Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20323034313730.roa
File: 34352e3135322e34352e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: /1yJbCd2aNXrZYg9a2oeWu9fC1AYn3ANn9yUn+VraQY=
Subject key identifier: D5:90:17:6E:D5:3E:FA:06:1D:F1:E4:40:1C:BF:E7:53:9C:C0:E3:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22F506C6EAE5FB49F8B0AAE02EC63E531473828D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:46:59 +0000
ROA not before: Tue 25 Jun 2024 21:41:59 +0000
ROA not after: Tue 24 Jun 2025 21:46:59 +0000
asID: 204170
IP address blocks: 45.152.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f5:06:c6:ea:e5:fb:49:f8:b0:aa:e0:2e:c6:3e:53:14:73:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 25 21:41:59 2024 GMT
Not After : Jun 24 21:46:59 2025 GMT
Subject: CN=D590176ED53EFA061DF1E4401CBFE7539CC0E31C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c9:7a:bb:c4:0f:fb:da:01:85:62:5a:ba:bb:
c9:5a:16:24:ba:a8:b3:72:e2:ba:d2:23:3c:c9:ef:
d2:58:9d:a6:50:b9:c6:52:e7:37:71:1e:ba:39:cf:
0a:07:26:fa:ff:31:15:3e:4a:64:5b:a3:c3:f9:0c:
a5:14:54:37:71:b6:c1:a4:da:a6:79:d4:12:70:ab:
a9:19:18:8a:66:b8:da:17:ce:15:4b:a1:21:9f:82:
d0:b7:63:a5:e3:70:30:8d:d1:a3:d2:ed:d9:34:54:
9a:bd:f7:b7:7b:75:f5:34:e1:66:9a:ff:a2:11:58:
b9:f2:16:66:9c:eb:98:15:98:3f:8e:90:94:69:2f:
59:8e:a4:91:52:21:28:66:d1:3d:27:89:e8:d4:27:
4e:b6:d1:3d:e9:55:64:f7:5f:e4:28:11:44:b8:8c:
d4:f9:83:ad:53:08:2c:37:e6:4b:91:03:aa:9b:f3:
74:0a:e6:4f:54:3c:2a:23:04:a8:eb:be:bf:4c:c2:
2f:6e:23:85:f2:8e:0a:d8:a5:fd:7a:8b:10:cc:0f:
31:f3:a8:9a:d9:6e:b1:86:2e:9f:0d:9c:06:f5:e5:
91:d3:d7:8c:95:87:ed:12:d7:86:19:c4:3a:c0:5a:
2b:a1:7c:ba:5d:11:7b:5c:c4:fd:45:0d:4e:96:4f:
26:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:17:6E:D5:3E:FA:06:1D:F1:E4:40:1C:BF:E7:53:9C:C0:E3:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34352e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.45.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bf:c6:02:82:d2:d0:41:15:6c:3c:29:c9:20:de:07:bc:1e:
ec:98:9c:3f:4d:18:ce:01:05:69:e4:96:30:7e:d0:0a:ed:a0:
54:90:6b:c5:1a:08:03:aa:0f:8e:90:ba:de:d0:a7:1b:c2:e2:
15:63:cf:96:1c:ae:13:78:ee:ae:1e:86:af:89:a0:f2:35:c2:
79:5d:57:45:0e:d3:9d:03:c4:cd:49:6f:5e:dd:c4:ec:38:b8:
2a:1d:ae:9e:64:5b:83:f3:86:6a:2f:6d:f7:92:b7:e3:12:fe:
63:29:11:1b:6a:98:4c:17:0b:dd:0d:51:9f:9c:46:b6:b8:78:
25:44:11:7f:3c:57:a1:2e:81:6b:32:62:db:9e:57:9b:64:6e:
4f:38:d2:eb:9d:c1:21:ce:27:0a:17:55:25:c0:1a:f6:d7:90:
54:e8:00:26:ac:59:0c:b8:00:29:ef:9c:a0:c6:93:bd:59:fa:
48:e7:1f:33:5e:65:56:36:2c:81:eb:36:e5:ec:59:be:0b:57:
65:8c:49:f3:76:b3:97:97:3a:35:b0:c5:93:36:a6:ba:a2:b8:
be:86:01:72:89:ce:ff:9a:f4:46:dd:1d:a5:e2:00:db:a4:fb:
a9:72:bb:11:03:de:13:90:db:5b:fe:79:29:af:81:24:4e:bd:
84:45:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:10 2025 by rpki-client