Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
File: 34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: zKnNYrFg1X8ZPGyJSFK1D7e1WEHUWezd6W70lKFyvuk=
Subject key identifier: 34:95:4B:68:79:7A:58:39:A7:7E:0E:9C:93:B3:57:3B:21:F0:F3:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61B78B826BCD9B433C165753DB5A2434BB71CC19
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 27 Jan 2025 09:45:24 +0000
ROA not before: Mon 27 Jan 2025 09:40:24 +0000
ROA not after: Mon 26 Jan 2026 09:45:24 +0000
asID: 201341
IP address blocks: 45.141.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b7:8b:82:6b:cd:9b:43:3c:16:57:53:db:5a:24:34:bb:71:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:24 2025 GMT
Not After : Jan 26 09:45:24 2026 GMT
Subject: CN=34954B68797A5839A77E0E9C93B3573B21F0F3B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:e5:0f:23:ab:b0:72:69:fb:bb:36:50:40:
94:9b:1b:b0:21:eb:ea:a9:72:5f:09:50:e8:93:01:
c0:e9:83:d8:5d:84:6d:c8:16:ca:1a:29:a0:e8:df:
bc:67:b8:32:e0:2d:ef:78:16:54:b2:97:1f:d7:78:
f1:9d:06:14:dd:4d:3a:da:3c:31:32:31:59:ac:1f:
6b:2b:04:bc:67:9c:52:eb:c3:b0:fd:7b:33:70:d0:
cd:ef:2e:82:ea:d4:0b:fe:9e:1c:66:60:24:62:5a:
f1:e8:a2:78:fe:f1:07:86:b4:7d:de:20:d6:47:57:
d5:07:a0:9a:e2:bc:15:c2:f8:6f:75:6e:e3:70:f0:
77:5c:25:ed:7a:e7:c6:ca:4e:20:fd:9c:12:91:48:
7b:68:ce:1b:77:fa:0e:5e:11:4e:ce:2b:a3:62:63:
59:d1:dc:b9:59:60:4a:44:b0:2a:e3:ad:df:a7:47:
b3:0b:2c:5f:52:ff:31:58:23:ed:6e:b5:5b:3f:ba:
31:6b:af:72:b1:c9:2e:53:55:24:14:3d:a8:f2:cb:
07:ad:0a:f6:b9:47:7b:74:59:0c:cc:be:bb:0f:b5:
5b:0f:8d:db:d6:a3:3f:83:9d:92:1a:55:b7:5b:04:
48:41:45:c9:48:c6:7c:9d:86:f6:d1:25:53:dd:1d:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:95:4B:68:79:7A:58:39:A7:7E:0E:9C:93:B3:57:3B:21:F0:F3:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3134312e3134302e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.140.0/22
Signature Algorithm: sha256WithRSAEncryption
21:45:d0:3e:49:68:0d:43:a4:73:c9:a5:17:72:f3:85:9f:4c:
1e:d2:2a:49:9c:c1:05:0c:c3:cf:95:92:96:66:64:16:40:b6:
f6:7a:93:11:78:10:a1:33:e0:f5:04:0c:91:4e:80:34:83:9f:
ae:25:67:4f:44:4e:7b:2a:6b:a7:b8:01:0c:ed:a4:8c:fc:c5:
9a:5d:06:85:10:d7:d9:28:ce:f6:52:b6:4e:59:fd:34:87:f3:
98:c0:65:a2:f6:32:26:a3:ac:bd:d4:b0:95:df:c1:2c:70:41:
1a:6c:83:b1:21:0f:59:db:b7:6d:56:25:67:5f:e7:70:ee:71:
95:63:32:a8:b2:b6:76:40:ab:39:b0:b8:14:c5:64:cb:ee:1a:
2c:c6:0e:c3:40:49:c2:7b:0f:4c:b3:25:5b:94:e3:9b:6a:fc:
82:89:d4:07:c1:31:40:ae:f6:04:c8:bd:6e:ed:6e:06:99:1d:
e7:14:35:f3:79:a1:70:74:91:63:55:81:c7:74:6a:fe:5a:15:
28:f3:2e:18:e5:6d:2f:62:b9:6f:4b:ac:c0:77:d7:1e:c9:bd:
fd:88:b5:4a:18:4a:63:32:1d:ca:f2:5f:b3:24:50:11:95:d8:
7b:8e:87:0d:72:5d:85:0d:0d:05:70:84:00:4d:ed:0d:93:2d:
46:be:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:18:44 2025 by rpki-client