Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa
File: 34352e36362e3133362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: OmVGMNe/QUW7r8FEL048c0IyAhX9c3c45fkRJJ7631s=
Subject key identifier: 0B:FB:14:22:C7:F4:ED:00:1F:35:BA:62:54:6F:2E:BA:A9:F0:98:0A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 26652EE36D819DC37F44E389ABC08CD056871B2D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:26 +0000
ROA not before: Fri 20 Dec 2024 15:18:26 +0000
ROA not after: Fri 19 Dec 2025 15:23:26 +0000
asID: 136787
IP address blocks: 45.66.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:65:2e:e3:6d:81:9d:c3:7f:44:e3:89:ab:c0:8c:d0:56:87:1b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:26 2024 GMT
Not After : Dec 19 15:23:26 2025 GMT
Subject: CN=0BFB1422C7F4ED001F35BA62546F2EBAA9F0980A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ff:52:63:77:55:6e:b3:a6:d0:7a:44:aa:95:
28:e2:32:36:80:ea:52:19:ba:d5:7f:cf:76:df:f9:
d2:bf:a4:80:e8:37:2f:4f:39:2d:ef:d3:b3:5e:8b:
4f:73:3a:97:14:84:d8:ce:ee:6e:a2:e8:f5:d4:ce:
2c:01:f1:c3:74:64:1f:65:14:b7:ab:72:6b:50:3c:
d9:2a:1d:70:da:ee:f0:d4:71:bd:c3:6d:a6:45:34:
00:ba:7c:a5:c7:73:58:ec:47:85:c6:c1:ec:97:55:
94:9d:f6:83:b0:a6:dc:1c:3f:6c:a3:58:11:a1:2d:
71:1a:19:1f:8a:26:f4:fd:a0:b1:d2:9e:52:98:ef:
a2:37:30:a9:1b:12:06:d5:76:6e:57:4b:40:ba:6d:
14:82:4e:4b:96:69:b3:d3:78:e5:88:1d:3a:d2:77:
32:43:6f:36:39:dc:03:c7:ea:6f:ba:c2:11:49:c7:
4d:51:36:b1:63:c1:de:40:34:95:78:a7:74:c1:ed:
51:dc:1f:1b:66:73:59:fa:16:d4:ac:bd:9d:2d:f7:
56:55:14:c7:e2:d6:1e:08:eb:7f:cc:18:e2:41:c2:
1c:e2:eb:dc:11:02:98:77:a5:0d:20:4d:51:b5:0e:
50:b6:06:87:2f:91:ce:38:e1:30:91:be:c3:98:f4:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FB:14:22:C7:F4:ED:00:1F:35:BA:62:54:6F:2E:BA:A9:F0:98:0A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8b:bd:c6:fc:72:1f:3e:c0:78:ea:3d:04:03:9c:f0:37:fb:
c2:c4:5f:eb:52:39:47:c5:76:c6:4e:83:f9:97:77:a6:1a:98:
d4:ff:d8:58:b9:4e:01:90:3e:b3:f1:9a:bd:ce:e7:58:6f:f6:
1d:ad:da:78:dc:2f:e3:a6:50:76:5e:10:63:28:ef:26:83:ec:
b5:ae:03:d7:f8:d6:5b:74:35:04:51:e6:30:2a:4f:9f:22:8c:
7c:4f:c4:10:0a:19:45:eb:44:f5:39:5c:f0:0f:25:54:a6:72:
b8:a5:7c:69:e4:9d:cc:d8:15:d4:d7:21:e3:9a:6d:17:a3:a6:
2e:fd:2d:0e:1e:d2:3d:9b:f8:ee:c6:d9:07:37:60:4e:1b:a2:
88:71:37:d1:ac:39:d3:46:d3:17:34:70:b5:f6:4f:8f:cd:b2:
85:9d:f5:ca:6e:eb:6e:c8:0d:1c:96:5d:02:eb:14:09:23:58:
58:de:7e:62:76:f1:27:e1:13:ac:79:d4:b5:18:c3:d5:9d:77:
8a:68:d3:b5:f5:45:2b:7f:74:8d:9f:e6:52:92:ec:cd:b1:12:
a4:1f:2b:4f:62:7d:a7:57:d1:5c:c5:11:8f:9b:8b:92:fd:3b:
fe:43:d7:60:21:6e:37:b8:78:96:e3:2e:ea:63:56:65:15:3f:
a7:ff:84:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:08:36 2025 by rpki-client