Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa
File: 34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ULprU20Nepr8JbT3wROsn9e4o+RCe2Mq9XJzi6/0IN0=
Subject key identifier: 2E:2F:43:0E:7C:D6:43:A6:9B:A0:82:C9:F0:A0:0A:12:B7:D5:BC:22
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 71C3B8764B301B39471AFC74E51675AB0847D518
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 136787
IP address blocks: 45.147.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c3:b8:76:4b:30:1b:39:47:1a:fc:74:e5:16:75:ab:08:47:d5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=2E2F430E7CD643A69BA082C9F0A00A12B7D5BC22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:76:b0:5f:0c:cc:a8:a7:55:5d:52:4e:f5:
05:c7:04:11:31:75:eb:c9:2c:e9:99:c6:f3:a8:d8:
75:93:4f:9e:ac:2e:66:f2:b6:39:0f:56:01:b7:e6:
b9:09:29:09:04:85:eb:6c:60:d6:3d:a4:7d:e9:94:
8f:3f:fb:cb:97:e6:6f:58:84:31:4f:92:2b:ff:56:
82:80:9d:e1:d1:1d:e4:d8:a2:d3:29:a2:f5:4e:f0:
22:b1:cb:60:cb:74:59:f7:91:bc:39:39:ab:f2:f1:
54:fd:db:9e:fc:28:75:3f:e3:a2:91:19:fa:c9:75:
31:00:d7:7a:49:fd:b7:d1:ca:71:d8:d9:95:d7:33:
bf:5d:6b:97:77:0e:bd:22:26:65:a6:82:ad:0b:0b:
15:fa:fd:97:f8:6b:4d:68:25:32:6e:42:8c:0c:51:
ac:b6:8a:fa:f1:53:5d:3c:ad:00:ed:dd:30:59:e9:
0e:3d:b1:ac:f3:cd:6c:3d:e5:cd:83:39:5c:e8:ae:
28:0d:49:31:a9:73:f4:5a:e5:e3:ed:46:03:be:ec:
fc:fa:d6:b5:17:b7:e8:70:7e:65:5b:92:4b:8b:4c:
ee:2d:6e:21:f3:32:34:12:12:57:8c:de:61:22:aa:
8b:67:6f:f7:4b:f1:10:ae:be:9f:55:99:15:3d:14:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:43:0E:7C:D6:43:A6:9B:A0:82:C9:F0:A0:0A:12:B7:D5:BC:22
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.172.0/24
Signature Algorithm: sha256WithRSAEncryption
95:34:30:53:d8:ae:28:99:dc:d3:84:8d:3e:c4:05:a5:70:33:
52:d2:9e:16:ea:ce:5c:14:10:3a:15:8a:11:20:28:52:e9:e1:
8d:a7:f8:e5:58:cd:55:b8:2d:85:b6:2b:ca:7b:62:b0:1a:98:
4b:e7:3b:42:7c:5e:3a:05:25:e6:02:89:84:12:f8:ac:73:07:
49:db:47:5d:b5:d7:ea:1f:24:85:96:88:98:df:d0:31:52:8a:
81:d2:5a:ab:7c:ac:f9:01:f3:dc:a0:a3:bd:2f:14:62:77:0e:
00:11:a2:0f:8d:3b:9c:d3:d2:6b:6c:72:de:76:09:64:d6:a9:
9b:b5:2d:9b:a4:9f:2d:e4:38:91:a3:8b:7f:2a:a2:1d:a5:a0:
78:c1:a1:14:8f:09:69:03:58:ad:fe:fc:e8:cb:86:0c:fa:df:
d1:4e:86:5f:9a:00:01:fb:52:d1:14:2e:f1:00:6b:24:f0:e6:
10:5f:df:52:6b:b9:b0:51:20:da:33:f4:bd:78:b3:50:91:a9:
42:58:88:fd:3d:a4:b8:7c:7f:e1:9b:d2:f1:9b:53:bb:8a:9c:
9f:5a:7e:5c:a4:19:92:09:29:c8:24:6d:8b:2c:25:0d:49:a2:
4d:85:f7:84:2f:41:b4:5e:19:b6:63:e3:03:51:23:f0:41:05:
6d:34:c1:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:57:25 2025 by rpki-client