Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e31302e302f32332d3332203d3e203531313637.roa
File: 34352e39322e31302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: Q0DhbrgiEwMhFkVgKWfjTlsHfg/Za8K9EPawXig1Gus=
Subject key identifier: E9:4B:FC:C2:80:5A:8E:02:5B:38:05:9F:0E:AB:6A:11:68:6E:3E:90
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3AE824E34D86B1ABC42990A795FEE4F084E8CE0C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e31302e302f32332d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:27 +0000
ROA not before: Fri 27 Dec 2024 11:42:27 +0000
ROA not after: Fri 26 Dec 2025 11:47:27 +0000
asID: 51167
IP address blocks: 45.92.10.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e8:24:e3:4d:86:b1:ab:c4:29:90:a7:95:fe:e4:f0:84:e8:ce:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:27 2024 GMT
Not After : Dec 26 11:47:27 2025 GMT
Subject: CN=E94BFCC2805A8E025B38059F0EAB6A11686E3E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:01:ce:93:bd:d6:94:5d:2e:3a:44:76:1a:
63:b7:3e:7a:df:86:b7:74:56:8e:b5:e7:8d:00:ae:
ca:f0:eb:a8:a3:85:40:e9:fd:31:8c:62:3d:e8:45:
75:4d:1a:c7:d4:b7:93:83:dc:7c:63:0b:d6:7b:af:
f6:4a:d0:be:96:cd:f0:4c:33:36:7e:49:ab:5a:5b:
8d:37:31:a8:de:61:da:c7:74:8f:45:55:95:dd:cd:
d2:3b:98:11:c4:f9:9d:96:6a:dc:ca:89:1a:d2:54:
7d:b9:2a:c6:1c:b5:6e:4e:10:fd:00:7c:fd:0d:e5:
51:4c:90:2f:c5:d0:52:87:6d:5e:27:a7:a2:c9:ca:
d6:b2:0d:b2:f9:99:61:80:02:56:2d:cf:a0:d8:49:
e1:b6:84:8e:f3:b7:8f:e7:f8:52:e5:5f:25:e5:ac:
b4:b4:a9:70:60:21:cf:07:88:62:85:5d:ad:6d:5a:
a8:1f:e8:fe:2b:6a:69:3e:26:2d:a5:67:4c:0f:de:
da:17:f0:c0:d4:dc:c2:a2:a3:b2:f2:3d:33:66:64:
0b:d0:87:0e:cb:d2:38:a6:81:f2:36:8b:52:88:37:
52:fd:8d:61:f4:e9:59:f2:37:ee:a8:a6:3f:3f:69:
3f:04:fb:cb:61:5a:38:a6:61:e6:63:db:54:d7:a4:
5e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:FC:C2:80:5A:8E:02:5B:38:05:9F:0E:AB:6A:11:68:6E:3E:90
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e31302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.10.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:45:68:c4:58:71:2e:d7:ef:04:5b:8a:4d:d6:5e:0a:bc:87:
b9:fa:56:3e:38:a5:19:a3:e6:81:47:22:99:dc:16:41:32:2c:
ab:7c:c6:f5:58:1b:51:a5:c8:a5:11:ca:d4:a6:29:bb:47:e8:
6d:c6:d1:57:ba:fa:8a:7c:94:cc:8b:fe:e0:3f:04:d2:d4:1e:
c6:8d:c3:94:e1:78:3c:fd:a4:79:d1:78:13:14:0d:3e:b6:8c:
ed:c9:c6:09:a4:6e:ba:3a:f2:6e:65:c0:93:20:85:1d:d3:37:
d2:37:d4:7a:23:bf:7b:ce:c8:60:da:6d:6e:33:a2:75:94:be:
5c:e7:79:83:a9:e8:73:7f:55:f5:56:e7:f2:15:67:ce:47:5b:
a0:8b:ec:3b:b4:1f:1e:15:70:d7:54:08:5b:27:b7:dd:29:95:
26:b6:55:14:cf:16:90:ac:5f:d0:8b:49:75:d7:82:49:26:35:
a3:32:6b:56:f2:11:bd:1d:7c:a8:b9:74:04:34:f2:32:07:04:
e6:58:83:52:a3:14:51:cf:92:29:fc:c4:a4:06:b2:0d:37:93:
db:26:7c:d3:07:58:61:11:97:ba:24:ef:75:79:86:f8:62:36:
f0:28:3b:0b:74:87:60:11:2a:d2:57:6f:38:d7:22:6a:07:8f:
84:54:3c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:18:29 2025 by rpki-client