Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
File: 34352e3133372e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: YWsRXX62gVnK4g4kiTyZkK52bzE/Y809+uGomiErukE=
Subject key identifier: D8:2A:5A:A1:24:2F:81:1C:7B:A6:DF:49:DB:08:DF:EE:3A:53:D7:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 428159C4C07C8D5992795B21E6DFAE74DFCA42AA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:38 +0000
ROA not before: Fri 27 Dec 2024 19:39:38 +0000
ROA not after: Fri 26 Dec 2025 19:44:38 +0000
asID: 136787
IP address blocks: 45.137.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:81:59:c4:c0:7c:8d:59:92:79:5b:21:e6:df:ae:74:df:ca:42:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:38 2024 GMT
Not After : Dec 26 19:44:38 2025 GMT
Subject: CN=D82A5AA1242F811C7BA6DF49DB08DFEE3A53D7DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:25:32:64:2b:43:b9:ef:36:3f:97:e9:56:
59:b9:23:26:a4:79:48:61:df:95:03:c4:4d:c8:c8:
fa:d2:8e:24:63:7c:c6:e2:a1:9d:c4:8e:2c:38:97:
0f:0f:80:a5:c7:75:94:d2:da:e7:90:ee:02:11:a2:
b1:2e:8c:b0:87:81:7d:8d:17:cb:13:10:1f:e6:e9:
47:fa:03:71:fd:e7:b5:94:a5:1d:27:13:94:5c:e2:
b5:eb:d6:51:1f:3a:5b:cd:f1:7f:b0:e8:9b:b1:13:
e7:e6:eb:33:60:76:b2:ca:8c:19:97:38:bc:a8:6c:
c0:8e:2e:a7:ea:a1:5a:a4:c0:bf:28:3c:f9:84:7c:
ca:02:49:a4:9a:7c:e6:81:51:21:20:85:15:9b:13:
0a:f5:be:71:fd:ee:24:7b:aa:ab:8b:12:37:82:c6:
88:ac:25:1b:b9:d4:6d:2d:45:1b:2f:4a:0a:71:33:
1b:2d:6c:a4:d6:34:7f:0c:e9:b8:f2:f1:e3:1c:fd:
81:16:a8:af:74:e9:c2:2d:65:39:cc:70:b4:53:6b:
cf:79:e3:a4:95:6f:a9:f9:3a:5f:6c:ab:e2:a3:11:
1a:2a:fc:1c:9c:ff:c0:a1:bf:ca:d4:cb:0c:be:92:
df:ef:67:8e:19:af:c3:33:f2:a0:58:1b:13:27:cf:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:5A:A1:24:2F:81:1C:7B:A6:DF:49:DB:08:DF:EE:3A:53:D7:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
05:5e:9c:d5:d2:c2:28:31:49:15:89:b8:e0:f3:00:5a:7d:67:
6e:41:e7:19:92:5d:10:f6:6b:85:54:1c:25:6b:4b:c2:85:c3:
d6:c8:86:d3:95:a7:00:8a:26:8f:a9:55:d3:27:de:fa:2f:72:
7c:01:c8:e6:de:5d:32:2c:1d:a0:ba:85:8b:33:ed:46:42:50:
de:db:e2:5d:d8:3f:ce:ba:c7:2c:32:c1:cb:b6:49:31:41:a8:
0d:22:9b:22:f4:60:78:bb:e6:dc:6d:b6:31:61:45:6b:09:0b:
ee:be:c7:79:db:b9:13:46:d8:71:0a:49:c9:ae:d2:01:1b:98:
f0:dc:50:33:02:2e:4c:07:69:d1:4f:d0:56:ee:33:96:f5:71:
76:8f:ff:0d:85:61:71:d3:16:df:8f:fd:35:ee:a2:f7:48:a0:
43:cc:5d:6d:2b:fa:e5:2d:fb:53:28:52:fc:ef:ec:33:7c:be:
50:a3:eb:b0:d6:06:e6:1f:c0:a6:68:38:8d:bb:7b:c6:60:45:
5f:0d:de:a7:97:ec:25:d0:6a:61:24:6d:6a:63:be:d1:b5:72:
50:33:4c:0d:a1:72:d0:d7:c6:19:70:40:87:71:7d:e3:49:78:
60:7d:2d:c6:fe:31:35:fe:ec:97:4f:f2:71:45:8a:60:3d:6b:
3b:86:ff:da
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUQoFZxMB8jVmSeVsh5t+udN/KQqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMjcxOTM5MzhaFw0yNTEyMjYxOTQ0MzhaMDMxMTAvBgNV
BAMTKEQ4MkE1QUExMjQyRjgxMUM3QkE2REY0OURCMDhERkVFM0E1M0Q3REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnSUyZCtDue82P5fpVlm5Iyak
eUhh35UDxE3IyPrSjiRjfMbioZ3Ejiw4lw8PgKXHdZTS2ueQ7gIRorEujLCHgX2N
F8sTEB/m6Uf6A3H957WUpR0nE5Rc4rXr1lEfOlvN8X+w6JuxE+fm6zNgdrLKjBmX
OLyobMCOLqfqoVqkwL8oPPmEfMoCSaSafOaBUSEghRWbEwr1vnH97iR7qquLEjeC
xoisJRu51G0tRRsvSgpxMxstbKTWNH8M6bjy8eMc/YEWqK906cItZTnMcLRTa895
46SVb6n5Ol9sq+KjERoq/Byc/8Chv8rUywy+kt/vZ44Zr8Mz8qBYGxMnz10PAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU2CpaoSQvgRx7pt9J2wjf7jpT194wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzM3MmUzNzM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LYlNMA0GCSqGSIb3DQEBCwUAA4IBAQAFXpzV0sIoMUkVibjg8wBafWduQecZkl0Q
9muFVBwla0vChcPWyIbTlacAiiaPqVXTJ976L3J8Acjm3l0yLB2guoWLM+1GQlDe
2+Jd2D/OuscsMsHLtkkxQagNIpsi9GB4u+bcbbYxYUVrCQvuvsd527kTRthxCknJ
rtIBG5jw3FAzAi5MB2nRT9BW7jOW9XF2j/8NhWFx0xbfj/017qL3SKBDzF1tK/rl
LftTKFL87+wzfL5Qo+uw1gbmH8CmaDiNu3vGYEVfDd6nl+wl0GphJG1qY77RtXJQ
M0wNoXLQ18YZcECHcX3jSXhgfS3G/jE1/uyXT/JxRYpgPWs7hv/a
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:12 2025 by rpki-client