Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20323734373836.roa
File: 34352e3132382e31342e302f32332d3233203d3e20323734373836.roa (raw, json)
Hash identifier: V6mtJWR732G/FJGWxHZiLboD66+fB4OqjGMzuHg8F6s=
Subject key identifier: 38:35:4D:A9:24:07:EF:75:4F:0A:7C:11:10:07:36:BB:36:BF:56:F3
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 59A908A466B799FFDD3A5082D3046A27E4E70670
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20323734373836.roa
Signing time: Sat 19 Apr 2025 13:11:08 +0000
ROA not before: Sat 19 Apr 2025 13:06:08 +0000
ROA not after: Sat 18 Apr 2026 13:11:08 +0000
asID: 274786
IP address blocks: 45.128.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:a9:08:a4:66:b7:99:ff:dd:3a:50:82:d3:04:6a:27:e4:e7:06:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Apr 19 13:06:08 2025 GMT
Not After : Apr 18 13:11:08 2026 GMT
Subject: CN=38354DA92407EF754F0A7C11100736BB36BF56F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:8f:cd:6f:25:53:a5:14:59:c2:48:6e:5a:
06:af:83:87:be:3c:d7:8d:6b:3e:60:c0:f0:1c:18:
68:58:db:a6:9b:59:ba:0a:f3:76:96:de:d8:1c:5e:
a4:dc:a3:86:d0:e9:15:8a:bc:62:1b:6d:30:73:01:
f6:b2:20:f3:8c:66:7e:50:e6:b3:7f:ec:85:51:e6:
e4:a8:b9:34:f6:ba:bc:ed:40:ce:46:3e:9b:59:26:
de:b2:c6:ee:7b:fb:03:5d:a7:8f:0f:58:7e:f7:91:
3b:78:89:cf:2f:1f:b6:bc:64:00:d5:2c:ab:72:80:
2c:4f:71:4f:cc:59:66:8c:f5:92:bc:a4:4d:5a:9e:
b1:be:e6:fe:21:31:a7:d8:64:06:79:ad:99:4a:80:
4f:b1:7a:1b:08:fb:72:b2:3a:1d:ab:c0:b6:35:fa:
47:d4:7a:cd:dc:d9:02:f9:4c:14:66:9e:36:7d:02:
56:e5:62:5c:69:e0:d5:cc:34:57:74:19:13:d4:87:
bb:bf:d3:c4:21:26:5a:fc:9d:55:d5:97:70:5c:27:
11:b1:6d:2c:96:fa:62:0c:a0:a2:e2:a8:b3:8b:c7:
63:23:21:2b:9b:a2:49:79:5d:8c:8d:6e:46:c4:3e:
6c:6b:99:71:4c:d5:dd:eb:2c:7c:ee:c2:19:49:b7:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:35:4D:A9:24:07:EF:75:4F:0A:7C:11:10:07:36:BB:36:BF:56:F3
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31342e302f32332d3233203d3e20323734373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.14.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:25:ae:69:23:c9:19:bb:c1:3b:0a:c2:f4:5d:f5:ff:3f:53:
29:70:e2:06:72:f2:d5:8d:13:e4:69:ab:f6:c5:52:27:13:4b:
9b:c2:f7:f6:8c:39:2c:99:b1:8b:be:96:6e:00:ba:b2:45:a7:
e9:2e:de:38:80:96:d2:e3:33:5a:cf:04:03:ca:85:2e:b9:c0:
47:58:a8:8a:c6:2d:76:9d:1c:88:c2:15:81:b7:8e:67:cc:68:
f7:15:8c:00:aa:43:10:0a:99:13:c0:ee:53:44:dd:95:af:e7:
43:c5:86:17:50:9e:72:37:3c:6e:64:e6:34:59:f7:5a:de:09:
fd:88:8e:dc:06:7f:a1:40:d4:e4:40:1e:bc:90:e0:45:da:74:
dc:b6:b7:fa:0b:b2:3f:88:27:3d:1d:d7:b1:5e:e8:07:03:6c:
4f:46:21:2c:db:f1:87:c2:c2:1e:10:ab:52:86:44:9c:9d:2c:
37:c7:ae:90:e3:a5:a5:a1:29:16:86:22:2f:24:e6:02:2a:fc:
f1:06:3f:4b:94:3a:25:70:0b:a4:53:53:64:6b:6b:5c:01:a5:
73:09:16:22:74:44:79:bf:60:0d:a9:3d:fb:5d:3b:31:3c:2f:
8a:05:fe:98:73:94:e7:68:33:9f:b1:46:8a:07:95:bf:8a:d2:
11:69:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:29:11 2025 by rpki-client