Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20313336373837.roa
File: 34352e39352e3136322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Qsm5JyhcfSg38QVppfa4OCsPbQDdzpG2Mtwq22lxlX0=
Subject key identifier: BE:74:34:7A:CF:62:BB:47:58:A6:01:4B:AA:58:E5:F8:20:D5:74:B1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C72F076C4E63B4AEE1D0D38CB332A2D679556A8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:36 +0000
ROA not before: Fri 27 Dec 2024 19:39:36 +0000
ROA not after: Fri 26 Dec 2025 19:44:36 +0000
asID: 136787
IP address blocks: 45.95.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:72:f0:76:c4:e6:3b:4a:ee:1d:0d:38:cb:33:2a:2d:67:95:56:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:36 2024 GMT
Not After : Dec 26 19:44:36 2025 GMT
Subject: CN=BE74347ACF62BB4758A6014BAA58E5F820D574B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:0d:71:ee:34:17:ba:0d:69:a0:be:75:92:
91:62:9b:d1:8a:73:87:c1:46:ab:b5:56:ed:b3:dc:
c5:db:aa:15:86:31:d0:83:af:70:e5:81:16:c6:8b:
90:71:7c:6a:79:3d:53:dc:86:97:d0:b9:58:6b:69:
1b:89:f4:06:c1:51:31:14:0a:ab:cc:86:8d:5f:7b:
64:18:2e:30:e1:a1:a1:ab:ad:ff:f9:2c:6f:23:06:
98:bf:de:b4:69:42:fe:c2:dd:68:22:39:dc:19:4c:
2b:ae:57:7e:3c:bd:3b:39:cd:89:2f:e8:91:b4:a7:
b9:80:3c:f8:73:7a:94:5d:88:a1:a4:d6:b3:30:e4:
3c:ea:87:75:7d:73:8e:b8:f1:50:d7:e0:c3:1a:c5:
cf:c3:46:57:3b:86:a3:08:a7:4f:f2:48:86:44:dc:
de:18:a6:48:4d:2c:79:82:79:41:d3:21:20:57:dc:
67:6d:1d:dc:67:f7:5a:7a:68:82:2d:3e:b8:9f:ef:
e8:47:13:fd:5c:91:47:9a:33:4f:f1:21:e1:8b:f0:
62:a2:70:17:a5:a8:57:f3:2d:99:da:77:5e:53:91:
f8:a4:04:1c:a5:3f:85:16:11:88:f6:27:01:50:4f:
4c:98:10:a9:53:3a:e3:29:68:e1:55:c9:b8:ad:5b:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:34:7A:CF:62:BB:47:58:A6:01:4B:AA:58:E5:F8:20:D5:74:B1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:61:7c:00:ae:be:29:20:19:aa:47:0a:8c:06:f5:96:6e:ad:
43:9f:5e:f0:05:81:4b:7f:54:16:da:2f:19:ba:da:26:c0:63:
70:c6:7d:1d:a9:b2:96:ce:d4:3b:03:6f:08:cd:47:80:2f:b0:
54:a3:dd:99:7e:6a:cc:b7:e7:26:c9:94:4a:cb:71:37:8b:f4:
2f:0e:91:b7:66:c5:28:1f:0f:37:c1:be:68:c1:0d:6c:e9:e3:
fe:96:b5:55:03:74:a5:dc:5f:b3:a7:3a:8f:da:7c:13:89:6d:
ec:c2:c1:49:17:d6:cf:4b:62:b3:58:ec:7b:78:f9:d7:d7:58:
b2:ca:b7:43:2f:1a:1b:ed:e7:a9:1c:a5:cc:12:b4:f8:25:38:
69:ab:f5:f0:1b:99:87:11:06:15:74:e6:98:fb:fb:66:af:2b:
af:83:36:e5:aa:26:91:47:c0:25:52:18:6e:3c:6c:6e:a7:96:
76:9b:a8:a4:8b:1f:e4:35:e6:0f:18:63:72:9b:1c:ec:0e:bb:
07:3d:cb:6f:c5:bf:1d:db:98:96:a9:e3:17:4c:84:57:62:c9:
3b:a9:79:d6:cf:03:ff:3f:a6:ae:86:eb:fa:98:ea:e5:ab:24:
1c:46:a2:43:3c:08:f5:c1:cc:c4:30:30:6c:23:c3:e9:62:ce:
2a:27:7b:33
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUHHLwdsTmO0ruHQ04yzMqLWeVVqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMjcxOTM5MzZaFw0yNTEyMjYxOTQ0MzZaMDMxMTAvBgNV
BAMTKEJFNzQzNDdBQ0Y2MkJCNDc1OEE2MDE0QkFBNThFNUY4MjBENTc0QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCw1x7jQXug1poL51kpFim9GK
c4fBRqu1Vu2z3MXbqhWGMdCDr3DlgRbGi5BxfGp5PVPchpfQuVhraRuJ9AbBUTEU
CqvMho1fe2QYLjDhoaGrrf/5LG8jBpi/3rRpQv7C3WgiOdwZTCuuV348vTs5zYkv
6JG0p7mAPPhzepRdiKGk1rMw5Dzqh3V9c4648VDX4MMaxc/DRlc7hqMIp0/ySIZE
3N4YpkhNLHmCeUHTISBX3GdtHdxn91p6aIItPrif7+hHE/1ckUeaM0/xIeGL8GKi
cBelqFfzLZnad15TkfikBBylP4UWEYj2JwFQT0yYEKlTOuMpaOFVybitW1ITAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvnQ0es9iu0dYpgFLqljl+CDVdLEwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzNTJlMzEzNjMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LV+iMA0GCSqGSIb3DQEBCwUAA4IBAQBNYXwArr4pIBmqRwqMBvWWbq1Dn17wBYFL
f1QW2i8ZutomwGNwxn0dqbKWztQ7A28IzUeAL7BUo92ZfmrMt+cmyZRKy3E3i/Qv
DpG3ZsUoHw83wb5owQ1s6eP+lrVVA3Sl3F+zpzqP2nwTiW3swsFJF9bPS2KzWOx7
ePnX11iyyrdDLxob7eepHKXMErT4JThpq/XwG5mHEQYVdOaY+/tmryuvgzblqiaR
R8AlUhhuPGxup5Z2m6ikix/kNeYPGGNymxzsDrsHPctvxb8d25iWqeMXTIRXYsk7
qXnWzwP/P6auhuv6mOrlqyQcRqJDPAj1wczEMDBsI8PpYs4qJ3sz
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:54 2025 by rpki-client