Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233332e302f32342d3234203d3e20313336373837.roa
File: 34352e31332e3233332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qS4Dh62F7coYSy+a/kQV+foI7GGjnpIoicGtC2GDEAg=
Subject key identifier: 1B:10:42:F6:E5:21:C4:C9:D0:2E:A1:CB:C8:73:5C:5E:A9:D4:EB:BB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5483883CB7B1B24C817C2096A62D61F6EF49A220
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:41 +0000
ROA not before: Fri 27 Dec 2024 11:42:41 +0000
ROA not after: Fri 26 Dec 2025 11:47:41 +0000
asID: 136787
IP address blocks: 45.13.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:83:88:3c:b7:b1:b2:4c:81:7c:20:96:a6:2d:61:f6:ef:49:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:41 2024 GMT
Not After : Dec 26 11:47:41 2025 GMT
Subject: CN=1B1042F6E521C4C9D02EA1CBC8735C5EA9D4EBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8e:a1:9f:c8:fc:80:a5:57:dc:b6:93:23:9b:
25:c1:d1:d0:8a:ea:b2:a8:1c:76:b9:11:bc:88:e5:
86:4b:46:de:12:ce:52:64:a4:03:7d:e8:6a:53:ab:
1c:58:f9:f3:1d:51:2b:5f:f3:16:9b:ec:2e:65:8d:
6d:ac:b9:75:81:0b:cc:a0:5a:d4:bf:c3:f4:c0:7c:
5f:7a:17:ae:5f:25:da:e7:62:68:c3:bb:46:d5:0f:
99:e5:d7:e9:cf:f8:5b:26:ac:f4:35:a2:82:6a:2d:
de:3a:f4:23:a8:70:01:1d:c8:e3:c5:38:6d:55:f4:
58:ea:4a:38:c7:ed:a7:d9:26:a8:04:22:f9:77:bd:
46:5c:2e:57:55:48:25:2b:76:db:aa:eb:3d:3f:51:
99:ba:81:78:87:60:80:3b:88:6b:68:4b:d7:6f:ce:
5d:d3:1a:7d:4c:fb:a4:10:a5:25:80:c3:ac:31:92:
e1:81:e1:a1:12:a9:39:d2:c7:f4:bd:47:40:e0:88:
32:d2:03:8c:07:2f:3c:5c:5e:0d:28:19:5d:14:a6:
ba:12:64:0a:bd:f6:81:3b:6d:f3:a7:8a:0f:8b:49:
5d:2b:2e:cb:c5:3e:7f:2a:89:66:a1:53:8e:23:41:
ca:9e:2c:3e:ed:b5:2c:23:ce:79:52:87:52:d0:4c:
0a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:10:42:F6:E5:21:C4:C9:D0:2E:A1:CB:C8:73:5C:5E:A9:D4:EB:BB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.233.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:0f:0b:25:00:ea:bd:d2:6a:cf:58:74:21:bb:bf:93:83:d3:
ab:8d:97:1a:92:b5:af:c3:40:45:10:32:ea:9c:5c:21:c4:3a:
25:14:16:6e:4e:1e:b5:a4:e1:b3:93:36:0a:82:2e:5e:80:ea:
eb:26:d4:1e:34:07:6c:9e:26:03:d1:5b:42:af:84:b1:71:3d:
ad:c3:6a:88:0e:61:e4:2c:7f:ce:fb:a7:10:02:99:c1:68:3d:
d6:95:75:50:6b:86:3d:04:bf:8f:29:58:e2:1e:3a:48:82:94:
42:c8:79:49:cf:d0:01:f1:ce:f4:c7:23:b8:e4:38:69:6b:29:
00:d4:b4:27:a6:ef:11:e4:d2:49:e3:19:11:39:f7:b1:da:6c:
2c:9f:4d:25:17:1f:9b:72:53:70:f1:6b:52:f2:98:ac:0f:8a:
7f:f2:aa:1b:b7:68:f6:f9:78:64:54:dd:de:1b:15:6c:8c:e4:
ca:07:f7:87:e8:a9:b0:5a:a4:59:31:35:0e:0a:c2:a1:92:da:
0d:9a:2c:df:35:bb:b5:ad:c0:65:70:29:44:c8:d2:c1:22:14:
72:86:8f:07:cb:92:d4:da:89:a2:4e:4c:ce:c6:23:ab:68:18:
7e:8d:8f:c0:91:a3:ef:56:22:5a:b7:2c:68:34:9f:02:d5:55:
fe:da:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:42 2025 by rpki-client