Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
File: 3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: IeeCtzXzaTb5ZIWPJcxrHt6BUaLOVjZ00hLnEBxeJ7s=
Subject key identifier: 42:D9:D0:15:41:D9:F7:2D:4D:59:0D:64:24:BA:C3:49:1F:2A:1C:5E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1509D635FAB7B2FE7CE7C8B310FF8A5193665651
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:27 +0000
ROA not before: Thu 13 Jun 2024 10:36:27 +0000
ROA not after: Thu 12 Jun 2025 10:41:27 +0000
asID: 47583
IP address blocks: 185.173.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:09:d6:35:fa:b7:b2:fe:7c:e7:c8:b3:10:ff:8a:51:93:66:56:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 13 10:36:27 2024 GMT
Not After : Jun 12 10:41:27 2025 GMT
Subject: CN=42D9D01541D9F72D4D590D6424BAC3491F2A1C5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d6:2f:29:e8:05:bf:1d:cf:85:ac:b5:6c:b3:
bc:1f:49:43:3a:21:ee:82:18:3a:e4:7c:aa:a2:c5:
a0:14:e5:e7:5b:6a:ec:59:f5:cf:1e:7c:97:e0:c1:
a6:e7:0f:29:ef:8d:02:31:b7:d8:dc:5f:a5:ec:b3:
38:50:a1:61:46:73:9a:7e:7c:85:7f:ca:e7:bc:e2:
a2:49:97:65:22:6d:b9:fe:2c:00:b3:e2:63:91:47:
90:9b:f8:8a:d7:00:c3:33:28:6c:db:29:ef:9e:2e:
78:af:18:a0:d0:04:88:07:74:a5:bc:ec:57:67:37:
3b:9d:c1:55:3a:97:e2:27:01:db:13:4f:3f:f5:7b:
4e:82:8d:41:a2:84:86:a0:37:31:56:b8:7c:98:89:
31:43:57:62:80:99:be:a2:4c:4b:3b:c1:05:6a:cb:
a0:71:dc:24:0c:08:f8:bb:09:f9:0c:07:47:fb:1c:
f3:c5:c0:fe:b4:c7:bf:49:03:70:50:a4:5e:eb:ae:
f0:a9:12:78:4c:21:1e:4b:a9:88:f6:a8:a8:22:17:
f8:92:a4:0f:c8:14:50:c4:20:18:9f:9c:ea:d3:44:
5d:e6:82:f2:26:93:6c:c9:76:ca:42:d5:d7:e3:eb:
6f:45:27:56:d5:92:63:5c:85:07:43:e3:1c:a4:37:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:D0:15:41:D9:F7:2D:4D:59:0D:64:24:BA:C3:49:1F:2A:1C:5E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137332e3131302e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.110.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:33:8c:17:3b:48:69:d3:d4:ce:57:dd:58:8c:79:bc:60:c8:
f3:db:09:69:19:9a:7f:d6:4c:50:10:28:78:9d:cc:e5:c7:27:
ef:d6:69:1f:06:6d:9f:ba:a7:ee:c2:66:6a:74:8a:82:bd:04:
ed:32:27:8d:19:a7:a3:fa:6d:5c:10:33:0c:ea:2f:f8:3b:4f:
e9:86:b3:10:a7:f1:85:e4:8f:70:4c:0d:c2:c1:a9:41:6e:75:
a8:69:b9:7e:56:a0:c4:35:ae:18:1a:11:ea:78:ef:28:61:c6:
06:99:37:b3:4b:e5:82:b4:f4:61:4e:14:f1:86:1d:30:cd:8f:
1d:4e:33:eb:08:84:88:1c:a3:06:16:0d:ee:84:ce:71:9b:a3:
46:c5:e0:64:75:1a:57:2f:ad:9d:09:b8:9d:ea:c8:c5:0c:38:
4f:73:d4:8f:96:2a:d1:5a:d3:85:3e:7c:38:e3:fd:d2:15:d2:
03:ad:ff:48:16:c1:38:70:fa:74:b1:ca:19:29:eb:18:6f:c1:
08:6c:67:03:55:31:57:75:75:1c:18:25:76:c4:b4:e9:17:70:
6a:24:df:60:5f:e8:85:0e:f8:9f:80:df:9a:00:05:84:1f:b9:
e0:4e:60:a4:b0:ed:ac:ae:39:30:a3:ef:02:3f:90:0b:6b:9d:
67:c4:fa:f3
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUFQnWNfq3sv5858izEP+KUZNmVlEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDA2MTMxMDM2MjdaFw0yNTA2MTIxMDQxMjdaMDMxMTAvBgNV
BAMTKDQyRDlEMDE1NDFEOUY3MkQ0RDU5MEQ2NDI0QkFDMzQ5MUYyQTFDNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu1i8p6AW/Hc+FrLVss7wfSUM6
Ie6CGDrkfKqixaAU5edbauxZ9c8efJfgwabnDynvjQIxt9jcX6XsszhQoWFGc5p+
fIV/yue84qJJl2Uibbn+LACz4mORR5Cb+IrXAMMzKGzbKe+eLnivGKDQBIgHdKW8
7FdnNzudwVU6l+InAdsTTz/1e06CjUGihIagNzFWuHyYiTFDV2KAmb6iTEs7wQVq
y6Bx3CQMCPi7CfkMB0f7HPPFwP60x79JA3BQpF7rrvCpEnhMIR5LqYj2qKgiF/iS
pA/IFFDEIBifnOrTRF3mgvImk2zJdspC1dfj629FJ1bVkmNchQdD4xykNz/lAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUQtnQFUHZ9y1NWQ1kJLrDSR8qHF4wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMxMzcz
MzJlMzEzMTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAbmtbjANBgkqhkiG9w0BAQsFAAOCAQEASjOMFztIadPUzlfdWIx5vGDI
89sJaRmaf9ZMUBAoeJ3M5ccn79ZpHwZtn7qn7sJmanSKgr0E7TInjRmno/ptXBAz
DOov+DtP6YazEKfxheSPcEwNwsGpQW51qGm5flagxDWuGBoR6njvKGHGBpk3s0vl
grT0YU4U8YYdMM2PHU4z6wiEiByjBhYN7oTOcZujRsXgZHUaVy+tnQm4nerIxQw4
T3PUj5Yq0VrThT58OOP90hXSA63/SBbBOHD6dLHKGSnrGG/BCGxnA1UxV3V1HBgl
dsS06RdwaiTfYF/ohQ74n4DfmgAFhB+54E5gpLDtrK45MKPvAj+QC2udZ8T68w==
-----END CERTIFICATE-----
Generated at Sun Jun 23 13:19:28 2024 by rpki-client on console-fra.rpki-client.org