Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232312e302f32342d3332203d3e203531313637.roa
File: 34352e36372e3232312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: pOLQ7ZMM62zH9XirZgcxZ8k1DDi5+q0zPunktKtA+dA=
Subject key identifier: 46:F0:36:15:3C:A7:AB:74:51:20:43:04:46:91:7F:3A:BD:62:64:EB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 135B9DB9D2D18B4CF2C4C07163E11160146EF796
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:08 +0000
ROA not before: Fri 27 Dec 2024 11:42:08 +0000
ROA not after: Fri 26 Dec 2025 11:47:08 +0000
asID: 51167
IP address blocks: 45.67.221.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5b:9d:b9:d2:d1:8b:4c:f2:c4:c0:71:63:e1:11:60:14:6e:f7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:08 2024 GMT
Not After : Dec 26 11:47:08 2025 GMT
Subject: CN=46F036153CA7AB745120430446917F3ABD6264EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:67:fe:98:a3:a0:27:71:7a:8f:2a:1a:81:59:
bf:12:f0:85:e1:f2:81:f5:8f:fd:b8:e1:3c:94:6d:
ac:ec:e3:9f:ce:d3:7c:9d:a9:82:f3:4e:92:b9:91:
81:20:14:80:39:26:98:40:b7:dc:bd:65:98:f8:6f:
7f:0c:94:0c:53:a1:02:97:4c:dc:c6:40:37:04:c6:
3b:59:de:31:4b:30:7e:c6:8d:81:87:e8:2d:85:72:
53:92:e5:55:d0:0d:79:92:56:fd:93:94:5f:09:c3:
dd:01:f8:cf:fb:f3:d0:c1:25:fb:dd:7d:83:a0:de:
07:52:f5:89:3b:fc:f6:7a:1e:e3:25:6e:22:b4:d2:
29:bd:6f:16:19:da:c8:53:92:b2:6b:6e:4b:b1:2d:
e8:61:2b:6b:72:a4:1f:0e:7a:e9:e9:98:b4:f5:2f:
83:40:50:aa:6f:d7:51:da:59:1b:3b:2e:5a:55:b3:
c7:18:02:6a:4c:7a:9d:50:a1:1b:ae:42:d3:cb:b7:
5c:c4:7e:a5:a5:4a:86:35:f0:cb:ec:d8:73:f7:1b:
62:6a:60:c0:cf:ff:c8:1f:86:ec:13:b5:40:52:76:
e8:e5:6b:a5:4b:ad:51:4c:ff:b7:2c:c2:b1:14:1d:
c5:17:1b:bd:bc:f2:60:17:39:10:cd:1a:81:8a:8a:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:36:15:3C:A7:AB:74:51:20:43:04:46:91:7F:3A:BD:62:64:EB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:73:7d:42:99:cb:b8:b8:d7:21:33:c9:a7:47:14:3c:97:da:
71:dc:d6:c2:7b:d5:fd:0f:f4:be:31:22:1e:f5:d8:56:bf:73:
be:74:03:f9:8d:ed:47:5e:33:4c:fa:e4:db:5e:19:e1:3b:62:
2b:ca:cd:f6:53:49:d9:26:a7:79:8a:60:ce:86:18:40:da:89:
2e:62:65:f4:cf:98:42:9c:52:3c:16:41:70:cd:8e:fb:90:fa:
bb:47:ae:c2:e8:d9:96:4f:20:d7:97:58:23:8a:c3:dc:41:b0:
7a:1d:7b:97:c1:5b:a0:28:97:50:8f:60:d0:b5:b2:85:27:39:
32:06:94:41:06:f6:19:88:99:e0:35:91:14:1b:22:b3:bb:29:
ab:33:2f:56:ab:21:56:61:f0:5b:3f:08:7e:85:39:88:83:bb:
97:06:0a:6d:c0:8c:8f:80:ac:dd:41:f9:cc:b2:10:67:0b:18:
2d:54:a0:68:54:65:a4:f5:d8:fc:e5:2a:03:95:8f:df:f4:4b:
21:71:72:f8:2f:39:2e:59:80:c4:23:9e:0a:d8:62:f0:ae:32:
59:68:cc:d0:31:1d:eb:5f:58:25:52:29:87:72:33:3d:ab:a6:
61:33:dc:e9:f5:a1:13:69:ed:3c:f8:fb:43:a1:3d:4b:a5:4d:
5c:24:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:13:55 2025 by rpki-client