Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e203631333137.roa
File: 34352e39312e3133362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: asrrPFUZb5EW88XUK6AgQXc4dGAqqzoo3PthSS5Ovq8=
Subject key identifier: F1:A3:53:E5:6F:C0:1B:81:7E:DA:74:D8:D1:F4:DD:85:4F:70:C3:46
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 5EDE1DBAEE9035A984DF5B40179D461807A73737
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e203631333137.roa
Signing time: Thu 06 Feb 2025 12:53:53 +0000
ROA not before: Thu 06 Feb 2025 12:48:53 +0000
ROA not after: Thu 05 Feb 2026 12:53:53 +0000
asID: 61317
IP address blocks: 45.91.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:de:1d:ba:ee:90:35:a9:84:df:5b:40:17:9d:46:18:07:a7:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Feb 6 12:48:53 2025 GMT
Not After : Feb 5 12:53:53 2026 GMT
Subject: CN=F1A353E56FC01B817EDA74D8D1F4DD854F70C346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:cf:94:f1:ee:b5:1c:a6:85:a5:33:5b:d5:
c3:19:e8:e8:3e:48:78:80:56:2d:4b:f1:f5:16:a4:
52:ec:66:df:0c:aa:35:e9:38:c2:f0:84:84:6d:a2:
84:fe:bb:44:81:97:b4:18:09:34:79:e7:63:08:bd:
9d:9b:b8:fc:a9:c3:2c:7c:45:c6:02:9b:24:67:67:
c3:fb:51:b1:8d:05:d7:cb:40:44:d0:29:da:65:b9:
8f:d5:96:69:90:ae:85:77:31:80:22:ac:cc:11:10:
ea:cd:1f:89:6a:48:69:71:b7:4b:a3:5c:5f:7a:3b:
03:23:a6:9d:7d:93:81:24:d4:13:f1:25:4f:fc:73:
7b:8e:3f:d6:38:66:16:3d:6a:c9:3e:04:66:09:2d:
44:bb:fa:84:73:21:98:07:21:3d:f6:82:91:e7:ba:
05:a2:c5:6d:f8:7d:28:37:05:24:ac:ee:7e:dc:58:
bd:08:a0:e3:5e:69:a4:eb:3a:5b:fc:f0:4d:33:a7:
73:d5:e7:b4:44:45:b3:19:18:eb:c0:54:35:c9:ca:
5b:e3:6b:d5:2c:47:cd:f4:01:8e:c3:74:43:81:06:
96:3b:55:42:f1:a1:e0:00:30:b6:1a:f3:b0:bf:be:
28:c3:1f:eb:6d:6b:4d:c6:94:f5:42:d2:c1:ba:e2:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A3:53:E5:6F:C0:1B:81:7E:DA:74:D8:D1:F4:DD:85:4F:70:C3:46
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.136.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9b:32:8f:25:6e:c9:0b:be:3f:ac:5a:97:df:e8:f2:6c:d3:
80:41:ff:cc:e8:d8:b0:0c:d8:54:3a:70:67:4a:68:aa:cc:ae:
65:99:a9:e5:3a:dd:48:8e:e6:78:93:28:0a:d2:4a:39:1d:59:
e9:72:66:a5:c1:c0:03:c5:a9:9f:5e:e3:09:95:6d:e0:1f:08:
6e:67:9e:de:ec:26:44:38:79:54:56:6e:b1:95:63:a3:b1:75:
0a:7f:2c:1d:2e:ab:ca:1d:df:36:d8:c6:57:ea:16:0e:4f:6f:
be:c9:aa:04:65:0d:73:74:44:06:9f:fe:23:d7:a5:63:5f:c6:
9b:d8:cf:48:3d:ca:4b:55:5a:ea:33:4b:57:e8:4b:cb:5a:10:
be:d6:a2:b0:30:6c:31:60:cc:62:66:5d:fd:79:6a:2e:c9:cc:
aa:19:96:e5:4d:b3:2d:79:7e:ca:6b:ee:e9:d1:38:7c:e2:c1:
36:7b:0c:ec:24:91:98:2a:4b:72:76:d5:04:4c:0a:a9:5c:6d:
25:bc:89:c6:07:b3:88:96:87:89:e0:94:66:de:35:e3:41:a0:
01:98:9f:79:ba:0d:5f:a8:e0:1c:55:d1:1c:50:ec:ed:86:8f:
05:ae:4e:61:e3:1b:91:d8:95:82:df:d4:ab:b0:c0:c6:2c:be:
d5:f1:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:43 2025 by rpki-client