Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa
File: 34352e3133342e3232362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: fqgsAkwQ5+Eeg5C2SKRsEPLIG5j4T21OWCiBc8aFgrk=
Subject key identifier: 0D:06:91:69:85:6F:BA:3F:B6:FD:DD:D6:0F:F9:50:9B:7E:E3:09:06
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 24CF88525A371387976E877712766AD5822E3758
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:28 +0000
ROA not before: Fri 27 Dec 2024 11:42:28 +0000
ROA not after: Fri 26 Dec 2025 11:47:28 +0000
asID: 51167
IP address blocks: 45.134.226.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cf:88:52:5a:37:13:87:97:6e:87:77:12:76:6a:d5:82:2e:37:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:28 2024 GMT
Not After : Dec 26 11:47:28 2025 GMT
Subject: CN=0D069169856FBA3FB6FDDDD60FF9509B7EE30906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9e:f1:12:63:50:b7:57:cc:63:31:55:38:5b:
ca:3b:97:97:58:e9:96:d6:d9:ab:b6:45:16:f4:4e:
9a:a9:53:5c:4f:f4:76:65:17:e8:8a:e6:8b:3b:52:
07:98:3d:09:c6:15:a2:4b:7e:63:90:c2:4b:31:f3:
f6:51:24:c7:fe:bf:c5:22:ad:8c:21:53:4d:21:31:
d0:96:82:55:51:5c:69:58:68:f2:f8:de:bf:0f:e0:
67:37:e0:e2:26:96:ee:0d:cb:99:78:1d:06:a4:14:
c5:7a:5f:18:25:28:48:64:7f:5b:f0:73:67:3a:a1:
e3:46:43:3e:ad:a0:f8:47:74:01:8d:a8:f9:85:68:
f7:f7:31:6a:c6:42:54:24:5a:b8:85:07:88:9c:04:
c7:c1:4a:dc:10:8c:e2:59:18:74:64:6d:ed:85:7c:
29:5c:c6:79:f4:dd:d3:33:58:a4:06:bd:c8:55:14:
cf:0f:03:cf:6f:31:d4:ca:55:a1:74:ca:0a:b4:f0:
7b:19:c6:d5:a3:03:c9:06:e5:50:a2:c7:9b:f8:ab:
5e:ae:69:af:71:0d:01:fc:bd:5b:1d:65:55:54:ed:
99:41:09:42:b4:0f:ae:26:cb:97:ea:2b:46:7f:c2:
76:d0:88:06:86:b1:4c:d2:32:a6:f2:1e:2a:07:3c:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:91:69:85:6F:BA:3F:B6:FD:DD:D6:0F:F9:50:9B:7E:E3:09:06
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.226.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8d:08:fe:ff:06:b6:27:d0:d0:4d:a0:2d:26:6a:c0:2a:c2:
59:b8:d6:7e:42:1e:4e:6b:c8:00:79:6a:b8:ca:fb:40:12:35:
ad:c3:e8:26:ba:18:b2:73:b8:ab:fa:80:f9:a8:ef:07:3d:db:
72:0c:28:1a:89:5e:bf:d1:10:66:88:c2:f6:fb:89:95:81:9f:
04:c6:c3:54:82:a6:bc:5a:a4:53:9f:dc:73:19:40:fb:ec:e3:
46:fc:6d:ba:d1:4e:b2:1d:7a:92:ce:1e:5b:0f:dd:71:0b:3a:
f3:70:4e:9c:c9:c5:8f:f9:d2:89:9f:36:e5:c6:25:c3:62:53:
51:d0:c0:86:dc:29:53:3c:56:5d:d7:73:40:5e:ff:9a:17:d7:
b2:c2:d2:97:21:1c:52:1d:94:7e:2d:3a:3f:a4:34:be:c7:5b:
6c:2d:52:ec:af:6a:78:9c:fb:de:a0:bd:ef:87:07:75:e8:91:
cd:f6:a6:0d:1a:fb:41:12:23:2a:e3:df:69:50:17:23:a4:60:
d5:dd:78:88:83:96:3e:14:75:d6:7d:8d:f8:57:98:cf:da:75:
c1:9b:ac:0b:7a:da:3c:79:ba:ef:c5:b2:89:6b:44:8e:1c:6d:
25:36:d9:1e:5d:4b:a7:9b:24:b4:a5:16:da:74:dc:ea:8d:15:
48:3a:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:14:45 2025 by rpki-client