Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138392e302f32342d3234203d3e20313336373837.roa
File: 34352e3133342e3138392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: K4lQACRL1g3vMSVr+GIbj85tvZamw7O85l5LjmBGAOA=
Subject key identifier: 7B:5A:2F:D0:32:4D:1C:15:FC:3F:E2:4B:00:2C:09:C9:56:82:17:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5CBBD84594ACF4F7F881D7D1D110F3DA9A107358
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:38 +0000
ROA not before: Fri 27 Dec 2024 19:39:38 +0000
ROA not after: Fri 26 Dec 2025 19:44:38 +0000
asID: 136787
IP address blocks: 45.134.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:bb:d8:45:94:ac:f4:f7:f8:81:d7:d1:d1:10:f3:da:9a:10:73:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:38 2024 GMT
Not After : Dec 26 19:44:38 2025 GMT
Subject: CN=7B5A2FD0324D1C15FC3FE24B002C09C9568217D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a1:ab:18:8e:6b:e2:c0:ac:e1:9c:e1:a8:74:
88:32:45:61:73:f4:a5:12:a5:aa:f9:84:16:69:f7:
03:e8:5b:b6:e4:18:db:fa:9e:68:62:a7:ac:de:bf:
b3:c6:2c:0e:e8:81:61:c7:5c:88:0c:36:82:c8:69:
80:76:9a:bc:a0:72:d2:cd:1a:42:d9:e4:e3:04:5c:
99:cc:bb:8e:30:ad:91:4a:2d:a5:46:78:74:14:02:
1e:8a:cb:85:32:43:42:ef:30:36:fa:cf:50:bf:87:
0a:d6:60:35:25:f2:e1:2e:b1:dc:ee:99:b4:3e:8a:
cc:bf:51:e6:ea:0e:e3:49:41:01:df:a7:ff:03:4d:
f0:21:89:f1:12:b6:63:e4:35:d7:cb:a9:3b:49:ee:
a6:61:88:2f:b2:bf:44:b0:02:65:6c:bc:5a:63:02:
23:78:96:16:85:30:2e:bd:59:c4:8b:73:11:4c:0b:
c9:26:5f:5a:e0:f1:3a:95:e9:41:1f:b3:49:aa:56:
34:88:bf:65:d2:a4:fd:ee:c7:9e:59:4e:bc:2d:e2:
ae:90:07:3a:53:b1:29:5c:0d:30:d1:ab:f7:cc:ce:
5f:af:23:4a:85:a7:8a:af:95:c1:cc:40:5e:6c:93:
5f:c0:4f:c8:29:be:ac:6d:bf:f5:d2:3e:69:98:86:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5A:2F:D0:32:4D:1C:15:FC:3F:E2:4B:00:2C:09:C9:56:82:17:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.189.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f9:ac:d2:ab:0f:2b:a5:33:83:58:8c:ac:bd:2e:c9:36:77:
8e:27:5b:14:8b:66:b8:04:04:af:6c:d1:52:3e:0b:04:93:aa:
d5:47:ca:be:19:45:00:3a:d9:ea:bd:27:75:c6:0c:0d:73:ee:
5d:b9:6c:2e:1e:49:87:70:10:4a:13:5f:17:1b:42:24:8d:c2:
9d:1d:9b:2c:90:23:d0:cb:74:fe:b5:3f:b3:13:5b:c1:da:0f:
61:9d:50:9c:64:b4:2b:a6:aa:ed:46:6a:5a:9a:31:ee:db:44:
eb:e9:4d:a8:93:1a:5b:43:38:fb:03:31:54:6b:14:76:80:53:
7a:8e:e1:93:ba:60:ef:c9:7c:48:85:44:3e:cd:99:2b:07:c3:
5c:51:f8:53:f0:b3:b2:e0:60:3a:66:6a:7d:75:b9:e9:eb:26:
47:93:a5:d1:c0:92:37:50:73:1f:29:65:ae:bd:17:f6:bc:89:
1a:5c:9f:82:54:98:e0:8f:47:21:39:3d:0e:f1:e5:03:f7:23:
5c:c7:cf:32:2f:84:5b:71:b7:1e:28:32:23:49:81:f3:e7:0f:
38:64:0e:2b:d6:eb:9d:5d:13:98:f5:7e:3f:ba:ba:ad:3e:3c:
f4:50:e6:49:af:ca:d6:76:80:5f:52:81:10:68:7e:23:d7:19:
50:d8:02:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:46 2025 by rpki-client