Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e20313336373837.roa
File: 34352e3135322e34372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: km1U0wF0XnRocv4EG60TA9dksznt6fC3MwshsK58f+E=
Subject key identifier: 78:01:68:12:95:67:8B:0D:D6:3F:50:9B:38:4A:92:01:E5:AE:07:04
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51A14913D810041CF95F8A51F7E47C17065E9F06
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 04 Jan 2025 05:30:17 +0000
ROA not before: Sat 04 Jan 2025 05:25:17 +0000
ROA not after: Sat 03 Jan 2026 05:30:17 +0000
asID: 136787
IP address blocks: 45.152.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a1:49:13:d8:10:04:1c:f9:5f:8a:51:f7:e4:7c:17:06:5e:9f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 4 05:25:17 2025 GMT
Not After : Jan 3 05:30:17 2026 GMT
Subject: CN=7801681295678B0DD63F509B384A9201E5AE0704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:6d:f6:eb:82:7c:56:86:26:46:04:ea:f2:
13:e5:10:22:2b:d5:9d:d6:24:db:bd:22:e8:2e:3f:
85:89:aa:94:ce:0b:7f:b0:85:af:e3:50:c6:2a:17:
5c:ee:56:1b:04:3a:c9:70:2f:36:f3:32:68:2e:c7:
d7:c0:01:47:f4:94:1f:b8:f2:fb:6d:79:a9:a1:4d:
d1:28:61:fd:bf:d9:4a:0d:b3:e9:3b:cf:87:f9:24:
c1:34:92:d6:7f:ac:ca:5a:82:e8:3a:cb:50:99:bd:
05:b7:b3:99:37:59:5f:cf:fb:c1:cb:52:0a:4f:b5:
40:d5:be:49:84:09:17:d9:4a:15:c8:74:50:45:81:
43:00:dd:97:9b:e9:67:44:7e:ce:6a:df:84:32:3e:
d3:30:42:ae:3a:d9:6f:65:06:7f:72:bd:e4:98:f8:
d7:11:2d:8c:b0:40:e5:a2:25:7d:9b:79:72:fe:af:
b6:28:a6:2e:cf:e9:c3:45:79:24:cf:ee:af:33:8b:
ca:2c:6f:92:d9:f0:98:2f:0b:cb:45:e4:47:dd:42:
2c:17:18:c8:75:92:bc:59:94:c1:59:d3:22:b1:7b:
26:7d:e1:90:00:f0:5b:c2:9d:c9:7c:0d:b3:34:70:
f6:b9:73:fa:7d:e4:3d:39:61:22:90:bc:0e:f8:96:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:68:12:95:67:8B:0D:D6:3F:50:9B:38:4A:92:01:E5:AE:07:04
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3135322e34372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.47.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fc:ef:11:bc:39:b5:cb:53:fa:57:a6:c9:07:8d:81:f4:15:
a3:59:10:9b:d8:e9:b8:62:61:00:9a:92:89:41:8e:a5:fb:18:
a5:0f:61:9f:84:1b:d4:36:2c:77:d6:25:44:64:ca:e6:21:4e:
49:a0:81:36:ac:91:83:db:23:2d:5b:4d:12:d2:f1:4a:72:f6:
de:cc:c2:a7:94:83:90:f5:5c:62:f6:96:a6:ae:2f:54:db:14:
98:24:53:6a:8b:e8:81:93:58:2b:24:d1:43:cf:c9:a9:96:00:
5f:c8:63:ba:df:fd:cf:31:b0:36:27:de:8d:e5:2a:e8:e6:aa:
22:31:06:e2:43:e6:ca:a7:10:58:7b:f3:f1:ca:78:de:ac:f8:
96:11:37:75:e2:88:fe:c8:dd:3a:35:58:cf:49:74:ee:a8:8f:
f5:e9:46:f7:69:5f:1b:68:d2:c9:b5:e2:bf:dd:f4:88:26:55:
15:92:c9:4f:94:96:83:2b:a2:af:3a:3c:0e:2a:d9:a4:5c:67:
2b:47:73:03:0e:c1:54:72:6c:ad:6c:da:73:98:0c:75:8e:f8:
12:aa:ef:b0:df:22:1f:0e:f2:3f:27:82:1a:8d:15:8f:87:6d:
ee:22:44:9d:3f:6c:67:73:21:04:10:4a:4b:d4:e1:b8:58:06:
ff:94:1c:bf
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUUaFJE9gQBBz5X4pR9+R8FwZenwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMDQwNTI1MTdaFw0yNjAxMDMwNTMwMTdaMDMxMTAvBgNV
BAMTKDc4MDE2ODEyOTU2NzhCMERENjNGNTA5QjM4NEE5MjAxRTVBRTA3MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2p23264J8VoYmRgTq8hPlECIr
1Z3WJNu9IuguP4WJqpTOC3+wha/jUMYqF1zuVhsEOslwLzbzMmgux9fAAUf0lB+4
8vtteamhTdEoYf2/2UoNs+k7z4f5JME0ktZ/rMpagug6y1CZvQW3s5k3WV/P+8HL
UgpPtUDVvkmECRfZShXIdFBFgUMA3Zeb6WdEfs5q34QyPtMwQq462W9lBn9yveSY
+NcRLYywQOWiJX2beXL+r7Yopi7P6cNFeSTP7q8zi8osb5LZ8JgvC8tF5EfdQiwX
GMh1krxZlMFZ0yKxeyZ94ZAA8FvCncl8DbM0cPa5c/p95D05YSKQvA74lvaZAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeAFoEpVniw3WP1CbOEqSAeWuBwQwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzNTMyMmUzNDM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LZgvMA0GCSqGSIb3DQEBCwUAA4IBAQAG/O8RvDm1y1P6V6bJB42B9BWjWRCb2Om4
YmEAmpKJQY6l+xilD2GfhBvUNix31iVEZMrmIU5JoIE2rJGD2yMtW00S0vFKcvbe
zMKnlIOQ9Vxi9pamri9U2xSYJFNqi+iBk1grJNFDz8mplgBfyGO63/3PMbA2J96N
5Sro5qoiMQbiQ+bKpxBYe/PxynjerPiWETd14oj+yN06NVjPSXTuqI/16Ub3aV8b
aNLJteK/3fSIJlUVkslPlJaDK6KvOjwOKtmkXGcrR3MDDsFUcmytbNpzmAx1jvgS
qu+w3yIfDvI/J4IajRWPh23uIkSdP2xncyEEEEpL1OG4WAb/lBy/
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:57 2025 by rpki-client