Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39372e302f32342d3234203d3e203633303233.roa
File: 34352e3133372e39372e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: BmJHAeO1hsFUSdwu4rS88zSF6iPkdYng2m1mQ6jG1xQ=
Subject key identifier: 97:A4:E6:98:CF:A1:F2:2B:46:75:C4:E9:58:07:E3:6D:D6:EC:62:65
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 09B5A52A3B9A5E06278F97ED0F185B12177A43E3
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39372e302f32342d3234203d3e203633303233.roa
Signing time: Wed 22 Jan 2025 19:53:52 +0000
ROA not before: Wed 22 Jan 2025 19:48:52 +0000
ROA not after: Wed 21 Jan 2026 19:53:52 +0000
asID: 63023
IP address blocks: 45.137.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 03:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b5:a5:2a:3b:9a:5e:06:27:8f:97:ed:0f:18:5b:12:17:7a:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 22 19:48:52 2025 GMT
Not After : Jan 21 19:53:52 2026 GMT
Subject: CN=97A4E698CFA1F22B4675C4E95807E36DD6EC6265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0f:66:2d:02:97:e3:9e:fb:ff:68:bd:7c:5c:
f6:f9:91:d3:f7:3b:4e:7d:42:a3:66:34:2f:8d:6b:
91:03:31:fb:14:1a:9d:8c:f4:c3:dc:3b:01:a4:a8:
f9:eb:d7:2a:4a:b5:bf:e5:ac:68:65:99:11:a8:f3:
22:d5:05:03:0f:a1:f6:b5:cf:8d:48:ce:c3:bc:f3:
cc:1c:ee:ac:2d:4a:8a:18:5e:2f:6e:2b:17:de:b2:
dd:5f:18:cb:bc:39:b6:26:1d:8b:0c:27:6d:4d:e9:
f2:57:28:2f:fd:ca:04:2d:3f:a3:47:48:58:7e:c4:
38:c7:2a:dc:6f:01:aa:a7:7f:9b:c0:68:62:34:13:
78:b1:0f:cc:58:aa:8a:36:d1:c3:54:ce:a7:4d:06:
31:7a:89:f9:8e:de:f0:a8:47:71:9b:fd:94:1c:ee:
a5:3c:ba:05:87:49:e5:d1:ad:92:42:60:ab:03:d8:
24:d0:b4:fe:4c:72:4c:4d:ac:98:83:0c:3c:b5:cb:
85:e6:1a:51:d9:47:88:87:44:4f:b8:46:ce:d9:a1:
b1:76:d0:14:86:9b:80:24:9e:34:c7:c3:3c:53:45:
cd:0f:3a:93:64:d2:61:a8:5b:8b:aa:ec:7c:f9:97:
23:35:58:a1:46:2c:1d:15:c5:de:4c:b2:18:41:fc:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:E6:98:CF:A1:F2:2B:46:75:C4:E9:58:07:E3:6D:D6:EC:62:65
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39372e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5b:35:81:bb:09:c8:e3:a2:0a:32:04:d3:0f:fd:62:e5:07:
3e:59:d0:91:65:cd:d6:0b:82:43:db:b1:f4:6f:06:02:e5:7c:
79:f9:67:1f:75:05:8b:e4:72:2c:e8:a0:95:bf:85:cd:fe:5f:
91:75:ca:cf:21:fd:8a:9f:9c:2c:3c:d2:27:5b:4a:32:36:f0:
38:4b:99:e4:6f:4e:f6:d8:80:ca:15:90:05:c0:2b:40:ab:3e:
c4:ab:c9:52:0a:93:bd:43:44:09:15:90:63:7d:5d:e2:28:6c:
bb:af:b9:b9:8a:d6:0b:95:d8:c1:19:b5:14:e8:5a:3b:20:5c:
2e:74:47:21:c9:71:f2:56:95:0f:fc:27:9f:13:0d:8e:50:81:
e9:5d:a2:7c:ad:ee:9e:d6:93:cc:94:0e:1e:91:27:56:d8:73:
a4:a3:9d:cd:44:ed:b4:d9:aa:1c:58:1b:34:a4:88:99:4e:f4:
d7:ab:c0:b2:ef:f9:48:57:57:cc:b6:0a:05:c5:5d:25:a4:7e:
c6:a0:8b:fc:c0:07:ea:4f:fe:59:00:f5:3d:ff:87:42:dd:fb:
e6:62:22:4b:74:41:af:9a:f6:e9:36:69:b3:6e:e8:b7:b0:c7:
66:a9:51:ac:03:f2:88:4d:c6:3c:98:e5:e6:b7:43:c0:3b:fa:
f3:be:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:31:32 2025 by rpki-client