Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203136323736.roa
File: 34352e3134362e3130372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: RFbXESMgm50Dxr0CjF0ufu5FThorKlskbs0XvxrMVcY=
Subject key identifier: 77:F6:D7:2F:61:9A:49:BA:C6:AD:6D:2C:12:9E:1D:19:11:13:83:4E
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 65C4E6E3018DE7DAB7412A8AAEAEA6CDED86FA90
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203136323736.roa
Signing time: Mon 17 Feb 2025 13:11:07 +0000
ROA not before: Mon 17 Feb 2025 13:06:07 +0000
ROA not after: Mon 16 Feb 2026 13:11:07 +0000
asID: 16276
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c4:e6:e3:01:8d:e7:da:b7:41:2a:8a:ae:ae:a6:cd:ed:86:fa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Feb 17 13:06:07 2025 GMT
Not After : Feb 16 13:11:07 2026 GMT
Subject: CN=77F6D72F619A49BAC6AD6D2C129E1D191113834E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:b3:a5:8b:67:5d:71:09:4b:8d:84:6f:46:
c1:b7:4c:f0:81:a7:ff:31:59:85:38:2a:3f:81:3d:
ad:d9:6b:7a:59:db:20:43:10:b0:96:25:8e:3d:1d:
0d:00:60:c2:fa:f7:ed:fb:64:df:b0:6f:07:5c:c7:
26:25:b2:09:62:89:b4:76:1c:43:ef:55:47:1b:31:
3a:71:41:34:31:2e:16:a1:09:fd:69:1f:3c:0a:f2:
64:62:e3:ba:c6:e3:36:a5:e1:cf:6e:e4:f5:24:78:
5e:f8:27:c3:7c:cc:a0:ba:63:3a:bd:67:20:df:68:
00:d3:c7:80:39:40:1c:7d:fb:bb:bd:41:75:82:9a:
3f:5f:9d:0a:4d:93:f9:3b:ed:95:25:51:9d:04:d5:
cc:e0:3d:5e:d8:a7:c5:c8:db:db:b1:f7:92:e6:9e:
1c:20:75:01:f3:b0:8d:5a:e9:39:1a:55:b1:6c:b9:
2d:16:30:90:18:f4:c6:80:0f:97:68:02:25:dd:a9:
07:cf:dd:cd:ad:19:16:93:ff:ac:12:81:ff:01:98:
6e:ef:eb:fa:cd:a8:29:28:70:a8:72:50:eb:6e:ae:
f1:d7:39:84:e1:cf:81:13:9b:aa:6a:36:6c:29:5d:
ea:3d:c8:9a:ea:a6:69:29:4a:61:35:fb:64:fa:1c:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F6:D7:2F:61:9A:49:BA:C6:AD:6D:2C:12:9E:1D:19:11:13:83:4E
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:94:c9:59:db:9e:78:dc:5a:b2:7f:87:b4:eb:b1:14:63:ac:
3d:e2:75:7e:9f:16:fd:39:d4:3d:46:d1:b7:f9:e9:c4:ce:6f:
a2:6c:d0:57:73:ed:de:eb:04:ee:d2:09:4a:50:30:d6:18:6b:
77:c6:24:49:81:e3:d3:f8:f1:c7:11:1d:1d:b3:a1:10:e0:5e:
61:dc:40:b8:af:7c:f3:a9:f3:e1:70:7f:6f:f7:49:a4:5d:7b:
a7:10:74:f4:95:6e:eb:9b:46:c3:22:da:74:d8:6b:8e:6d:7a:
d8:3a:1f:9d:c1:00:7b:04:c6:50:91:7b:e9:86:16:cb:20:64:
4c:58:7b:f0:2f:08:35:a9:d5:aa:4e:5e:3b:7c:01:38:84:4a:
9a:cc:85:6a:5e:0e:13:2f:ae:f5:d6:63:c5:fb:86:d1:a7:4b:
83:a5:f0:0d:08:0b:14:9e:3c:dc:91:c4:5d:54:0d:cb:10:d4:
b8:ac:4a:96:04:41:cb:c1:2d:8c:b6:3e:81:ff:6b:94:3b:ae:
9f:0a:e0:bd:6f:4f:fd:70:38:5b:3f:9d:2b:52:eb:40:2a:63:
7b:19:fc:27:cd:ec:8b:0d:f8:e7:f1:b3:6a:11:e7:02:a8:15:
f5:81:63:bf:0b:c7:6c:5a:7e:14:40:d2:dc:1a:3b:01:04:f1:
a7:e2:67:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:25:29 2025 by rpki-client