Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
File: 34352e36372e3232322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: pED8WRWBrd1u3Zcrh9UFHYiFpuA2qjT4TBQ2Hvy0Tqk=
Subject key identifier: 86:FD:AE:88:E3:E1:0E:4E:CB:38:FB:EA:D9:61:37:86:E7:C2:5C:5F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 79043E076A71F67B3A1A8C4AAA79F97C289F7F9B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
Signing time: Fri 27 Dec 2024 11:47:24 +0000
ROA not before: Fri 27 Dec 2024 11:42:24 +0000
ROA not after: Fri 26 Dec 2025 11:47:24 +0000
asID: 61317
IP address blocks: 45.67.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:04:3e:07:6a:71:f6:7b:3a:1a:8c:4a:aa:79:f9:7c:28:9f:7f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:24 2024 GMT
Not After : Dec 26 11:47:24 2025 GMT
Subject: CN=86FDAE88E3E10E4ECB38FBEAD9613786E7C25C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:5a:3b:dd:a5:df:22:8f:58:f7:93:32:e1:
cd:bf:c0:10:b6:e5:c5:09:0e:f3:aa:9b:67:d0:9e:
7c:f5:8a:01:cd:50:8c:4e:50:a9:3e:d6:ff:d7:75:
d2:d7:b1:0c:13:86:e1:0e:c1:fd:24:6a:34:07:50:
f5:f1:7c:d0:12:bc:b1:cc:53:6c:c2:bc:19:b3:c9:
4a:bd:07:7e:5e:09:3d:c9:00:81:d9:e5:39:dd:c8:
05:3d:c5:53:48:98:83:fe:23:4e:be:6a:71:02:f9:
db:b7:2c:11:71:a3:60:0b:28:c2:15:c8:d5:a9:27:
94:d3:d8:0d:64:26:b4:97:b3:74:6e:c6:72:ec:c3:
f4:a1:88:4f:83:4a:d8:8f:af:7e:0b:6e:54:74:1a:
de:79:f9:0b:ee:86:1d:49:6b:48:a4:ba:b2:d5:73:
7b:0a:13:72:5f:43:ee:0b:3c:6b:a6:4c:d2:bf:59:
fd:2c:d7:2f:b6:5c:21:9f:5e:1c:e6:ee:13:ed:70:
c3:fc:c9:26:f9:96:8d:b8:72:22:3d:63:f0:61:b6:
f8:1e:ad:32:99:96:ee:4a:de:27:e5:d9:e9:73:23:
55:bc:1e:73:33:05:7b:7f:f2:9a:cd:22:99:0a:0a:
bd:f0:13:3a:a6:e1:42:58:88:4e:08:1a:41:c5:7f:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:AE:88:E3:E1:0E:4E:CB:38:FB:EA:D9:61:37:86:E7:C2:5C:5F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.222.0/24
Signature Algorithm: sha256WithRSAEncryption
91:f1:ec:de:84:89:30:9f:35:bb:82:7a:05:22:86:26:3f:a6:
0e:5f:0c:a6:0a:8b:5d:f2:49:6b:6c:f5:2e:36:df:f7:d7:41:
d3:e9:1f:9c:a2:c1:21:a1:ad:10:9d:d8:f9:84:24:63:b8:64:
8a:80:74:7d:d8:38:f6:3d:dd:4b:6e:37:a6:be:92:92:ae:d4:
31:88:8a:0c:69:bd:c1:43:ca:fc:08:a5:a5:09:95:a3:53:a1:
86:45:98:52:77:ab:3d:e3:90:3d:88:83:48:cc:6b:e1:2d:f1:
63:9b:6d:29:80:dc:71:44:7e:bf:07:a1:47:04:17:38:48:6c:
e4:f5:25:0b:82:9a:0f:fe:61:5a:d7:df:d1:fc:f2:a0:85:21:
e7:fe:32:ae:20:e5:1c:5e:7f:85:7d:1d:ee:1a:de:4b:c4:75:
0c:26:ce:bb:93:24:0c:2a:59:da:f1:63:d1:49:4b:dc:24:e3:
96:0b:f9:1f:55:cf:20:77:8b:8e:6c:04:b6:99:cc:69:e5:2f:
fa:dd:20:02:4b:bc:2b:4e:f3:eb:32:15:7c:a6:82:f7:d3:07:
42:3c:00:fb:a6:19:6b:97:56:1a:75:2e:82:00:48:5f:a8:90:
f6:e2:2c:52:8a:73:53:04:b6:aa:92:0d:91:ab:39:35:e4:7a:
37:4c:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:22:19 2025 by rpki-client