Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139342e302f32342d3332203d3e203430303231.roa
File: 34352e3133372e3139342e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: OuBVqgdaVM/JgxS48FTTj3AdILnEwrwfiANqhdz5Ur8=
Subject key identifier: 0E:EE:16:7E:4C:7D:F9:60:BB:40:74:11:EC:E5:F9:EC:AB:8C:1F:6B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 78750956B306677069BA5C5B6AEBBC0018809DB0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139342e302f32342d3332203d3e203430303231.roa
Signing time: Fri 27 Dec 2024 11:47:45 +0000
ROA not before: Fri 27 Dec 2024 11:42:45 +0000
ROA not after: Fri 26 Dec 2025 11:47:45 +0000
asID: 40021
IP address blocks: 45.137.194.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:75:09:56:b3:06:67:70:69:ba:5c:5b:6a:eb:bc:00:18:80:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:45 2024 GMT
Not After : Dec 26 11:47:45 2025 GMT
Subject: CN=0EEE167E4C7DF960BB407411ECE5F9ECAB8C1F6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:7d:0d:42:92:5c:28:d8:71:1b:9d:f7:49:
a3:37:8b:3e:0d:0f:3b:55:8f:5f:02:dd:74:ec:b1:
13:0a:53:12:7f:38:30:a9:6c:36:de:c6:55:0d:df:
10:5e:3f:32:a4:65:c9:1f:4d:df:d9:d6:ad:bd:04:
d1:e8:34:83:8e:01:56:26:80:91:43:ab:b6:2e:32:
a7:a1:e9:34:1b:84:2e:0b:96:b5:43:c3:15:e5:13:
7c:85:ee:43:39:a4:66:19:8d:fb:6f:51:97:e4:96:
18:db:f7:cb:92:94:00:7d:55:ed:4f:43:92:c9:30:
1e:c0:33:fa:b9:bb:0c:f7:c7:6d:43:b3:eb:3f:cf:
c1:6a:f3:42:13:fd:02:51:7f:4a:7f:81:59:e4:52:
42:a8:17:c9:9d:ff:32:da:2e:9b:5f:68:bd:23:7c:
d0:16:f4:bc:bf:1f:bb:24:0c:13:c7:0a:d1:9d:d0:
0e:68:99:4a:8e:0d:d1:c2:23:be:81:fa:2d:37:f0:
20:93:cb:88:49:54:d0:d3:e9:6e:80:49:32:db:9e:
7b:2a:2a:f2:63:79:a1:b8:e7:c7:83:f7:aa:ab:35:
4d:35:19:39:71:35:ed:35:cf:28:47:6d:fa:3f:7e:
72:09:7a:21:81:2c:f9:6e:d6:ab:43:7a:47:ca:69:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:16:7E:4C:7D:F9:60:BB:40:74:11:EC:E5:F9:EC:AB:8C:1F:6B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139342e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.194.0/24
Signature Algorithm: sha256WithRSAEncryption
63:07:eb:36:00:f3:ab:9b:3c:61:6e:9b:25:f7:5f:09:06:81:
a6:60:28:43:27:30:bb:a8:bf:18:84:d5:79:c9:3d:af:4a:d7:
f1:83:56:09:01:37:03:1c:72:3e:77:3b:5d:d8:69:09:b7:19:
d9:0d:79:ac:17:07:4c:01:a6:d1:25:2a:24:22:29:3d:1d:f8:
a8:fb:c0:30:93:e4:c5:f4:2d:67:22:10:d0:b6:a9:4f:e8:2c:
4e:09:24:bd:85:99:1c:73:04:a1:b8:31:93:73:64:ff:7f:ee:
5b:82:81:70:e1:41:69:56:db:d5:e4:2b:e9:63:6e:b7:ad:7d:
07:6c:9e:f0:91:18:6c:4e:82:4c:c2:e3:9d:a0:39:04:11:61:
f1:56:ef:ec:7b:46:a8:dd:27:a8:ba:35:d2:bb:43:fa:f0:9c:
02:1f:fb:28:25:d3:11:1d:1d:ff:d9:17:f9:c0:8a:93:cf:41:
00:9c:3f:6d:b0:27:0d:ea:75:33:65:18:7a:d7:38:62:67:25:
1a:fd:32:37:ab:5a:6b:52:f6:68:00:5f:cf:d6:22:72:62:38:
a8:46:c6:56:c2:f3:df:04:df:ed:fe:61:53:ac:3a:75:b6:b2:
0f:dc:3e:d7:d3:c9:85:2d:0f:44:6b:dc:e6:91:81:b4:db:8c:
bc:93:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:02 2025 by rpki-client