Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa
File: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (raw, json)
Hash identifier: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=
Subject key identifier: 36:18:88:E4:91:84:4F:24:18:EB:A3:B3:B0:F2:6E:EB:48:1D:52:69
Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial: 557DFDB24163D0094F146208BBB9C913A6F7BF2B
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa
Signing time: Tue 22 Apr 2025 06:57:23 +0000
ROA not before: Tue 22 Apr 2025 06:52:23 +0000
ROA not after: Tue 21 Apr 2026 06:57:23 +0000
asID: 214466
IP address blocks: 45.139.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7d:fd:b2:41:63:d0:09:4f:14:62:08:bb:b9:c9:13:a6:f7:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Validity
Not Before: Apr 22 06:52:23 2025 GMT
Not After : Apr 21 06:57:23 2026 GMT
Subject: CN=361888E491844F2418EBA3B3B0F26EEB481D5269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:9f:59:1a:69:18:17:ab:8c:ce:57:27:71:
42:85:79:35:9e:1e:cf:7b:93:52:80:48:ea:95:96:
28:1f:a0:df:a4:4b:1e:55:2d:64:b0:59:bd:79:1f:
aa:ad:a1:eb:31:ec:2c:be:86:97:64:a3:24:5c:70:
ec:58:57:72:df:0a:82:76:2b:33:bd:6b:62:95:07:
e6:2c:e2:e1:57:a4:b9:40:65:20:a2:19:d2:da:87:
83:62:49:a4:b1:fa:82:b9:ad:41:8b:b9:ce:fe:07:
8e:8b:d8:2e:d1:81:ef:4a:10:71:5a:1b:09:a4:f5:
0c:26:7d:cd:44:cc:89:c6:39:64:b7:d4:85:f9:83:
e9:d7:f2:44:40:58:a3:8c:ea:0e:6a:4f:75:6b:a3:
ae:8e:20:e0:13:a5:bc:2c:62:3d:05:11:9a:a0:62:
06:26:1d:f4:ce:30:3f:a2:cf:11:cf:21:10:0f:b5:
f2:c9:d2:63:9a:aa:0c:ae:fb:16:d4:d4:69:d6:64:
b5:3a:50:05:21:0e:42:ef:ae:22:9c:ca:fa:30:07:
7a:ba:62:ae:ab:ec:aa:1c:3d:a3:8d:f9:39:52:09:
fb:eb:69:83:14:15:ab:1e:19:ec:b3:d3:a5:4c:73:
91:7b:68:aa:ae:8f:bd:cf:b0:e7:e0:64:b1:d4:95:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:88:E4:91:84:4F:24:18:EB:A3:B3:B0:F2:6E:EB:48:1D:52:69
X509v3 Authority Key Identifier:
keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.199.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:33:3b:a9:c3:20:cf:7c:5f:e1:a7:ff:e9:ed:08:1b:db:35:
f2:d5:ba:c4:0a:fc:05:9c:de:80:82:bb:46:cb:2a:ff:e3:b0:
13:bf:d4:78:42:a3:20:ce:3b:bb:43:3f:8f:82:d3:ec:42:68:
35:6f:2d:99:8c:7b:22:45:35:91:e8:65:1b:22:17:0d:19:45:
e4:65:d4:36:df:3d:1b:b0:06:16:2e:f4:d4:a5:0c:ad:3f:82:
fa:d2:4c:56:14:d9:63:52:03:5f:01:99:46:3f:bf:53:6e:9c:
71:32:c1:a5:87:0a:8f:90:36:35:11:c8:18:61:78:28:5a:36:
fb:e4:9d:7c:e0:9a:12:bf:db:ae:8b:c7:75:68:a2:ca:ae:10:
ef:9d:25:55:a8:23:c6:06:2c:a1:37:14:5e:cd:8f:35:41:9c:
f1:56:62:36:0c:3d:48:85:7e:e9:be:76:13:92:d7:db:51:eb:
46:e7:22:15:87:46:4e:9d:e5:27:15:a4:0c:b9:cd:38:cd:c5:
5d:3d:88:90:7e:50:28:76:f0:57:1e:4f:c3:bc:21:0a:e5:9e:
a8:be:b2:19:e7:10:21:ab:83:d7:99:d9:ce:b3:81:c9:5e:88:
72:80:bb:9d:82:1b:e7:76:eb:57:6c:5c:23:d2:61:30:11:e6:
e8:6d:85:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:50:48 2025 by rpki-client