Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e203539353338.roa
File: 34332e3233302e38352e302f32342d3234203d3e203539353338.roa (raw, json)
Hash identifier: 9vIYjNNAp0sol5N7YXJx99c09S8a91IJ/P5Nh+TTmx4=
Subject key identifier: 05:C7:9D:72:B9:B8:1B:45:10:C4:C0:E6:F9:5B:60:F4:4C:44:ED:08
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 4ED4CFB423472470F4C34A83FF4987446ADA9AAB
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e203539353338.roa
Signing time: Sat 18 Jan 2025 14:50:53 +0000
ROA not before: Sat 18 Jan 2025 14:45:53 +0000
ROA not after: Sat 17 Jan 2026 14:50:53 +0000
asID: 59538
IP address blocks: 43.230.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d4:cf:b4:23:47:24:70:f4:c3:4a:83:ff:49:87:44:6a:da:9a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Jan 18 14:45:53 2025 GMT
Not After : Jan 17 14:50:53 2026 GMT
Subject: CN=05C79D72B9B81B4510C4C0E6F95B60F44C44ED08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:b8:47:d6:ef:59:f1:6c:e1:ff:5b:59:1a:
85:72:15:cb:50:e8:2d:ef:2b:fd:26:5b:8d:20:4f:
db:de:e0:98:65:39:f2:0f:f0:9c:40:a7:8e:8d:d5:
01:4c:c7:d6:b4:c8:13:6e:fd:e8:e1:8e:f7:bb:1d:
50:83:c7:df:34:ee:db:21:73:58:a8:a2:d9:58:ea:
cf:a3:6e:18:c2:e7:bc:7b:0b:eb:18:58:a1:cd:dc:
9d:72:16:94:9a:7d:d1:71:20:1f:6d:e7:3d:6f:3d:
ed:52:80:aa:84:4f:a2:00:17:a4:69:91:cf:7f:3b:
68:59:00:a7:dd:bd:5d:ba:cd:e6:b5:a9:ff:8a:a9:
a0:63:78:b0:a7:73:f1:a6:c4:be:fb:e7:63:61:df:
c0:c0:e8:d8:84:ce:0d:16:45:02:10:22:9c:0c:7a:
04:ca:35:fa:0a:ce:a3:3f:a5:f5:48:a5:73:1d:86:
63:6f:bb:02:6a:d4:41:e2:c9:c7:c5:b1:bd:13:18:
8b:d8:66:42:e2:7f:57:83:dc:1c:a2:7a:ab:48:05:
94:2a:da:82:62:79:10:97:3f:a1:88:6b:7a:77:27:
d9:d4:d1:f4:44:f6:5e:38:4a:e4:e4:ee:c9:9c:78:
84:a4:1a:e9:56:a9:ec:db:41:3e:e8:ef:d6:1a:d6:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:9D:72:B9:B8:1B:45:10:C4:C0:E6:F9:5B:60:F4:4C:44:ED:08
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e203539353338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:46:66:76:cd:8b:aa:06:7b:7c:ee:ad:e5:e6:70:20:61:d1:
1f:c5:e3:cd:4f:d6:41:c5:75:24:ca:18:ec:89:aa:84:ee:48:
82:11:25:68:4b:1f:ec:b0:e0:0f:5d:98:da:b7:4d:c1:89:b2:
51:22:91:be:cf:25:58:d8:5a:25:f0:be:9a:ee:b5:fb:7c:f2:
01:22:3b:bc:d3:79:ba:af:ce:70:b2:e9:a8:ee:f1:23:76:a6:
08:58:98:f2:57:ce:6b:9b:93:c1:5f:a0:8e:88:ac:95:b6:5e:
7c:07:66:67:5c:59:ce:d1:2e:e4:b5:29:25:d0:bf:7f:d2:de:
c1:1c:16:88:cd:40:54:ee:8b:30:59:63:9a:39:cf:c0:7f:4e:
82:ec:c1:50:b5:a1:ed:22:22:e6:5a:42:91:57:a7:2f:56:6d:
d5:e7:07:11:27:f7:89:11:16:39:24:b2:8d:20:fe:b5:ad:a9:
ba:9b:36:42:5e:8b:6d:89:d6:98:b7:cf:83:87:46:b0:75:11:
ea:43:fc:74:38:cb:01:fa:aa:7e:a5:68:36:43:cc:8e:1b:5f:
cc:8d:4a:e1:5f:33:22:53:ac:df:ff:e8:cc:ed:68:40:bb:b0:
3a:6d:75:bf:2f:f2:4a:a9:3e:60:a4:b1:27:40:62:c4:70:40:
c7:f6:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:22 2025 by rpki-client