Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232302e302f32342d3234203d3e20323031333431.roa
File: 34352e36372e3232302e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: hMzTCczN8EFszyfNzTt8Qfa4ldtnZT9E2bRGiYTinso=
Subject key identifier: 00:0A:BB:2D:18:94:A3:AD:F1:A3:93:8D:5B:1E:88:B9:58:9B:CF:04
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 20E343B8F06A0079F7AB414F4D24C371DDB3DE53
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232302e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 27 Dec 2024 11:47:38 +0000
ROA not before: Fri 27 Dec 2024 11:42:38 +0000
ROA not after: Fri 26 Dec 2025 11:47:38 +0000
asID: 201341
IP address blocks: 45.67.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e3:43:b8:f0:6a:00:79:f7:ab:41:4f:4d:24:c3:71:dd:b3:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:38 2024 GMT
Not After : Dec 26 11:47:38 2025 GMT
Subject: CN=000ABB2D1894A3ADF1A3938D5B1E88B9589BCF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:ea:6e:51:b3:75:f5:9f:85:44:f9:05:29:
b9:48:a8:7a:96:01:43:f7:5e:17:0b:25:e9:a0:08:
47:3f:1d:a1:e4:c8:de:d1:8e:97:d6:c0:31:aa:3e:
32:f7:bc:0a:62:f4:06:ee:ac:fa:3d:2e:a7:fa:6b:
89:2a:a4:cd:0e:28:cc:3a:6a:1e:5b:40:7b:29:ab:
bf:2f:29:39:90:d5:f8:d1:9c:9c:b6:32:72:d8:d3:
a0:ed:63:94:a1:e3:ba:de:67:c8:c2:34:aa:dc:76:
f3:6f:9e:21:3a:21:84:ec:aa:00:55:d4:f2:2c:4a:
b8:9b:e3:23:21:27:fb:32:7d:dd:c2:9c:19:32:46:
4f:aa:2d:06:c0:9a:2c:91:77:4a:a2:d4:85:c4:b2:
bc:dc:40:f4:dd:1f:8c:84:e5:f4:ec:7a:36:50:7d:
6b:57:15:cb:fb:62:21:25:0e:f9:e3:c2:bd:f5:50:
6f:25:0f:07:e3:9b:6c:f3:05:04:20:ef:87:e2:1e:
ca:5d:07:c4:e4:47:b0:ed:eb:c5:a0:d1:e7:bb:99:
ff:9b:0c:d3:c0:3b:43:79:e5:c3:09:27:f6:c2:2e:
fd:c8:26:2c:59:30:bc:95:0a:dc:8d:d4:a3:f2:fa:
ce:6e:6d:cb:2e:ee:a3:49:e9:68:d4:45:4e:e9:df:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:BB:2D:18:94:A3:AD:F1:A3:93:8D:5B:1E:88:B9:58:9B:CF:04
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232302e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.220.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:67:d9:33:ae:bc:0a:8b:c9:ea:8a:db:74:e4:b0:ef:3a:a4:
8b:f1:a4:ee:44:55:f2:99:11:55:4c:ab:22:31:51:e8:b5:45:
9f:c4:f0:2d:2e:9a:e3:35:f3:e3:4f:2b:68:21:f3:f5:c5:61:
6e:de:d0:89:28:e0:6c:f9:55:d1:a3:86:f9:eb:80:63:39:f3:
2e:35:5a:9f:f0:1e:99:25:62:0e:2e:53:6e:f4:e6:9c:de:0b:
bc:aa:a9:5d:58:c1:73:e5:8c:eb:c8:a8:a4:39:c0:e2:00:84:
7e:1d:a9:02:15:cb:5e:4a:8e:0b:91:aa:a7:f9:0d:d5:98:63:
30:1d:0f:03:cf:86:c2:e0:7e:d1:d2:ff:d4:6a:48:be:81:17:
e7:66:96:74:10:42:61:f3:97:6e:80:14:c3:ae:51:b4:5b:97:
43:0f:4b:fb:5d:9a:12:e2:c4:e9:0f:a6:ab:ab:f1:52:24:9f:
98:58:0b:bd:45:95:bb:59:ab:52:f9:81:cc:3a:ff:bb:29:ed:
69:7c:3d:c3:fe:55:57:b1:30:3e:53:0e:69:ac:54:5c:43:f4:
a2:32:53:7c:4a:30:6b:fe:a0:0e:32:c8:6b:03:e6:e8:1c:0c:
e9:04:a4:8c:dd:8c:ec:ad:a4:b6:d8:16:64:31:af:af:5b:33:
18:56:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:41:47 2025 by rpki-client