Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa
File: 34352e38342e33392e302f32342d3234203d3e20323037313337.roa (raw, json)
Hash identifier: +7EWk+MpyO2Kzw7g2PGW+6iBrM3gGAXgVDsnei4axas=
Subject key identifier: D9:42:65:F3:C6:77:4B:B5:55:67:05:6C:AC:24:2A:64:CE:DA:D2:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3722A8657CD9C57C85C0DD2D68EA9824DB6D7CAE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa
Signing time: Mon 27 Jan 2025 09:45:30 +0000
ROA not before: Mon 27 Jan 2025 09:40:30 +0000
ROA not after: Mon 26 Jan 2026 09:45:30 +0000
asID: 207137
IP address blocks: 45.84.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:22:a8:65:7c:d9:c5:7c:85:c0:dd:2d:68:ea:98:24:db:6d:7c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:30 2025 GMT
Not After : Jan 26 09:45:30 2026 GMT
Subject: CN=D94265F3C6774BB55567056CAC242A64CEDAD24D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:59:56:a6:77:a7:64:18:48:a1:4b:21:63:e5:
54:a7:bf:d5:20:c3:97:57:4f:4e:5f:74:63:00:ba:
e2:c7:21:25:db:4f:ab:1f:3e:8a:41:a5:87:e1:c3:
3a:09:c3:a9:ad:47:09:0d:54:97:6c:aa:ca:cf:68:
ab:89:59:17:25:84:be:47:3d:a7:81:4d:e1:b6:d1:
31:ee:ae:c7:2e:c0:3f:db:61:71:0d:3e:5f:1b:08:
04:2b:35:70:65:95:5b:dd:d2:3d:79:1c:0b:ee:e8:
81:ee:89:b3:0c:5a:1c:b3:d3:6f:d4:47:64:38:b0:
1e:fa:5c:d8:c5:96:27:e3:40:4f:d2:5a:35:d5:b7:
fa:cf:1a:2b:1d:21:40:83:fd:c7:c2:07:ca:0a:dc:
f6:90:1f:00:62:04:01:a6:14:93:ed:bf:89:a1:03:
fe:89:f8:2c:79:18:50:20:4d:90:58:65:3e:0d:53:
98:72:60:da:c7:bd:ba:3c:80:bf:97:41:01:e5:bb:
65:82:b8:a2:de:fc:1b:f5:2f:cd:ae:07:b4:0b:6f:
8a:52:76:b0:8f:9d:61:ac:a1:06:3c:76:91:16:69:
a5:0c:23:cd:4b:65:b3:fb:2c:3e:d5:52:f2:4a:a3:
60:43:8c:af:c1:b4:3e:44:1d:8e:06:a9:ef:51:13:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:65:F3:C6:77:4B:B5:55:67:05:6C:AC:24:2A:64:CE:DA:D2:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.39.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1c:5f:a1:62:91:50:b5:2f:d4:54:95:9e:63:78:11:ae:60:
ac:f4:2c:5b:4d:39:8e:c0:80:88:0e:63:e3:70:39:ae:cc:0a:
31:46:9c:8e:44:a9:69:5d:44:ec:05:39:ad:22:35:98:ae:de:
f8:cb:c7:ae:ec:42:59:93:3c:b0:db:ca:11:ba:58:2f:ad:32:
38:ee:d8:00:41:26:0f:54:7c:df:5a:29:02:80:db:3f:4c:a2:
e2:32:e2:39:52:bf:e3:6a:a6:38:4a:d5:bb:e1:f6:3e:11:43:
b8:be:74:a3:e3:c9:5e:59:81:72:4a:62:66:7e:16:67:e2:28:
7e:35:f4:f5:ef:c9:e1:87:20:f3:43:7f:1e:c1:d4:0c:7a:67:
de:ca:52:89:32:ba:9c:fc:b7:8f:23:d7:1f:dc:6c:29:70:3c:
9f:3f:78:9a:f9:6a:2a:86:b3:f9:4b:39:08:d2:a4:74:0a:b8:
d5:eb:97:f8:a6:a4:82:18:56:39:70:f4:c0:2e:13:f1:b9:81:
76:92:40:92:81:7f:c4:7a:ec:39:57:e6:b0:9f:56:4b:ce:e2:
25:cb:5c:13:b0:5f:b3:d0:bc:8d:ef:98:d3:27:5c:7a:54:93:
39:16:bf:c9:b7:11:68:8e:c9:d9:45:b4:ab:ef:27:f6:00:83:
be:3d:8a:45
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNyKoZXzZxXyFwN0taOqYJNttfK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTAxMjcwOTQwMzBaFw0yNjAxMjYwOTQ1MzBaMDMxMTAvBgNV
BAMTKEQ5NDI2NUYzQzY3NzRCQjU1NTY3MDU2Q0FDMjQyQTY0Q0VEQUQyNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnWVamd6dkGEihSyFj5VSnv9Ug
w5dXT05fdGMAuuLHISXbT6sfPopBpYfhwzoJw6mtRwkNVJdsqsrPaKuJWRclhL5H
PaeBTeG20THurscuwD/bYXENPl8bCAQrNXBllVvd0j15HAvu6IHuibMMWhyz02/U
R2Q4sB76XNjFlifjQE/SWjXVt/rPGisdIUCD/cfCB8oK3PaQHwBiBAGmFJPtv4mh
A/6J+Cx5GFAgTZBYZT4NU5hyYNrHvbo8gL+XQQHlu2WCuKLe/Bv1L82uB7QLb4pS
drCPnWGsoQY8dpEWaaUMI81LZbP7LD7VUvJKo2BDjK/BtD5EHY4Gqe9RE8L5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU2UJl88Z3S7VVZwVsrCQqZM7a0k0wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzNDJlMzMzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMxMzMzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1U
JzANBgkqhkiG9w0BAQsFAAOCAQEAlhxfoWKRULUv1FSVnmN4Ea5grPQsW005jsCA
iA5j43A5rswKMUacjkSpaV1E7AU5rSI1mK7e+MvHruxCWZM8sNvKEbpYL60yOO7Y
AEEmD1R831opAoDbP0yi4jLiOVK/42qmOErVu+H2PhFDuL50o+PJXlmBckpiZn4W
Z+IofjX09e/J4Ycg80N/HsHUDHpn3spSiTK6nPy3jyPXH9xsKXA8nz94mvlqKoaz
+Us5CNKkdAq41euX+KakghhWOXD0wC4T8bmBdpJAkoF/xHrsOVfmsJ9WS87iJctc
E7Bfs9C8je+Y0ydcelSTORa/ybcRaI7J2UW0q+8n9gCDvj2KRQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:41 2025 by rpki-client