:35:
57:a5:4d:f7:3e:7b:4e:e1:06:7b:03:4f:43:87:9a:
62:1c:15:1d:09:a3:f3:c9:14:48:59:17:e8:16:91:
9d:04:64:fa:43:1d:da:50:9b:87:9f:0b:49:7e:13:
86:b4:93:bd:fc:fa:8d:f6:c9:e0:56:2f:a8:6a:cf:
8e:34:62:eb:e7:c7:e1:90:ee:6f:6e:1b:4c:d0:ad:
8e:5f:d9:93:1b:0c:ab:9d:ee:eb:0a:c0:53:5f:2a:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0B:94:C8:AC:C0:A8:9F:B3:2D:87:89:CC:1B:75:03:11:7C:9B:A4
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS29262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.72.0/22
185.254.55.0/24
194.56.186.0/23
194.169.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:05:3b:e3:be:35:e1:ba:3f:d9:29:a7:d2:a3:f9:63:78:a7:
73:f4:be:cd:35:15:ac:2e:f3:84:f3:60:48:98:ba:ad:0c:25:
d9:88:7d:a0:3e:57:f0:3d:af:20:0b:3a:87:41:be:ae:21:cd:
d6:f5:af:66:54:c4:f7:b6:93:42:3c:23:8e:51:ba:5c:5a:b7:
e7:0f:c9:0c:ed:75:51:29:57:96:34:a8:7e:df:48:65:50:d1:
8b:5f:2e:1f:77:ca:16:63:09:64:aa:e0:0d:01:7c:f3:27:e4:
ea:f9:98:c9:7c:94:75:dd:65:84:87:41:01:5b:5a:ef:b8:c6:
16:69:2d:7f:b0:fd:e0:52:a6:2f:19:da:5e:7a:6e:17:11:a3:
13:f5:9b:e1:72:2b:85:51:b9:dd:7e:d6:fb:af:52:e3:c9:56:
2d:af:06:d6:55:4d:84:7a:35:60:31:f6:07:93:31:1b:b5:a4:
a1:3c:31:21:a6:9f:bd:a6:13:02:6c:33:61:21:42:c8:65:c7:
78:4d:31:6d:0e:92:2c:e1:a7:26:e5:0a:d3:52:91:10:e2:b2:
67:a5:c2:c1:a8:fe:9e:4a:80:c8:8b:30:c5:95:53:ce:17:1c:
5c:c4:be:77:7b:64:d4:66:cc:81:86:13:57:11:ec:f2:c4:df:
e8:fe:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:42 2025 by rpki-client