Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
File: 34352e3132382e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: Lg4LQ363mbEsLB5Y8b2MAereLzYCGSUzqY5XlqSm5HE=
Subject key identifier: 94:9D:06:79:5F:6F:E9:84:EE:99:99:A8:DA:AD:11:CD:74:92:86:85
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 77EE0BB725FC34D22C62014A6F2459EF92688F4E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:28 +0000
ROA not before: Fri 20 Dec 2024 15:18:28 +0000
ROA not after: Fri 19 Dec 2025 15:23:28 +0000
asID: 47583
IP address blocks: 45.128.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ee:0b:b7:25:fc:34:d2:2c:62:01:4a:6f:24:59:ef:92:68:8f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:28 2024 GMT
Not After : Dec 19 15:23:28 2025 GMT
Subject: CN=949D06795F6FE984EE9999A8DAAD11CD74928685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:65:5a:76:89:f9:87:81:1b:d6:1f:50:71:
59:b5:49:e8:cd:c3:1e:49:08:88:08:ce:b2:d4:e8:
df:38:de:2d:36:a9:d6:93:c1:b7:3a:c6:41:4b:73:
21:83:7e:2b:97:3f:06:f4:4f:a9:ed:c4:0b:d2:e3:
cd:59:89:02:9d:9b:45:af:aa:28:e9:b4:32:e0:c0:
f9:a2:16:bb:49:52:14:25:ab:b5:bd:20:1a:c3:43:
9d:91:86:28:39:40:59:51:35:10:4d:c3:bf:7e:cf:
82:bc:6b:e4:68:10:38:cd:93:59:65:ed:49:f5:16:
b6:b3:33:63:40:35:6d:74:d8:2b:79:64:91:e1:13:
c1:ef:93:6d:08:ad:9a:15:6c:13:e7:80:95:b6:ac:
62:7a:19:1a:ec:03:47:16:1e:fa:cc:ab:8e:0e:6d:
46:97:29:bc:fc:cb:17:35:d1:7e:2f:c4:78:9a:d3:
74:52:d1:76:d9:ed:45:fc:fc:19:84:4e:32:f7:f9:
9d:9d:af:36:ff:c0:86:1f:00:6a:03:07:75:20:86:
71:e2:87:1c:14:e2:40:4e:9d:b2:0c:0f:c0:9f:95:
29:b5:2f:00:5b:75:03:9d:37:77:fc:37:92:c8:35:
9f:6a:80:84:1a:04:a8:d2:dd:79:08:dc:4c:ad:02:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9D:06:79:5F:6F:E9:84:EE:99:99:A8:DA:AD:11:CD:74:92:86:85
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.160.0/22
Signature Algorithm: sha256WithRSAEncryption
29:0c:1c:04:56:dd:ad:1a:ac:73:81:52:b1:90:00:4a:78:95:
95:2e:a0:81:e2:58:66:88:11:3e:0d:ab:00:21:6b:2c:b5:6b:
9b:64:21:60:70:94:e7:79:7f:22:93:1c:20:74:b5:9a:c1:0e:
f0:29:2d:88:0a:59:45:ab:4b:b7:de:ef:98:a5:36:84:f8:f8:
03:13:12:fa:9d:b5:99:55:a8:9a:7c:93:e3:5f:93:c7:aa:7f:
58:27:ce:20:ad:e1:a6:b2:c2:4b:66:a2:2f:fb:e6:bb:24:ec:
4e:9a:ac:30:01:ff:db:cd:75:38:f4:be:00:47:77:c5:fc:6b:
7a:f6:0e:0a:52:ed:0f:53:0f:86:6a:a5:a3:10:24:dd:3c:04:
78:5e:ab:e1:c4:ca:40:b3:72:7f:0d:bb:20:f2:ac:8b:04:de:
5f:74:9f:01:ce:de:ce:9b:fd:27:7b:93:f9:a1:2d:cc:1b:9d:
ac:7b:64:d3:21:b5:7d:a0:85:04:7b:ec:85:bd:32:32:3a:ef:
92:61:de:14:c4:38:a9:2f:b5:27:22:06:0b:22:0f:11:5a:d6:
13:16:78:2c:9a:96:cc:f9:c3:6d:7f:07:35:04:26:d5:a1:13:
e0:a9:3e:2d:b3:ca:bb:e5:5c:ec:c7:95:b0:9d:3d:97:93:3f:
3e:b2:d9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:54 2025 by rpki-client