Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
File: 34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: hRy2octWCkJOjLbViWENO5mi4v10hr05DiVmy0skcVA=
Subject key identifier: 67:3E:AB:68:11:60:EE:E2:42:8B:49:A7:2A:0A:3A:AE:8A:A1:6A:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 06A2558114AFDEDA0BFD326675081CBD91A97165
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:41 +0000
ROA not before: Fri 27 Dec 2024 19:39:41 +0000
ROA not after: Fri 26 Dec 2025 19:44:41 +0000
asID: 136787
IP address blocks: 45.134.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a2:55:81:14:af:de:da:0b:fd:32:66:75:08:1c:bd:91:a9:71:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:41 2024 GMT
Not After : Dec 26 19:44:41 2025 GMT
Subject: CN=673EAB681160EEE2428B49A72A0A3AAE8AA16A46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:27:5e:6c:3f:43:fc:ed:d7:d1:1e:d6:4d:
94:e6:f4:ec:57:5e:b5:ce:b2:cf:e9:0e:23:96:0b:
64:e9:39:64:67:8f:b4:1d:b5:f4:4c:82:65:9d:0f:
b9:c3:e0:b9:af:ce:29:af:9f:d6:95:eb:1b:6c:7f:
78:45:06:97:4a:42:c3:4e:3e:1a:21:51:39:6f:04:
4d:26:a5:09:a0:fc:d6:f5:9e:e7:7c:bb:33:23:4d:
99:f9:7d:f0:95:10:42:c2:2f:8d:75:12:dd:36:84:
43:49:f0:97:64:35:a1:dd:c9:d8:a2:e9:7e:54:01:
6d:85:0c:a0:41:58:4b:5b:8d:9c:e9:bd:fb:ee:da:
41:0d:0f:53:a3:40:dd:83:1c:e0:71:5f:cb:c0:9b:
68:ca:60:e3:3c:ef:b8:0f:8b:5e:0a:34:c2:61:0e:
79:dd:d6:9f:d3:39:52:59:ff:bb:c8:8d:70:cf:c0:
ae:f1:87:6a:44:24:51:3c:35:98:ac:2f:5c:53:57:
e2:75:fe:98:e7:e0:ef:90:31:c0:ef:3f:8f:f9:23:
8c:50:69:82:28:e3:b8:5b:1a:75:e5:44:8b:99:b7:
ba:f3:59:a0:2f:d2:bc:a9:b9:47:4e:27:30:20:e4:
af:1b:75:06:1e:9b:42:5d:af:79:95:b9:a6:74:6d:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:AB:68:11:60:EE:E2:42:8B:49:A7:2A:0A:3A:AE:8A:A1:6A:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7d:ac:0e:46:f1:4d:68:a8:d3:9e:5a:2c:1f:b8:1b:52:cf:
e0:97:39:e5:b3:cb:6c:9e:c5:b2:e3:0a:b8:b2:61:73:31:0a:
a8:c1:49:fb:99:af:c3:bf:39:fa:2a:69:a7:49:34:2e:5c:61:
1c:df:c2:5c:9e:b6:ba:f3:64:4e:c5:bb:f4:31:1b:7d:60:05:
f0:1c:c6:2c:e4:9f:c8:8d:7f:63:e9:e9:b1:21:64:40:fb:e8:
08:d1:64:36:02:25:da:50:45:d7:34:92:6a:13:b0:ab:94:b8:
0d:c1:1a:3e:28:03:cb:8e:fc:d8:f1:c7:ac:5c:21:b5:5b:eb:
30:8a:b3:53:f0:94:10:30:5d:8c:8f:44:64:ae:22:c0:ad:cc:
c0:fa:5c:91:9a:1a:0a:26:fa:a3:5b:b4:58:ef:52:68:38:e2:
ed:0a:e6:e2:50:2e:25:d1:87:00:fc:af:71:03:6b:3d:94:7f:
58:e6:79:d5:cc:5d:ac:7b:e9:b4:8b:98:dc:5f:cb:08:36:a4:
51:07:ca:2f:e3:64:9c:50:f7:6e:d1:39:d6:c7:8f:5d:3c:e4:
62:6b:e8:63:80:e8:47:3b:31:38:8b:56:59:f1:5c:e8:c9:05:
1f:b7:cd:bd:48:02:08:e2:16:f8:d3:fd:0d:ed:c8:08:58:1f:
a7:d8:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:57 2025 by rpki-client