Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231312e302f32342d3234203d3e203632323430.roa
File: 34352e39342e3231312e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 72VboQnNiveVX08QlQj8sRA5YyXgEbfsCdoYDtHeUYE=
Subject key identifier: 12:27:16:CD:83:36:A8:DF:5F:DE:F6:9C:20:68:65:9B:F5:88:0F:E6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2FDFDC170E12A3D74947E48F9CF9144AF1197067
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231312e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:46 +0000
ROA not before: Fri 27 Dec 2024 11:42:46 +0000
ROA not after: Fri 26 Dec 2025 11:47:46 +0000
asID: 62240
IP address blocks: 45.94.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:df:dc:17:0e:12:a3:d7:49:47:e4:8f:9c:f9:14:4a:f1:19:70:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:46 2024 GMT
Not After : Dec 26 11:47:46 2025 GMT
Subject: CN=122716CD8336A8DF5FDEF69C2068659BF5880FE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:47:de:0a:74:55:24:7f:06:85:d4:24:e0:
f6:6b:b2:be:2b:81:24:9e:4b:81:48:3d:5e:93:9b:
c2:0d:18:29:7f:6d:a1:11:fb:eb:6d:1f:05:1b:7f:
bf:ca:f0:9f:59:c6:5a:ea:38:40:7c:be:78:30:81:
6a:66:d1:96:d1:2f:ab:4a:a6:af:72:a5:09:45:26:
02:dc:5c:a5:7f:0d:fc:9e:15:61:88:15:29:22:8e:
b4:ea:41:a4:99:53:b4:15:51:a4:80:6f:10:c1:7d:
9e:7a:6d:07:a2:31:79:ca:5d:f3:83:1f:36:b6:26:
54:1f:03:6a:e7:58:11:cd:f4:2a:58:e0:2e:80:2a:
89:2c:79:54:94:5a:71:e9:fc:e7:6a:c3:64:bb:38:
a4:9a:9e:68:a9:f4:2a:6f:21:c3:64:74:48:34:f6:
00:0a:15:df:95:b8:04:64:45:59:ff:4f:01:7a:cb:
3c:36:a2:f5:24:a4:98:1f:56:d2:12:53:30:f1:5e:
84:26:b6:45:93:09:22:44:26:73:8b:4d:79:b3:a9:
8f:8b:85:15:4f:8a:8e:6c:55:a8:91:2f:bc:c5:d8:
42:29:67:64:00:c1:e9:8e:85:81:70:4a:ce:80:fc:
53:06:e9:d9:65:0b:26:64:57:2c:0a:b8:e2:f3:61:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:27:16:CD:83:36:A8:DF:5F:DE:F6:9C:20:68:65:9B:F5:88:0F:E6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231312e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.211.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0e:4f:df:4a:21:dd:ef:6b:3c:99:5d:d9:df:a2:13:14:18:
1f:a7:19:d4:e7:19:a1:39:d8:e9:7b:6b:25:b0:e3:29:61:03:
74:91:1a:c0:07:ed:a8:0f:e2:ef:42:c5:ad:3f:47:09:bd:e9:
99:1e:8e:04:2a:18:86:18:29:08:1b:0e:dd:45:53:90:12:3c:
a1:60:eb:8c:0f:1a:6e:ec:cb:df:16:3f:90:e7:66:59:ea:b2:
40:83:dd:32:c2:6d:29:5b:b8:fd:fe:5d:59:2f:6a:f2:ec:9a:
8c:80:22:2e:c8:1d:74:2a:04:1a:f9:d9:87:ce:1b:4d:be:e8:
46:f8:e4:a8:79:a3:8e:50:01:ad:02:29:a5:9a:5a:18:db:fe:
75:d6:1f:87:0a:07:76:d3:1d:66:fb:a9:03:60:11:f1:e3:25:
b4:f2:ba:db:12:1d:2b:66:fc:75:74:f5:2d:e0:bf:d6:44:7d:
f8:ae:56:94:28:ff:02:73:70:53:e9:8c:bc:a6:c8:0e:86:a1:
3a:71:bc:5f:a5:8a:2d:0f:bf:e6:84:c4:18:91:86:3b:a0:1b:
95:de:51:3c:f1:41:8b:f3:b9:36:c4:5e:33:9e:68:22:52:b8:
bd:5b:95:d5:e7:2f:c1:2f:c8:53:f1:f4:37:0f:ce:f2:e5:b0:
e2:7b:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:57 2025 by rpki-client