Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38302e302f32332d3234203d3e203437353833.roa
File: 34352e3134332e38302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: TiIQGll6qMvw2vB86K9xBdMiHzUW6SrD/zaKN1f89dY=
Subject key identifier: 44:31:99:38:4D:4F:5A:FA:85:55:83:E5:A4:5E:3F:3F:90:8E:80:EB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 07852A932A331217F620D949D5CE36F3D0EC568E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38302e302f32332d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:28 +0000
ROA not before: Fri 20 Dec 2024 15:18:28 +0000
ROA not after: Fri 19 Dec 2025 15:23:28 +0000
asID: 47583
IP address blocks: 45.143.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:85:2a:93:2a:33:12:17:f6:20:d9:49:d5:ce:36:f3:d0:ec:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:28 2024 GMT
Not After : Dec 19 15:23:28 2025 GMT
Subject: CN=443199384D4F5AFA855583E5A45E3F3F908E80EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:ae:d0:05:f7:69:8f:6e:4e:53:85:76:dd:
76:d7:fa:5f:72:4f:f0:a0:47:0c:7a:c3:a3:8a:ad:
0c:6b:1d:a6:0b:df:84:9a:02:e6:1b:14:6d:37:38:
f7:cc:1b:89:fd:9f:05:57:89:c4:3a:8e:9c:7a:e9:
6a:7d:a2:54:38:74:d1:76:0a:f3:79:49:63:62:9e:
fa:a9:5f:a5:f4:09:0e:6d:d0:c0:22:bf:a4:95:77:
ea:38:6e:e9:35:22:e9:b5:d6:84:f1:c3:e2:4f:59:
ff:66:6c:65:ce:6c:37:b5:da:77:9d:55:25:51:dc:
8e:95:4b:c5:a6:5f:fd:36:6f:b3:52:86:eb:19:26:
68:94:ab:fd:69:6a:2e:2a:2c:59:ec:c4:6f:85:79:
6f:7d:9f:51:2f:10:09:d1:7d:9e:67:eb:89:20:78:
3a:26:c2:80:02:1d:7f:8b:72:bd:f1:bc:91:27:4b:
bc:1d:99:10:de:37:ef:2b:8f:2a:eb:be:c2:b2:84:
91:6f:f0:d5:7b:a3:d2:0a:f2:4e:20:96:6f:09:18:
f4:8c:80:c1:4a:0f:7b:59:f2:50:28:34:46:6c:02:
82:cd:1e:ce:8b:9a:8f:60:d1:1f:7b:98:8f:f9:13:
3e:fe:2c:a7:b3:de:4d:38:98:ae:6f:9c:98:dd:1f:
23:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:31:99:38:4D:4F:5A:FA:85:55:83:E5:A4:5E:3F:3F:90:8E:80:EB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.80.0/23
Signature Algorithm: sha256WithRSAEncryption
33:f2:80:15:97:dc:ca:24:84:b4:a4:29:9b:89:ed:87:6e:b5:
49:ab:f2:df:0d:78:ab:36:e2:ee:a2:f1:e1:d6:36:6a:37:e5:
77:d8:06:42:86:64:e2:7e:c4:a6:6c:65:e8:89:45:5d:4d:ac:
e6:c2:eb:62:c9:c5:bb:97:9f:59:db:35:d2:c4:d2:0a:21:56:
43:5c:85:fb:2e:1d:f2:20:7f:18:75:5b:89:cf:9f:cf:54:bf:
7e:c0:31:c0:1f:5e:45:99:10:cc:a3:8d:a6:cb:dc:c6:a1:d8:
04:83:de:3d:12:d6:f6:4a:05:bd:3d:e9:d8:ba:6c:bc:b0:ef:
84:c8:e8:57:1a:b9:0b:18:60:94:43:07:b7:23:48:14:4c:bc:
c0:94:a4:b2:19:09:86:db:e4:20:c9:b5:67:bf:44:19:f9:30:
a5:ec:27:d8:55:6b:22:3e:4e:b5:0a:15:07:00:f1:b7:85:0f:
d2:1f:94:26:f1:4f:06:df:54:f6:38:ae:68:53:09:bd:83:a4:
ce:32:dd:5a:7a:dd:01:ef:14:6b:9b:9c:b8:d2:1d:9e:48:d2:
a7:ec:90:ae:70:55:82:51:4d:b0:af:a9:e6:4d:fe:1f:d1:62:
00:b4:3c:be:2a:77:1b:06:f5:a3:a5:bf:94:ef:62:83:93:dc:
5a:a7:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:20 2025 by rpki-client