Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
File: 34352e39302e3232332e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: JBZ4XvGdyHBrB2LI6p8aOweFl5h8TXQP5QrQQ5aov0w=
Subject key identifier: 10:72:45:B7:CF:08:35:57:FC:AD:99:F9:D9:F7:9B:9C:36:17:09:AF
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 63FE9C911C0923DE7450A59E0BAA083EF1D5DDBB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 47583
IP address blocks: 45.90.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fe:9c:91:1c:09:23:de:74:50:a5:9e:0b:aa:08:3e:f1:d5:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=107245B7CF083557FCAD99F9D9F79B9C361709AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:03:8f:1e:6c:9c:eb:5a:fc:67:79:de:3f:
5d:c8:69:7f:10:13:74:95:52:29:14:fb:32:13:3c:
35:42:a1:62:82:53:f1:73:ed:8b:a4:0e:6a:81:58:
d8:35:d3:7e:60:58:43:98:eb:81:f1:46:2f:83:34:
2d:da:f3:8d:2c:22:b3:14:aa:9e:36:2a:75:62:f9:
6f:10:dd:76:3b:80:ae:10:45:f7:e8:97:ac:72:88:
7f:0c:be:12:1e:66:00:2f:c6:5c:01:c0:3d:b3:0d:
08:62:49:d0:9a:99:25:1d:d7:35:27:e4:86:bb:d1:
8c:08:1f:fd:b4:b1:22:89:97:63:4a:4f:48:86:c0:
d1:b1:f1:f4:b4:d0:d7:20:10:aa:74:10:25:46:69:
ee:5b:a7:4d:a9:ca:23:cb:3d:8d:06:ea:26:06:9e:
9c:7e:82:de:90:4f:67:b7:a0:8d:8b:b8:b5:24:83:
c2:15:42:ce:c9:42:82:eb:c5:dd:e6:0d:cf:53:36:
b4:b7:b4:22:c3:c0:f4:b4:81:3b:8b:a7:5a:3b:16:
fa:57:e8:21:10:51:1c:4c:8f:6a:e7:4b:35:34:5c:
21:59:1c:61:da:ed:3b:a2:e3:9b:dc:7e:8b:9b:a6:
14:6e:53:31:1f:4a:d9:99:0e:aa:c6:3b:9e:75:a6:
17:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:72:45:B7:CF:08:35:57:FC:AD:99:F9:D9:F7:9B:9C:36:17:09:AF
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4b:6d:61:e0:12:f1:3e:e3:d7:dc:b2:c9:7e:2a:b9:a1:a6:
ba:1f:74:a0:4b:47:4d:d1:2f:f9:ff:42:bb:d9:bb:20:ea:78:
6d:9c:10:65:77:1f:83:51:0c:3f:af:ba:5e:d8:73:44:7a:ca:
8a:6e:60:e3:b3:31:cd:31:47:cb:97:33:f4:09:77:a2:a5:d0:
ce:c1:e4:b0:77:0a:40:2c:a4:60:31:2d:bf:fa:da:f0:91:3c:
90:55:33:df:ea:86:e8:1e:19:fc:85:fb:6e:e6:d7:4e:50:f2:
d0:f6:6e:24:84:11:55:37:45:68:5b:54:1f:1f:e2:f1:1a:55:
73:ed:78:3d:9b:0d:99:d5:11:d2:99:8d:65:ac:25:7b:3a:6c:
02:dc:0e:8c:bf:e1:71:3c:0d:c3:d1:77:3c:86:69:aa:2b:9c:
b9:7e:c8:6d:b5:3c:53:a0:11:2e:92:3c:7d:cc:60:a6:72:6e:
10:63:fa:42:51:ab:06:2f:3c:00:9b:7e:22:bf:3d:2f:df:b6:
85:62:a6:2c:9f:e7:f4:3a:11:04:de:42:a7:e2:2a:94:6f:14:
ab:25:84:cd:9f:87:fe:2e:23:88:06:36:cf:da:f2:2a:c2:b1:
f8:f7:e2:65:70:9f:70:5e:6f:08:75:73:e2:05:01:95:4f:80:
cc:ab:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:51 2025 by rpki-client