Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa
File: 34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4bvbWNDm5R1pewEiCLZW+JqNmZ8hHPJC/TZzp6SAyWs=
Subject key identifier: 9C:A2:E6:1F:23:73:94:8E:10:80:10:85:82:76:6A:82:46:57:62:24
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 02DA334BBB98ABE2545325C0BA29B71F1B9B7865
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:35 +0000
ROA not before: Fri 27 Dec 2024 11:42:35 +0000
ROA not after: Fri 26 Dec 2025 11:47:35 +0000
asID: 136787
IP address blocks: 45.140.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:da:33:4b:bb:98:ab:e2:54:53:25:c0:ba:29:b7:1f:1b:9b:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:35 2024 GMT
Not After : Dec 26 11:47:35 2025 GMT
Subject: CN=9CA2E61F2373948E1080108582766A8246576224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:99:8d:9f:5f:8b:a0:66:a8:7e:28:0a:9c:
f3:68:30:14:df:37:4f:62:ab:02:cb:17:43:1a:61:
d6:57:88:d2:79:bb:74:2c:17:b3:c8:52:e4:03:c6:
24:c1:06:df:f0:5b:aa:9f:2a:36:db:fa:f7:7e:e2:
de:ad:08:f9:36:85:00:07:39:fa:1b:ba:5d:4a:42:
21:b7:a8:47:2a:26:3c:46:fb:a4:f7:79:29:9c:b3:
ab:45:f9:b5:87:a0:d2:61:92:6f:90:6d:fe:ba:6d:
0f:8a:bc:d5:d2:49:25:8a:18:99:0b:63:84:50:cc:
2b:3f:08:0e:f3:a5:e3:1a:e2:8e:31:95:cd:3f:88:
3f:a7:cb:fb:e0:64:fe:d7:04:83:d5:ab:bf:3d:1b:
ac:32:9c:66:90:3d:e9:a6:79:30:ea:68:a6:5a:8b:
16:bd:32:c5:5c:de:e3:2f:62:e6:b2:f7:94:f9:db:
58:4e:9a:da:aa:2d:b6:53:f0:e4:72:58:c2:f7:88:
43:c9:47:ba:ff:59:47:7e:ec:52:e7:d7:ed:89:88:
c0:a2:58:44:93:c5:ff:e5:3e:92:ad:24:4d:35:2d:
50:7b:80:84:11:e0:d5:b6:34:7c:de:13:1f:0a:4f:
00:da:27:d9:90:12:15:de:19:58:8b:a8:dd:1b:4f:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:E6:1F:23:73:94:8E:10:80:10:85:82:76:6A:82:46:57:62:24
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.184.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f1:d9:7d:ee:09:7e:fb:ca:b2:3c:da:1f:ad:11:07:14:e4:
c7:a1:98:b6:e0:9c:ea:4d:56:15:89:dd:d8:07:8a:04:2a:94:
02:f1:43:5f:e3:8a:68:fb:31:c3:64:62:ea:37:89:eb:68:a7:
e1:10:7f:f4:3d:8d:32:c2:28:b9:bc:a3:34:e5:c3:7b:cf:85:
8f:7a:9b:1d:34:92:a3:84:ae:67:8a:dd:be:16:83:7f:42:55:
d6:f8:b1:35:c0:f7:9f:f9:bf:7c:23:43:86:09:8a:79:30:02:
7f:31:a3:b2:22:aa:bb:b5:d7:d7:59:99:c4:34:a9:b8:4e:af:
55:14:0f:a5:0f:1c:39:7b:c1:3c:9f:5e:78:22:ad:47:1d:23:
07:85:de:92:33:4a:12:8b:23:fa:fb:e7:93:01:c2:42:53:f1:
6f:42:76:02:83:6c:41:5f:95:f3:61:da:0d:af:33:b0:18:59:
e3:b8:1e:fa:03:ab:d1:a6:7c:81:69:a3:e7:3c:6b:14:e7:53:
e5:fa:4a:ff:3d:ff:c9:d3:be:a8:04:ed:8c:72:a8:2d:da:97:
10:0b:c8:5e:73:2e:f1:9c:18:46:57:cf:f8:7b:e4:50:41:f6:
1d:a8:b2:96:00:cc:22:d8:e0:86:7a:d7:c8:7c:3a:bb:95:ed:
a2:ff:57:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:42 2025 by rpki-client