Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
File: 34352e3134332e38322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: p2Lg6we1C+z0SgVGDGgVHky0wIBbLhhJS6lnuM9bUVI=
Subject key identifier: D2:E3:93:B6:CE:32:99:BC:EE:29:34:E4:FE:DF:42:90:61:F4:62:75
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4029BFC3C9603A41549077597B893AA16BCF5170
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:33 +0000
ROA not before: Fri 20 Dec 2024 15:18:33 +0000
ROA not after: Fri 19 Dec 2025 15:23:33 +0000
asID: 136787
IP address blocks: 45.143.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:29:bf:c3:c9:60:3a:41:54:90:77:59:7b:89:3a:a1:6b:cf:51:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:33 2024 GMT
Not After : Dec 19 15:23:33 2025 GMT
Subject: CN=D2E393B6CE3299BCEE2934E4FEDF429061F46275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:8a:0e:53:7e:b9:f2:ae:50:e1:d9:8f:5a:
a9:a1:07:cb:cd:6b:bc:80:06:b1:8d:4f:e3:1b:cb:
e2:b9:79:dd:50:cd:74:b1:af:94:7b:fb:2a:e2:b6:
b8:92:ec:81:11:cf:4f:08:ab:92:73:ca:86:01:f1:
35:6e:58:69:2b:0c:db:e9:26:b3:4a:21:37:de:3f:
6e:b9:0a:ba:3a:23:e2:87:10:e3:2a:b4:6a:e7:72:
7e:7f:a4:57:0d:ab:df:a2:a8:54:f2:63:50:dd:81:
c7:29:b5:07:44:3d:c6:37:5d:ff:56:fd:92:ac:e4:
37:1f:28:a4:b3:68:39:2a:13:fa:6c:43:cd:03:a4:
88:02:67:01:e9:8d:ef:36:f8:e3:e6:73:06:91:c7:
e5:60:d1:32:4f:cc:7d:df:52:94:34:3d:f8:11:17:
5a:35:1e:ee:e8:5c:f8:a0:30:5f:cb:8f:4f:fd:ba:
f3:7f:32:ae:fc:ba:7b:cb:b5:93:04:8c:b2:d6:10:
5a:b4:ac:51:0d:e5:f0:24:d3:96:09:4b:7c:d8:28:
77:0b:f0:a3:a3:95:b4:1b:81:5c:ee:f8:de:1b:f8:
37:c8:2b:d0:97:5a:3c:60:19:79:03:ea:e0:07:8e:
5e:74:e4:ec:c2:5b:b1:80:55:8b:58:f1:f6:55:07:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:93:B6:CE:32:99:BC:EE:29:34:E4:FE:DF:42:90:61:F4:62:75
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.82.0/24
Signature Algorithm: sha256WithRSAEncryption
44:85:4d:be:c7:9a:ce:82:ca:ef:a5:18:ca:db:ca:c4:c4:26:
35:64:a0:0f:3d:29:24:d3:1e:9a:4c:ab:08:c8:a2:e6:fb:36:
39:55:5f:61:cf:23:82:80:9b:aa:e3:e8:1a:60:1d:32:5c:66:
48:96:7d:39:72:c6:77:c5:b1:fb:52:38:f5:64:b0:0d:19:f7:
28:19:9e:84:21:9f:32:ad:07:d4:57:dc:fa:b3:f4:93:67:57:
7d:b1:e7:80:8e:e8:b4:c5:de:8f:22:71:89:b0:75:af:05:78:
81:b5:2c:eb:52:cd:26:dd:cc:ac:18:8f:fe:c9:e6:d8:80:f8:
d3:07:f3:ef:8d:75:2a:8c:ad:79:b9:67:cd:0e:0c:27:4b:40:
55:bc:c2:1f:db:f2:52:7f:b0:04:43:49:07:9f:85:de:37:d9:
f3:6f:93:9c:0c:20:97:aa:fa:a0:ec:1d:45:04:87:d2:d0:5c:
4a:ee:fa:2f:5a:3c:03:9a:07:89:86:3c:b1:58:e2:47:73:7e:
f2:42:e6:61:b1:30:48:57:43:e5:e8:72:7c:ba:9a:e5:5f:dc:
bd:fe:b5:fe:aa:30:11:b7:58:d9:ce:b8:a0:40:f8:4b:54:ff:
ef:74:6c:cf:8f:21:db:01:38:31:c4:59:2c:9b:fe:2a:88:91:
ae:95:52:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:35 2025 by rpki-client