Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa
File: 34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 8xWN5km2BIOqN08G+oBOvQO1sT33e1MMaKbpXMP7JSo=
Subject key identifier: C3:BA:AD:4D:64:B2:95:16:F1:D6:3D:AC:E9:F9:17:C3:26:A0:FB:04
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 04C2D746139743F09D70B1036ED687725728877D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 27 Dec 2024 11:47:14 +0000
ROA not before: Fri 27 Dec 2024 11:42:14 +0000
ROA not after: Fri 26 Dec 2025 11:47:14 +0000
asID: 147049
IP address blocks: 45.134.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c2:d7:46:13:97:43:f0:9d:70:b1:03:6e:d6:87:72:57:28:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:14 2024 GMT
Not After : Dec 26 11:47:14 2025 GMT
Subject: CN=C3BAAD4D64B29516F1D63DACE9F917C326A0FB04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:e0:50:ff:6d:b3:1c:73:6f:80:b5:36:ce:
b8:e2:46:c7:2a:1f:8c:9d:6a:92:86:c0:90:ce:06:
a9:f9:82:e0:0e:d4:e9:6c:9b:88:9b:09:3b:ec:14:
96:16:7a:23:ec:82:8a:9d:9d:e6:27:87:ed:61:58:
15:b7:c7:92:9e:9e:e6:41:6c:30:f4:11:86:94:29:
b3:97:a8:88:f7:18:84:a7:e0:6e:d8:71:23:30:6b:
f6:bb:19:a5:1f:c9:6a:48:b5:14:1c:fe:de:e6:b4:
f6:a9:cc:2d:b0:ea:5c:5f:3f:ef:70:cb:a7:43:9f:
8d:fd:ea:a9:cd:03:37:f4:7a:2e:a7:50:56:38:da:
b8:76:03:b3:f0:92:09:a6:93:d8:5c:d8:a4:fc:05:
2a:9a:6d:24:b4:7b:e2:cf:06:d5:94:7b:06:88:a6:
a5:09:60:98:0e:95:32:b0:c9:d4:17:47:59:6d:30:
8a:b4:6a:6f:65:64:ab:f2:03:56:c3:f8:7e:1e:de:
d7:90:09:5f:60:ff:6d:88:1e:11:ae:5e:df:9e:c2:
a3:ac:ac:97:7e:25:d2:95:bb:64:00:94:6a:b3:5c:
21:aa:45:a6:19:74:8f:35:80:87:02:37:f4:b4:1a:
9e:b9:41:fe:fb:16:71:57:05:d2:db:1d:af:65:89:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BA:AD:4D:64:B2:95:16:F1:D6:3D:AC:E9:F9:17:C3:26:A0:FB:04
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.224.0/24
Signature Algorithm: sha256WithRSAEncryption
84:06:31:b9:ab:ae:35:db:00:3b:3d:04:f6:b0:22:af:83:08:
cc:a0:b5:aa:9d:3e:2c:66:07:77:84:1a:7e:c5:70:e0:2c:dc:
9b:eb:29:c2:64:08:a4:ab:9f:17:b6:bc:1b:03:18:9c:2a:c0:
00:28:37:83:ea:39:63:0b:34:8d:92:d0:67:39:40:ae:6a:44:
82:2c:ec:f5:17:e4:a4:c9:ef:11:db:c6:d1:dc:71:f1:53:9f:
75:00:cd:92:6a:06:3b:b1:2c:87:99:6e:63:7f:5a:15:89:92:
45:4c:c4:ab:a1:96:df:33:8e:f2:6b:4b:30:6c:f1:1b:ef:a7:
9e:72:8d:41:66:48:66:78:29:44:a2:0e:08:e7:48:87:e8:ef:
c0:a2:86:d1:05:af:19:64:1b:22:4b:a0:a6:79:f6:3f:2d:cc:
a7:91:e0:ee:7f:9a:bd:a0:bf:95:9b:7c:80:e3:67:7c:49:ec:
99:68:08:78:0d:d4:57:75:e1:bd:35:b0:1f:ee:3a:fe:d7:0b:
49:d7:7f:45:2b:af:d7:f0:11:1f:32:4f:32:be:6b:ff:0f:b4:
30:50:85:a5:b4:f5:41:72:b5:27:7e:5f:3b:28:e3:35:0c:c3:
9d:da:b8:94:cf:8e:23:4d:c2:e0:bb:3c:db:41:ee:28:67:ea:
20:07:b2:b9
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUBMLXRhOXQ/CdcLEDbtaHclcoh30wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMTRaFw0yNTEyMjYxMTQ3MTRaMDMxMTAvBgNV
BAMTKEMzQkFBRDRENjRCMjk1MTZGMUQ2M0RBQ0U5RjkxN0MzMjZBMEZCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDItuBQ/22zHHNvgLU2zrjiRscq
H4ydapKGwJDOBqn5guAO1Olsm4ibCTvsFJYWeiPsgoqdneYnh+1hWBW3x5KenuZB
bDD0EYaUKbOXqIj3GISn4G7YcSMwa/a7GaUfyWpItRQc/t7mtPapzC2w6lxfP+9w
y6dDn4396qnNAzf0ei6nUFY42rh2A7Pwkgmmk9hc2KT8BSqabSS0e+LPBtWUewaI
pqUJYJgOlTKwydQXR1ltMIq0am9lZKvyA1bD+H4e3teQCV9g/22IHhGuXt+ewqOs
rJd+JdKVu2QAlGqzXCGqRaYZdI81gIcCN/S0Gp65Qf77FnFXBdLbHa9licz7AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUw7qtTWSylRbx1j2s6fkXwyag+wQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzQy
ZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNzMwMzQzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC2G4DANBgkqhkiG9w0BAQsFAAOCAQEAhAYxuauuNdsAOz0E9rAir4MI
zKC1qp0+LGYHd4QafsVw4Czcm+spwmQIpKufF7a8GwMYnCrAACg3g+o5Yws0jZLQ
ZzlArmpEgizs9RfkpMnvEdvG0dxx8VOfdQDNkmoGO7Esh5luY39aFYmSRUzEq6GW
3zOO8mtLMGzxG++nnnKNQWZIZngpRKIOCOdIh+jvwKKG0QWvGWQbIkugpnn2Py3M
p5Hg7n+avaC/lZt8gONnfEnsmWgIeA3UV3XhvTWwH+46/tcLSdd/RSuv1/ARHzJP
Mr5r/w+0MFCFpbT1QXK1J35fOyjjNQzDndq4lM+OI03C4Ls820HuKGfqIAeyuQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:45 2025 by rpki-client