Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3133312e38302e302f32322d3232203d3e203630343538.roa
File: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (raw, json)
Hash identifier: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=
Subject key identifier: A2:74:88:10:EA:61:0E:7C:32:EB:F3:B6:B5:00:57:DB:7C:04:5E:F0
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 7758A373D6248A73E60987FA84BCD49780057964
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3133312e38302e302f32322d3232203d3e203630343538.roa
Signing time: Mon 05 May 2025 06:54:06 +0000
ROA not before: Mon 05 May 2025 06:49:06 +0000
ROA not after: Mon 04 May 2026 06:54:06 +0000
asID: 60458
IP address blocks: 45.131.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:58:a3:73:d6:24:8a:73:e6:09:87:fa:84:bc:d4:97:80:05:79:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: May 5 06:49:06 2025 GMT
Not After : May 4 06:54:06 2026 GMT
Subject: CN=A2748810EA610E7C32EBF3B6B50057DB7C045EF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:60:a5:6b:0c:59:38:61:a4:9f:96:a4:0c:
8e:1a:fc:08:4d:21:dd:2d:e2:d8:a8:33:65:20:0c:
fc:b1:ee:9b:ec:5c:b9:58:5d:60:33:3f:ef:7e:2a:
4e:9a:a8:a8:f7:6b:37:85:ee:75:58:9b:da:7f:fd:
68:d1:6f:ea:01:fa:3c:6f:f1:3a:37:f4:7c:62:f0:
00:a9:ca:8b:a5:0e:ac:c0:28:9b:45:4b:bf:23:b6:
ba:88:e8:8f:34:bc:6a:be:63:a0:37:42:42:5d:de:
96:58:29:25:f2:a3:6a:6f:cc:1c:7f:9c:14:18:26:
0f:56:f8:8d:51:10:f2:4e:b0:a4:5e:35:aa:60:e0:
20:30:3f:b4:2b:5a:84:85:43:93:9d:f3:2f:53:5b:
b9:fe:fb:8b:b0:d6:cd:6b:d1:82:c3:25:d3:89:23:
a2:ba:b7:fd:af:25:00:99:d6:20:4c:8f:c0:a3:b4:
2b:1c:2d:67:72:64:ac:09:56:fb:c5:27:01:b3:a6:
bf:65:98:33:87:60:81:88:69:07:28:ef:b3:0f:9e:
f4:6b:22:47:c0:2c:1d:9a:8a:fe:11:dc:80:3b:25:
65:1d:cd:12:91:1b:65:62:27:48:46:cd:f8:37:d4:
7d:ea:6a:ba:5e:54:9f:7c:89:29:45:b4:55:73:8c:
c5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:88:10:EA:61:0E:7C:32:EB:F3:B6:B5:00:57:DB:7C:04:5E:F0
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3133312e38302e302f32322d3232203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.80.0/22
Signature Algorithm: sha256WithRSAEncryption
97:d3:b6:36:ee:b3:c5:a6:39:47:32:93:5f:cf:af:66:97:00:
ea:15:87:24:19:de:c5:67:2c:5e:68:e5:30:1a:45:c5:90:83:
3c:1e:0a:80:1a:d8:7c:d6:70:92:03:33:7e:96:3a:52:3b:5b:
16:e3:0a:ff:de:47:b9:06:01:da:4a:44:ca:d1:bd:93:11:80:
73:24:d8:f9:8b:31:2e:2b:ba:02:d4:9f:c0:6f:37:11:a5:20:
68:65:74:ba:6c:a8:eb:7d:9a:4e:e1:4c:63:64:f5:4d:71:cc:
9b:ba:ab:61:45:85:1b:b4:a9:c7:9e:17:32:09:b8:b8:38:19:
35:eb:09:2f:3b:c5:13:da:32:5c:ae:6d:d8:72:f2:54:c5:58:
ed:71:20:9e:47:17:15:45:64:18:42:ba:80:70:7e:4b:61:a9:
31:0c:dc:d3:77:0e:44:e8:67:03:5b:4a:41:88:ba:7e:09:4f:
d9:d9:f0:14:fc:4d:94:69:47:d2:a9:b7:fe:52:24:70:80:f4:
03:33:64:06:63:6b:bc:ed:7e:d3:f3:81:f4:39:8f:ee:53:4e:
5c:f1:b6:d7:60:91:86:e3:ee:7c:ca:08:ae:88:92:23:cd:c4:
87:3c:05:a5:62:a2:b7:1e:ea:44:d0:50:96:d1:84:cb:11:29:
6d:f4:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:18:50 2025 by rpki-client