Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37322e302f32342d3234203d3e20313336373837.roa
File: 37372e37382e37322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Ah+yKAkJl6ZTSi3UgxzWJLBCxNxmVMH8JDPD5HsAmmE=
Subject key identifier: 5A:56:EB:1D:A3:90:58:1B:19:89:6D:7D:98:E9:F6:5C:52:99:D1:C6
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0E0AFA60A77BA0EBEC85F2A99A1D2FC1FF84166C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:25 +0000
ROA not before: Mon 27 Jan 2025 09:40:25 +0000
ROA not after: Mon 26 Jan 2026 09:45:25 +0000
asID: 136787
IP address blocks: 77.78.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0a:fa:60:a7:7b:a0:eb:ec:85:f2:a9:9a:1d:2f:c1:ff:84:16:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:25 2025 GMT
Not After : Jan 26 09:45:25 2026 GMT
Subject: CN=5A56EB1DA390581B19896D7D98E9F65C5299D1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:5d:57:8b:9a:c3:e6:67:a8:a0:49:d4:47:
32:8e:bc:87:78:ac:2a:c9:01:82:47:f2:4b:8c:0e:
c4:10:7f:4b:f2:da:07:34:8a:bd:4a:5c:1e:cc:ec:
8a:0f:17:53:d1:2d:03:d4:17:80:c4:c5:77:32:e8:
f2:03:ef:a9:15:ce:2d:cd:95:ab:71:b0:73:42:aa:
80:5c:7f:1a:5c:ed:22:ed:96:d9:dd:e9:9a:2d:91:
52:84:fb:61:8e:4f:e1:67:c7:09:39:1b:c1:65:17:
f6:80:53:dd:a7:38:61:82:62:db:71:2d:4b:bf:93:
cd:34:88:59:38:e5:10:f8:fb:d4:70:cb:d1:ab:0f:
ee:94:94:88:80:87:fc:5f:67:59:3a:ef:5e:2e:3f:
9b:3b:3f:67:35:e4:fd:a5:35:59:b3:93:5d:eb:b7:
86:d5:b1:25:eb:0b:6a:20:1b:39:71:22:cc:90:34:
4c:09:58:14:3a:e2:54:05:a3:9a:e1:a7:af:a2:d1:
76:1b:08:2c:25:a1:71:eb:c3:49:e6:b4:0a:f3:1b:
94:6a:00:bc:4a:94:c3:78:51:5a:3c:07:50:a1:f0:
f9:e1:4f:c4:ad:ec:d9:21:5a:07:6e:57:c3:96:e5:
5e:72:84:c7:13:dd:7c:c0:3d:08:19:ba:82:88:00:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:EB:1D:A3:90:58:1B:19:89:6D:7D:98:E9:F6:5C:52:99:D1:C6
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.72.0/24
Signature Algorithm: sha256WithRSAEncryption
72:df:4d:7f:c4:68:25:d7:8d:4c:49:3e:c1:f0:36:b5:08:34:
9a:ab:44:5c:ac:a3:b7:f2:ef:d0:9c:86:16:c3:ae:20:20:e4:
5d:a6:c7:8d:9b:77:a5:d5:68:7c:7a:86:e5:9c:b5:c7:ac:4d:
2b:aa:dc:04:a2:71:8d:9d:62:8c:24:4d:c9:37:79:5f:c0:ef:
cb:a3:ee:84:94:b8:62:41:db:67:dd:72:38:db:ab:a9:7e:11:
a2:dc:63:6e:fd:d2:16:6a:b4:1a:8a:1e:6a:f9:cb:15:c0:25:
2a:21:d7:43:79:e5:90:3d:08:47:04:eb:b2:5e:6c:8e:45:4c:
54:93:8e:f9:84:5b:c3:9a:69:47:4c:16:c0:d9:3e:0c:65:9e:
86:db:38:36:bf:26:2f:eb:c5:61:72:b8:1e:42:35:92:0e:58:
b7:41:60:f5:aa:e9:f4:44:79:1a:ed:29:f7:c6:30:25:d8:67:
36:4c:55:fc:54:c8:6e:65:a9:a3:ac:c2:38:8c:aa:4b:7d:0e:
96:ef:29:50:8c:53:4a:23:44:eb:8b:ea:58:05:1e:1c:87:9b:
16:c5:2d:50:b5:85:20:a4:9c:c4:4e:e6:73:4b:90:40:2c:1f:
2a:ac:66:82:c7:55:c8:66:27:ae:ec:52:5e:4b:a1:31:41:76:
6f:92:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:59 2025 by rpki-client