Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34332e302f32342d3234203d3e20313336373837.roa
File: 34352e3135352e34332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: o6NnRbl7oOpqSmUev9RHGUBeYjLLmIReayBA9xY78RI=
Subject key identifier: 97:14:EE:95:41:53:E9:E2:A2:B4:46:83:7E:47:04:45:CC:13:4B:4A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 23AF8D50E9A293BF36E1951FC21E3915DB49AECE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:16 +0000
ROA not before: Fri 27 Dec 2024 11:42:16 +0000
ROA not after: Fri 26 Dec 2025 11:47:16 +0000
asID: 136787
IP address blocks: 45.155.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:af:8d:50:e9:a2:93:bf:36:e1:95:1f:c2:1e:39:15:db:49:ae:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:16 2024 GMT
Not After : Dec 26 11:47:16 2025 GMT
Subject: CN=9714EE954153E9E2A2B446837E470445CC134B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:c9:12:a9:83:82:79:85:5e:df:80:df:98:
bf:12:e2:d6:df:a1:fc:be:a6:ff:07:d3:fe:b4:f5:
e1:86:b8:f6:1c:da:c3:37:de:67:0f:ab:0d:37:0f:
9d:0f:67:9c:f6:a6:02:de:b4:83:86:6a:81:ef:b3:
37:f8:d6:72:98:76:cf:84:ca:a9:74:33:d9:b2:7e:
19:b6:a1:6c:d0:1e:9e:58:9e:19:52:a6:cf:4b:3a:
cc:77:d6:6e:24:a1:95:50:68:b5:9e:57:30:d6:ea:
d2:bb:6b:86:a3:10:fc:60:a3:7a:52:2a:68:81:82:
63:ee:4a:77:b9:f4:9c:87:67:ee:0b:76:af:01:26:
46:50:6f:c0:73:83:a2:f0:73:7a:3c:0d:85:f4:48:
79:b8:a6:30:82:7a:4d:9c:fc:d5:2e:b0:44:75:66:
05:11:0a:ec:ef:60:34:ad:77:d9:e8:41:b1:cf:6c:
ae:2e:8a:31:f8:ad:53:5e:12:81:23:56:a6:e9:70:
ba:99:98:c0:93:24:01:5e:52:2d:63:6d:25:42:8d:
75:a6:57:eb:20:0b:1e:e6:17:bb:78:8b:3a:26:34:
53:f6:7d:56:3c:53:5c:3a:fb:7a:34:8a:7b:be:75:
70:d2:ec:d1:c2:56:22:7f:f8:24:f0:68:c2:34:42:
49:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:EE:95:41:53:E9:E2:A2:B4:46:83:7E:47:04:45:CC:13:4B:4A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.43.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3d:50:bc:e0:01:81:cb:57:15:16:23:a1:ff:74:c8:22:16:
d4:ff:67:33:84:5d:6f:47:1a:23:25:06:54:d7:d6:87:7f:3b:
6e:ca:20:03:f6:21:5f:54:4a:86:97:04:e2:4e:7e:65:d1:37:
72:d6:ff:5a:2c:96:76:2f:4b:69:9b:61:ef:5a:e6:c4:f0:30:
50:72:be:03:da:91:a1:7a:26:60:d9:e1:de:d4:c4:28:8b:84:
99:73:37:a8:78:dd:77:db:61:e5:47:6e:74:ef:d8:f6:b6:3e:
57:8c:b5:7f:14:40:69:8b:67:39:08:7c:d7:66:e2:ad:2b:b3:
e3:5e:42:40:8b:f3:4c:08:51:a1:9c:d4:ef:88:0b:6d:1f:11:
77:03:65:80:82:18:12:b6:b8:bb:bd:70:46:d8:11:58:d9:dc:
dd:ab:1b:29:d2:b4:bf:fb:b9:61:33:6b:89:fe:2d:27:fd:92:
72:67:82:6d:3c:0b:25:b8:73:3b:6f:74:ce:a8:cc:13:3d:6c:
11:94:97:d2:0a:f3:66:94:ef:22:55:47:28:99:41:0c:11:ce:
77:86:82:44:ed:cc:f0:60:f7:dc:e1:60:36:d1:23:bf:b4:29:
45:4a:6a:a8:3a:ec:d4:a8:7e:5b:19:a1:40:26:10:7f:06:77:
04:18:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:21:17 2025 by rpki-client