Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20323133363231.roa
File: 39332e39352e3131332e302f32342d3234203d3e20323133363231.roa (raw, json)
Hash identifier: jPMOnVBJGyWgOv32913K0+cdT1poUcrcfEBeZTHQ2jQ=
Subject key identifier: 37:00:76:87:CC:A2:EC:7A:CE:CE:69:86:19:CD:AC:C3:B9:1E:17:F0
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3E07B8CCFD22D8360118E4F6CAE54A3530134EB4
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20323133363231.roa
Signing time: Fri 10 Jan 2025 16:12:58 +0000
ROA not before: Fri 10 Jan 2025 16:07:58 +0000
ROA not after: Fri 09 Jan 2026 16:12:58 +0000
asID: 213621
IP address blocks: 93.95.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:07:b8:cc:fd:22:d8:36:01:18:e4:f6:ca:e5:4a:35:30:13:4e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Jan 10 16:07:58 2025 GMT
Not After : Jan 9 16:12:58 2026 GMT
Subject: CN=37007687CCA2EC7ACECE698619CDACC3B91E17F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:60:e8:51:af:9a:27:ca:44:b1:91:1e:b1:
31:18:e6:6c:f7:4b:4c:7c:35:5f:ba:e8:35:4b:b1:
1f:4a:5f:b8:ae:e6:8d:0f:98:a7:2c:1a:dd:e6:24:
73:57:b5:87:05:7c:65:e6:df:81:e4:84:6e:cf:38:
c5:a9:c4:2d:00:07:de:7e:ec:be:bb:3f:70:5d:4d:
11:5c:e1:ba:c1:cf:f4:72:0d:29:83:c0:4d:c8:9a:
69:fc:fa:ef:2b:77:4f:e3:70:80:d0:f6:2c:5d:e7:
3e:aa:e9:80:d1:e6:f5:c6:57:29:1e:8a:b6:a6:19:
0e:2a:12:90:f8:29:4f:df:24:ae:90:1c:dc:8e:ab:
68:59:50:91:33:b0:40:e0:cc:f0:b7:2a:8c:c5:06:
a6:58:02:23:92:ad:17:c8:3c:4f:f5:dc:25:02:78:
b5:55:fd:8d:c5:4b:62:0b:c3:38:3a:db:65:31:53:
75:29:7d:67:a6:f3:2e:ba:53:46:a5:9f:b1:91:a3:
a0:d3:47:92:a6:5f:59:7c:18:59:19:cf:87:6b:12:
1f:bd:80:38:9d:3a:52:93:b5:e6:f9:ae:ac:13:ba:
c2:7d:5d:75:a7:56:da:c4:5c:d6:fd:73:71:20:e9:
2c:21:04:af:27:1a:c5:0c:be:bd:a2:36:27:cd:56:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:00:76:87:CC:A2:EC:7A:CE:CE:69:86:19:CD:AC:C3:B9:1E:17:F0
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131332e302f32342d3234203d3e20323133363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.113.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6c:48:ce:0d:c3:17:54:6f:79:34:54:ec:24:1f:64:4a:6c:
68:91:5f:6e:13:22:4d:23:8d:c9:2f:9f:0c:d1:ea:72:56:fb:
13:25:6b:28:ba:0c:d7:83:e5:22:b9:0a:1d:d6:c5:12:eb:c6:
d9:86:b6:1e:3b:c5:2a:6b:c8:42:c1:da:84:22:c7:fb:d7:b1:
30:3c:eb:27:af:d5:77:96:af:41:a5:cb:26:f1:6a:4a:e8:7c:
43:9e:eb:80:5b:29:45:22:83:02:1a:97:eb:a7:25:20:6c:a6:
88:b8:e5:dc:1c:13:27:5e:60:97:ed:52:55:55:27:e5:f9:61:
0a:71:d0:5e:df:31:a0:e3:e4:6e:2f:23:83:76:34:c2:49:87:
a9:71:fe:8e:25:ee:d4:bd:96:21:7f:5a:26:54:4d:d3:bc:94:
55:11:d3:1e:f4:68:c5:af:f3:e4:6b:64:16:a9:00:09:ed:31:
51:5f:03:2c:f1:89:a2:93:0c:bc:fb:3d:e9:57:94:f9:c3:ca:
46:2e:ab:36:98:aa:81:94:b9:1e:fb:27:c5:20:23:e7:67:77:
cb:b4:b5:17:66:e0:e8:00:7c:b5:bb:6b:6d:81:c4:fd:51:ca:
c1:c7:2d:fa:0c:0e:3a:57:dd:20:82:ae:bf:05:4c:cd:4c:69:
86:b8:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:10 2025 by rpki-client