Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e203437373431.roa
File: 34332e3233302e38342e302f32342d3234203d3e203437373431.roa (raw, json)
Hash identifier: oyFuBCQBLvTGC1ImcrngWoUJ4Q8e7JxdFB2r2iiXaVA=
Subject key identifier: 06:A7:C3:53:5E:A0:AE:B9:6E:26:2A:46:A3:0E:96:BD:EB:26:83:72
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 41067200C5E1BEE5A2604EE1060377B33EB768BF
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e203437373431.roa
Signing time: Mon 27 Jan 2025 17:56:05 +0000
ROA not before: Mon 27 Jan 2025 17:51:05 +0000
ROA not after: Mon 26 Jan 2026 17:56:05 +0000
asID: 47741
IP address blocks: 43.230.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:06:72:00:c5:e1:be:e5:a2:60:4e:e1:06:03:77:b3:3e:b7:68:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jan 27 17:51:05 2025 GMT
Not After : Jan 26 17:56:05 2026 GMT
Subject: CN=06A7C3535EA0AEB96E262A46A30E96BDEB268372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e3:c8:9e:88:46:d2:60:76:e5:a8:78:a3:b0:
60:16:08:dd:a5:80:f6:18:9e:4b:e4:04:09:bc:02:
43:ee:2b:82:64:13:d4:c3:52:ab:32:bf:52:03:aa:
46:1e:f2:e3:18:91:ad:1f:01:19:e5:aa:0a:39:c4:
85:62:2f:61:90:63:d2:38:22:06:d5:42:c8:95:f4:
0f:e8:15:bf:e4:61:8e:50:a1:c3:31:01:c1:e0:12:
b4:58:03:71:98:b5:54:88:4c:1f:1b:12:f7:bf:bc:
dc:68:13:fc:1b:1a:57:eb:e0:c2:fe:c5:b2:69:60:
a8:d1:6e:77:a1:c9:6e:fe:1c:63:7b:1a:6f:6a:72:
1a:af:82:59:3c:f8:f8:03:37:ba:59:4b:38:41:3d:
ca:43:85:ea:8f:fd:8a:2c:50:ca:b4:81:43:bd:d3:
43:91:f4:51:6b:d0:d5:d7:64:22:ab:80:ee:dc:49:
4d:a5:e0:65:fa:31:0d:2e:48:d0:65:30:a5:b2:74:
29:62:7b:8e:11:e0:08:a0:aa:e5:2a:30:71:5f:a2:
1d:be:d7:11:fc:48:90:d9:b9:e3:3f:c6:d3:d7:9e:
4f:1d:ea:85:c7:f3:b4:a7:39:02:1c:3a:22:76:21:
43:e4:8e:b5:5a:fe:54:45:60:1e:bb:bc:cc:bc:ca:
14:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:C3:53:5E:A0:AE:B9:6E:26:2A:46:A3:0E:96:BD:EB:26:83:72
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e203437373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f4:09:03:27:1b:c1:cb:78:37:3e:e6:ad:21:03:65:15:e3:
88:63:99:12:97:60:05:57:c3:c2:a5:8e:9a:83:5f:5f:1e:f5:
b3:a9:48:82:6e:c7:b5:0e:2a:f7:18:8a:5a:54:25:de:a3:01:
e2:dc:60:ff:4e:0d:14:4a:2a:40:1f:84:4c:a8:bc:17:22:03:
fb:c7:d8:a1:5a:76:20:f5:d7:52:60:a5:75:00:54:d4:23:a4:
d9:a4:91:75:de:77:85:82:00:90:6b:13:2d:0c:cf:b0:0b:12:
65:8e:36:be:10:62:59:bc:a4:6b:da:6a:27:a1:3e:40:96:ca:
ef:e8:ce:4a:29:d4:1a:46:b0:36:88:d7:a3:61:7d:fc:39:fe:
30:c5:bc:9e:12:71:be:4a:34:19:c9:2b:52:b5:ed:a0:73:44:
5f:b5:18:22:88:9f:c5:27:9c:b2:6b:24:21:46:be:a8:60:68:
02:04:dc:13:5b:79:b4:d8:9e:95:a2:5b:57:72:39:32:66:07:
f9:7b:da:e4:03:be:0e:a7:1b:4a:06:cb:28:5e:2f:ed:15:2c:
e0:6b:ee:b9:85:e7:f2:8e:4b:a5:ae:cb:cc:e1:7c:d2:b2:66:
35:8f:de:05:bf:94:97:66:48:91:46:50:00:c6:50:2d:5b:93:
3c:0f:12:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:55 2025 by rpki-client