Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa
File: 34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mIUrIyeYI0+cnn9joZs1WmZhJPOAivi6z7QiePT8Tn0=
Subject key identifier: 73:D6:85:B8:50:20:F2:38:31:7D:4B:56:B7:32:C8:26:99:6B:67:D4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 696FD97235A8111BDDF38ABB470B96A2AD298586
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 136787
IP address blocks: 45.147.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6f:d9:72:35:a8:11:1b:dd:f3:8a:bb:47:0b:96:a2:ad:29:85:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=73D685B85020F238317D4B56B732C826996B67D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:28:72:2f:bd:bc:98:5f:82:f2:3f:b2:1b:57:
e5:31:d5:86:2d:d5:7b:77:7c:19:57:1f:51:5f:e6:
12:45:c5:b3:d6:38:61:49:36:ab:c9:13:55:e2:3c:
8f:10:d6:1f:99:27:da:3d:2b:8d:cb:b2:e1:b9:66:
29:6c:ba:6b:82:8b:f7:b4:1e:bc:46:e6:58:18:10:
43:ed:a1:7f:1e:f5:e5:2d:3b:ca:db:7e:24:50:f1:
7a:f7:86:c6:d2:2a:bf:8a:3f:5c:9a:d9:fe:8d:79:
ce:e2:d6:73:9f:bf:d6:c5:e0:1f:9e:59:f4:9a:2e:
2b:6f:3f:14:cc:69:b6:e8:db:84:9c:ee:e6:58:b1:
25:17:fe:6d:4a:dc:b5:ca:7b:a4:29:10:21:6b:ca:
9d:4a:87:87:70:22:04:f7:60:19:c1:cf:5a:b4:96:
64:cf:a0:59:fc:04:2b:96:69:46:5c:26:c7:8a:39:
ce:29:69:c1:43:01:17:53:58:58:d1:fa:51:10:02:
f3:34:c7:bb:28:49:c7:eb:5e:a7:0d:b3:13:95:a6:
50:85:3a:5e:26:0f:02:c4:46:b5:4b:69:32:66:62:
38:8b:0f:f4:a3:c0:2e:fa:69:96:fe:1d:55:95:e0:
3d:d2:ae:06:8b:49:f8:df:f3:55:2f:93:6a:31:75:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:85:B8:50:20:F2:38:31:7D:4B:56:B7:32:C8:26:99:6B:67:D4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d3:3b:09:38:dd:97:02:46:5b:a3:c8:8d:1c:79:1d:89:61:
a9:a1:85:82:aa:31:c2:5a:51:34:c4:91:15:6e:2a:63:65:62:
30:1d:e1:e5:0f:2f:b0:91:cc:d5:06:94:5e:fc:bf:3c:22:fe:
9c:d0:74:85:b9:5f:7f:06:d2:6d:57:51:88:24:64:77:30:6d:
e4:ef:55:19:6d:b6:aa:4d:3f:c2:44:21:e3:fc:0b:2f:66:52:
d1:c6:7f:7c:ca:a6:e9:10:1a:16:7b:23:48:12:51:f0:ce:fd:
81:63:ee:91:ae:83:8e:8e:73:8b:c8:a8:81:f2:50:0c:ae:0e:
58:63:f0:57:df:44:3c:63:95:48:24:cc:fe:5c:92:6b:86:2b:
3d:44:b7:7e:a6:61:e3:61:a6:4b:38:8c:d2:4f:20:74:1d:ac:
9d:10:95:34:7c:39:65:52:c3:8f:11:35:07:b5:eb:98:62:c6:
0d:6c:fb:18:2b:a4:9a:81:8c:19:02:55:2f:0a:ae:b6:03:e0:
f4:ce:92:4e:46:c7:1f:6f:74:33:83:8c:c5:d4:a6:bc:35:81:
ad:7a:b9:93:3b:0e:4d:45:e6:0f:b3:3e:f1:13:52:62:6e:da:
4c:19:3c:7a:22:13:b9:68:a2:c0:08:14:0e:06:b0:90:c6:98:
11:e9:52:2a
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUaW/ZcjWoERvd84q7RwuWoq0phYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzFaFw0yNTEyMjYxMTQ3MzFaMDMxMTAvBgNV
BAMTKDczRDY4NUI4NTAyMEYyMzgzMTdENEI1NkI3MzJDODI2OTk2QjY3RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0KHIvvbyYX4LyP7IbV+Ux1YYt
1Xt3fBlXH1Ff5hJFxbPWOGFJNqvJE1XiPI8Q1h+ZJ9o9K43LsuG5ZilsumuCi/e0
HrxG5lgYEEPtoX8e9eUtO8rbfiRQ8Xr3hsbSKr+KP1ya2f6Nec7i1nOfv9bF4B+e
WfSaLitvPxTMabbo24Sc7uZYsSUX/m1K3LXKe6QpECFryp1Kh4dwIgT3YBnBz1q0
lmTPoFn8BCuWaUZcJseKOc4pacFDARdTWFjR+lEQAvM0x7soScfrXqcNsxOVplCF
Ol4mDwLERrVLaTJmYjiLD/SjwC76aZb+HVWV4D3SrgaLSfjf81Uvk2oxdcjLAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUc9aFuFAg8jgxfUtWtzLIJplrZ9QwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy
ZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC2TrzANBgkqhkiG9w0BAQsFAAOCAQEATtM7CTjdlwJGW6PIjRx5HYlh
qaGFgqoxwlpRNMSRFW4qY2ViMB3h5Q8vsJHM1QaUXvy/PCL+nNB0hblffwbSbVdR
iCRkdzBt5O9VGW22qk0/wkQh4/wLL2ZS0cZ/fMqm6RAaFnsjSBJR8M79gWPuka6D
jo5zi8iogfJQDK4OWGPwV99EPGOVSCTM/lySa4YrPUS3fqZh42GmSziM0k8gdB2s
nRCVNHw5ZVLDjxE1B7XrmGLGDWz7GCukmoGMGQJVLwqutgPg9M6STkbHH290M4OM
xdSmvDWBrXq5kzsOTUXmD7M+8RNSYm7aTBk8eiITuWiiwAgUDgawkMaYEelSKg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:58:14 2025 by rpki-client