Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36312e302f32342d3234203d3e20323733323432.roa
File: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (raw, json)
Hash identifier: tU7tyCca1tIOx1hnSKjuKCDiTN546CQQQvHB6q/i7qk=
Subject key identifier: B2:7D:D7:FB:17:85:A2:AD:A2:C0:39:4C:11:B8:A5:B5:58:3C:70:DB
Certificate issuer: /CN=2e2674263aecd572673f87614919ca492c79faea
Certificate serial: 7F69BD851C5FBBA88B1A06D55A35B8B9118E6F78
Authority key identifier: 2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36312e302f32342d3234203d3e20323733323432.roa
Signing time: Sun 20 Apr 2025 19:53:42 +0000
ROA not before: Sun 20 Apr 2025 19:48:42 +0000
ROA not after: Sun 19 Apr 2026 19:53:42 +0000
asID: 273242
IP address blocks: 45.66.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:69:bd:85:1c:5f:bb:a8:8b:1a:06:d5:5a:35:b8:b9:11:8e:6f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e2674263aecd572673f87614919ca492c79faea
Validity
Not Before: Apr 20 19:48:42 2025 GMT
Not After : Apr 19 19:53:42 2026 GMT
Subject: CN=B27DD7FB1785A2ADA2C0394C11B8A5B5583C70DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:f1:46:e5:d4:ca:a0:88:42:38:65:e4:95:
0c:00:98:6c:95:ac:d3:88:47:31:bb:82:93:a7:99:
52:81:27:61:b8:15:1d:e5:5b:01:91:2c:41:21:a8:
db:1e:36:55:d6:1d:50:4c:a9:98:36:ca:75:cf:db:
40:97:c2:73:9b:2d:60:9f:c0:85:0e:8e:20:32:6e:
16:e8:62:a8:30:dd:96:cf:d0:28:87:a7:f0:99:08:
ff:e3:80:c4:91:4f:15:80:91:a5:e0:74:e6:f6:44:
1e:e7:b2:fc:81:b8:08:5b:cc:38:cc:27:63:4c:3b:
27:18:c6:56:67:ef:de:2e:19:79:1c:3f:ad:44:40:
0a:ae:d5:bf:1f:60:65:8d:70:dc:6e:bc:93:19:ed:
f1:57:a6:cc:4a:b7:21:6e:4c:09:5d:e8:80:e7:bf:
86:c3:59:ab:ce:28:03:bc:b1:55:5b:42:8d:ae:fb:
f3:12:f7:1e:f2:f1:bf:79:68:95:d0:b5:18:d6:3c:
52:8a:f5:8d:63:7a:51:ea:36:2f:87:61:cb:51:ea:
0a:96:30:b3:c5:7e:45:13:7b:a6:7c:43:25:35:00:
46:3b:2f:3e:4c:95:e0:14:d4:03:04:7e:e8:86:a9:
24:d7:0d:e7:5b:f1:d0:79:3b:0b:e6:e0:9a:fc:03:
c6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7D:D7:FB:17:85:A2:AD:A2:C0:39:4C:11:B8:A5:B5:58:3C:70:DB
X509v3 Authority Key Identifier:
keyid:2E:26:74:26:3A:EC:D5:72:67:3F:87:61:49:19:CA:49:2C:79:FA:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/2E2674263AECD572673F87614919CA492C79FAEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiZ0Jjrs1XJnP4dhSRnKSSx5-uo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bd7c231e-a33c-4555-b42e-d02093849299/0/34352e36362e36312e302f32342d3234203d3e20323733323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:79:90:71:ff:ca:6f:73:5d:08:d2:59:c6:62:d4:f6:b3:f2:
bf:bb:53:82:ea:18:b1:0a:d5:38:aa:ca:a8:f2:83:5e:a5:57:
6e:5b:85:a5:89:3d:d0:3a:07:bc:36:4d:93:20:39:75:11:59:
46:ca:69:1c:bd:95:ab:e0:4b:d6:b0:c6:cd:7e:7c:7b:d7:9f:
56:c8:67:89:00:a4:28:1c:bc:e0:05:d9:76:a9:22:2e:45:d1:
ff:54:30:a4:73:c7:03:df:32:a7:b8:82:61:1c:ad:d9:27:13:
4d:3c:24:98:5f:b2:95:81:87:df:d6:5e:a2:91:3e:0d:f3:10:
83:e7:69:72:62:76:3f:43:07:0b:26:e9:65:73:3c:45:cd:02:
f3:c0:2d:84:6b:f8:33:b0:d1:d7:ca:79:47:06:1c:8c:1b:c6:
43:ed:0a:e9:6f:94:4a:df:b8:9b:98:9c:71:99:ed:93:87:5b:
ee:8f:a4:5d:96:ba:87:e1:5b:b7:e8:52:96:d9:89:e6:9f:32:
ca:86:fb:66:e2:1a:00:b3:fc:80:9c:b0:04:10:d4:c3:d2:01:
dc:c8:4c:4d:0e:ce:23:ba:1e:26:da:40:75:52:49:66:0e:30:
df:7d:cf:57:d9:52:27:80:76:cf:80:7a:d9:b3:97:4d:f1:25:
30:80:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:30:14 2025 by rpki-client