Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa
File: 34352e3135312e3132302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: qxrtcGqHO/+nGDAXF/6Wetr4Bt6SdVs8mH10Je2c9rI=
Subject key identifier: 2E:24:FB:C2:2A:D9:94:CD:54:20:B0:0F:A5:28:C4:FE:6A:3F:17:38
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 08EDA6780A2B97EC9CC1D17D09A545F7461CF28C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 47583
IP address blocks: 45.151.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ed:a6:78:0a:2b:97:ec:9c:c1:d1:7d:09:a5:45:f7:46:1c:f2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=2E24FBC22AD994CD5420B00FA528C4FE6A3F1738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:3a:2c:9c:b1:8b:a6:41:03:22:32:68:05:
4d:19:cb:b7:9b:92:b8:d5:c6:d0:6d:4c:9e:4b:1c:
f7:e2:94:a0:63:2d:b0:2c:c1:a0:d2:08:dc:be:7b:
bb:4e:46:b4:b7:ab:c3:0c:b7:a7:f5:91:0c:76:9d:
d8:45:9b:f8:b7:51:cc:30:d2:1e:a4:40:3a:92:10:
92:f5:ec:db:be:68:5c:52:57:27:bc:8b:e4:c4:83:
01:66:81:53:e6:9a:91:21:21:ff:d6:bb:6f:4c:cb:
e2:71:1e:c0:cd:5a:eb:16:f0:c2:c4:27:39:d5:6c:
7f:64:ed:04:83:99:53:e0:93:c7:2b:9e:21:08:b2:
64:8e:92:2d:92:29:0a:5f:8a:a3:18:c4:a1:8b:9d:
5f:39:50:a1:c9:02:eb:90:57:3f:fa:8a:56:d8:93:
94:45:13:60:7a:08:58:2b:d7:f8:16:f1:e8:a9:3e:
91:e0:20:d6:c5:74:ee:5b:fa:61:3f:9a:ee:e6:4a:
2a:6c:c6:d7:9c:3b:a7:e3:fb:29:c6:d4:6e:76:ac:
e1:90:b0:28:21:cc:6c:64:0b:94:42:a8:75:82:99:
39:cf:e7:df:4c:57:92:b1:82:57:04:e8:a8:82:9a:
89:9b:d9:2c:e8:b2:6d:bb:2d:b9:9c:f7:07:dc:ad:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:24:FB:C2:2A:D9:94:CD:54:20:B0:0F:A5:28:C4:FE:6A:3F:17:38
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:ed:83:d6:4f:0d:e6:e8:f8:ec:08:8b:c1:98:c3:f9:f3:fb:
34:f2:ea:82:89:14:6d:d7:32:c2:a5:a7:a7:4f:0c:ca:cc:74:
0d:c3:77:cd:4f:95:ca:85:e9:66:d6:48:40:f6:1b:ed:6b:5d:
bd:cc:47:d5:c2:2e:24:bc:b8:37:ac:90:09:a1:61:9d:40:ab:
a9:63:10:e7:3f:63:0d:f3:10:db:26:22:f0:fa:f2:bd:aa:89:
d6:43:b0:4a:ff:df:f4:8d:5d:8d:22:ca:46:0f:bb:52:c6:4f:
b7:1c:8c:3e:d7:1f:5e:97:65:b9:d7:64:ea:cd:02:b3:65:97:
1e:91:4e:43:45:cf:59:05:89:67:bf:99:86:ed:17:47:fd:d5:
b2:44:85:cb:73:65:93:98:4b:30:37:b9:6d:bd:33:6f:f7:75:
1e:4c:81:f2:4d:fb:27:e6:62:af:dc:91:7b:f2:89:ec:39:b2:
86:0b:32:c3:9c:42:7a:37:d3:15:d4:b0:d6:ee:93:d7:fe:48:
df:2d:a3:e4:51:c2:01:1b:5b:86:6a:23:bd:89:47:5c:2a:af:
b9:86:02:ae:7d:fd:34:85:26:d0:ab:2b:6f:ea:4e:31:05:6f:
d1:2f:70:cf:ba:1f:d0:27:da:77:61:62:05:06:36:6b:08:3b:
62:b3:9a:d4
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUCO2meAorl+ycwdF9CaVF90Yc8owwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzdaFw0yNTEyMjYxMTQ3MzdaMDMxMTAvBgNV
BAMTKDJFMjRGQkMyMkFEOTk0Q0Q1NDIwQjAwRkE1MjhDNEZFNkEzRjE3MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa1DosnLGLpkEDIjJoBU0Zy7eb
krjVxtBtTJ5LHPfilKBjLbAswaDSCNy+e7tORrS3q8MMt6f1kQx2ndhFm/i3Ucww
0h6kQDqSEJL17Nu+aFxSVye8i+TEgwFmgVPmmpEhIf/Wu29My+JxHsDNWusW8MLE
JznVbH9k7QSDmVPgk8crniEIsmSOki2SKQpfiqMYxKGLnV85UKHJAuuQVz/6ilbY
k5RFE2B6CFgr1/gW8eipPpHgINbFdO5b+mE/mu7mSipsxtecO6fj+ynG1G52rOGQ
sCghzGxkC5RCqHWCmTnP599MV5KxglcE6KiCmomb2Szosm27Lbmc9wfcrbgTAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQULiT7wirZlM1UILAPpSjE/mo/FzgwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MzEy
ZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEtl3gwDQYJKoZIhvcNAQELBQADggEBAKftg9ZPDebo+OwIi8GYw/nz+zTy
6oKJFG3XMsKlp6dPDMrMdA3Dd81PlcqF6WbWSED2G+1rXb3MR9XCLiS8uDeskAmh
YZ1Aq6ljEOc/Yw3zENsmIvD68r2qidZDsEr/3/SNXY0iykYPu1LGT7ccjD7XH16X
ZbnXZOrNArNllx6RTkNFz1kFiWe/mYbtF0f91bJEhctzZZOYSzA3uW29M2/3dR5M
gfJN+yfmYq/ckXvyiew5soYLMsOcQno30xXUsNbuk9f+SN8to+RRwgEbW4ZqI72J
R1wqr7mGAq59/TSFJtCrK2/qTjEFb9EvcM+6H9An2ndhYgUGNmsIO2KzmtQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:33:14 2025 by rpki-client