Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37382e302f32342d3234203d3e20313336373837.roa
File: 34352e3133372e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JsrAf2zvdFbpl6ixkaXjO9pUZ824ZCuwZJjxiFiv9S4=
Subject key identifier: F1:CA:AA:40:6F:49:27:4B:E8:5E:7D:EA:16:AD:51:94:A8:06:BB:39
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 52EE5B94313CD3F5FBCF37ECB5DCDB31A6B491AB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:42 +0000
ROA not before: Fri 27 Dec 2024 19:39:42 +0000
ROA not after: Fri 26 Dec 2025 19:44:42 +0000
asID: 136787
IP address blocks: 45.137.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ee:5b:94:31:3c:d3:f5:fb:cf:37:ec:b5:dc:db:31:a6:b4:91:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:42 2024 GMT
Not After : Dec 26 19:44:42 2025 GMT
Subject: CN=F1CAAA406F49274BE85E7DEA16AD5194A806BB39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:fe:15:0b:d7:42:ff:61:f5:1d:8d:ee:4f:
84:06:a8:d3:51:8e:f1:c5:7e:09:34:e6:cc:e3:24:
1a:e4:e8:d3:64:6d:a1:1e:a5:31:e3:95:6c:5a:df:
76:64:d8:d8:f1:10:81:86:29:c4:1a:69:9b:4c:5f:
58:c1:8d:d0:1f:8f:f6:02:b5:3b:0f:eb:17:8c:a3:
a6:90:93:60:24:11:80:e0:a5:6d:f9:e9:b6:39:d5:
a3:ae:91:5c:07:84:8f:c9:56:ca:71:53:60:48:58:
ea:66:e8:c6:44:75:aa:aa:8b:7f:dd:b3:a2:0c:91:
22:6a:68:3e:19:c3:62:b6:7c:6f:6e:a9:0d:88:d8:
c1:e9:08:d2:2e:5e:e2:26:e6:6f:c9:c2:36:c0:90:
55:92:b2:50:a3:98:4f:eb:9b:14:11:0c:fa:27:e5:
09:c5:97:8d:57:78:af:1d:91:2b:81:4c:45:3c:87:
21:80:b8:d7:c0:88:6e:c6:62:08:96:9a:ea:b0:2f:
f0:96:a0:13:8f:c8:e9:5a:83:7c:d3:c3:80:a6:9a:
8a:e1:07:80:b5:74:83:35:df:d2:33:fd:c3:02:d5:
4e:e3:d6:11:79:17:c8:da:d6:ad:97:2d:39:a2:67:
4e:4d:2e:b6:fd:b9:40:0b:db:a3:3e:61:26:ba:49:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CA:AA:40:6F:49:27:4B:E8:5E:7D:EA:16:AD:51:94:A8:06:BB:39
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d1:c4:b5:14:87:85:e2:81:18:d1:bc:a0:62:bf:0e:45:0d:
84:36:f2:1c:95:24:ac:38:db:74:6a:09:20:89:21:af:e6:62:
d3:b8:c2:4f:51:b0:ef:7f:c7:25:a5:22:25:5d:ff:da:9b:20:
37:49:4d:96:9c:aa:20:83:a9:4f:84:97:f5:80:07:f0:d2:e0:
68:22:8a:28:cd:87:be:23:68:98:25:63:ea:64:1b:28:f8:1a:
62:64:29:b9:b4:0f:5a:7a:79:7d:4d:a0:4a:80:e0:76:68:72:
a6:e2:e4:53:45:91:5b:69:ef:65:e3:d8:c5:7a:b4:23:c2:14:
16:10:4d:d7:d8:dd:53:97:b1:e4:0a:1a:05:e6:74:95:2c:be:
38:e1:ff:f1:9e:ab:3e:9f:ec:e5:5c:46:2c:29:0f:2b:e9:b0:
7a:12:d2:2a:32:11:62:b3:69:64:b8:f5:1c:85:6c:54:ab:23:
b8:a3:44:58:78:36:aa:27:b0:59:99:46:eb:1c:d8:24:4a:e9:
c1:2c:9c:07:85:b4:ad:dd:84:3a:31:72:51:91:03:7d:0f:8f:
fd:75:d7:0c:e2:3f:2b:d9:d2:ef:0f:dd:db:da:c2:b0:ad:7c:
55:c0:cb:e6:73:b8:c6:e3:42:3e:25:f7:12:1b:38:32:6e:73:
70:1d:cf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:05 2025 by rpki-client