Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
File: 34352e38302e33312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: wBmd0OTW289nVQmAfCuf2WI8OYpVgkPRiURT3I/r984=
Subject key identifier: 13:E7:3B:7A:0D:96:16:D6:91:24:4C:BD:6B:43:F0:07:DF:F8:57:1A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0B730E10171DA345C1227E6C74EAE3E12ADAD151
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
Signing time: Wed 09 Oct 2024 11:48:24 +0000
ROA not before: Wed 09 Oct 2024 11:43:24 +0000
ROA not after: Wed 08 Oct 2025 11:48:24 +0000
asID: 51167
IP address blocks: 45.80.31.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:73:0e:10:17:1d:a3:45:c1:22:7e:6c:74:ea:e3:e1:2a:da:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 9 11:43:24 2024 GMT
Not After : Oct 8 11:48:24 2025 GMT
Subject: CN=13E73B7A0D9616D691244CBD6B43F007DFF8571A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:9c:d5:7f:d5:94:9e:ea:f2:9e:51:56:4d:
25:af:e3:95:1a:94:41:f3:69:08:be:8d:bf:86:c5:
5c:e5:a5:ef:a9:cd:1b:d2:c3:ad:b7:2e:12:e7:8a:
37:e3:82:71:a9:6e:7c:99:22:c5:6c:4f:8e:b1:5f:
c3:d9:17:53:86:13:2b:ef:40:58:e8:b7:31:51:20:
37:1d:d3:36:e2:cf:b9:1a:54:6c:be:43:dc:c0:5e:
55:87:d8:aa:4c:8c:a7:e3:63:03:a6:27:e8:e5:75:
c1:63:cc:7d:e8:06:21:82:cc:bd:8e:fa:19:71:8a:
72:67:7b:41:77:40:44:aa:4c:f1:2d:0d:5c:25:67:
d4:b7:68:18:43:25:7e:dc:f1:49:49:d2:4c:ab:e7:
34:c5:fb:ac:3c:3b:83:a7:0d:f1:5d:9a:99:33:31:
a9:e5:6a:42:1d:c0:c6:92:0a:60:93:5b:e4:f8:fe:
ff:ff:0d:5e:54:73:8b:ef:f0:ed:c2:b8:55:34:7c:
a6:12:ce:a7:8a:52:c8:68:45:99:18:0e:7e:6b:8f:
ba:ff:28:2d:06:e2:d6:71:bf:21:63:f9:c8:46:51:
b4:a7:a9:38:64:13:18:53:db:a1:23:05:6d:1c:09:
9f:48:98:c4:fa:b7:02:42:50:1d:96:b1:3d:26:63:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:3B:7A:0D:96:16:D6:91:24:4C:BD:6B:43:F0:07:DF:F8:57:1A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e33312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f1:3d:cc:2e:3f:d4:d4:cd:cc:3a:68:32:ae:3d:a0:bf:5f:
1d:af:15:be:ca:9c:32:bb:07:6a:cb:7c:c5:4a:e8:3b:09:21:
22:10:bd:8e:3d:46:10:da:76:61:4c:d4:6f:0a:5e:91:b5:51:
8b:9a:53:7b:44:db:25:c4:73:c3:c1:c4:38:a1:3b:ac:f5:c0:
53:8a:c8:3b:5f:4a:1c:69:81:31:72:50:65:a5:1c:a7:bf:46:
37:36:6d:d3:e7:43:68:89:c5:5c:1c:62:ad:6f:38:87:ef:d9:
bb:61:8a:1b:5a:87:4c:3e:ec:bb:35:25:36:99:9e:ae:0a:4b:
f9:b1:6b:cf:53:87:8f:bc:fd:ac:28:09:7f:5c:9a:cf:3b:c5:
5c:3f:ce:3b:46:0d:6e:79:75:c7:d7:25:c4:9a:d0:86:8c:e4:
00:76:98:37:62:20:ac:f2:05:6b:08:61:3e:35:c5:20:ad:f1:
1f:12:ac:1a:5b:56:c2:90:7d:71:08:c0:60:68:c2:ab:23:3d:
e2:de:25:f1:83:55:da:ae:71:82:20:05:95:7f:c3:d6:9f:e6:
12:22:24:88:55:87:0a:85:fd:02:b9:0c:dc:90:7a:00:6a:50:
76:e7:0c:0f:7c:21:ff:d4:a6:5f:9e:e9:87:3d:83:a9:f4:69:
de:a3:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:46 2025 by rpki-client