Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
File: 39352e3136392e3137342e302f32342d3234203d3e203233383635.roa (raw, json)
Hash identifier: 6C7EpoIa4qwrnIHVXpHOXoM5luAbkYvf9J9q1AYwG/E=
Subject key identifier: F6:5C:CE:5A:01:FA:90:B1:53:59:51:50:FE:9C:5F:FE:E5:E5:54:A4
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 1E21DD50B9B628D10FA817F050F7807F1715BAC6
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
Signing time: Wed 11 Dec 2024 05:57:59 +0000
ROA not before: Wed 11 Dec 2024 05:52:59 +0000
ROA not after: Wed 10 Dec 2025 05:57:59 +0000
asID: 23865
IP address blocks: 95.169.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:21:dd:50:b9:b6:28:d1:0f:a8:17:f0:50:f7:80:7f:17:15:ba:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Dec 11 05:52:59 2024 GMT
Not After : Dec 10 05:57:59 2025 GMT
Subject: CN=F65CCE5A01FA90B153595150FE9C5FFEE5E554A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:5f:75:33:f7:dd:ce:c6:a2:14:d0:6a:c0:
c3:36:3d:1d:eb:ee:56:2e:c0:f5:3b:f5:7f:06:53:
71:df:78:0f:ae:61:f3:50:3d:ad:2e:44:16:aa:3d:
db:8a:ff:13:75:9a:89:52:e8:60:21:8a:46:d9:69:
57:1b:56:10:4a:7d:af:61:62:0c:a5:2a:75:cf:bb:
03:ab:69:ed:15:eb:e6:d1:8e:5c:a3:c0:bc:77:ed:
e1:69:51:d4:e7:91:16:85:87:1e:61:a7:c1:62:6c:
67:75:e5:ff:02:87:f9:a5:6a:e5:c0:f8:38:63:9b:
38:1f:48:e2:1a:97:e6:a7:52:9c:51:fa:5b:f7:8c:
73:90:44:c6:6b:7a:5a:45:f1:ea:b2:4a:34:4f:5b:
76:2d:7e:a1:6b:49:a3:d4:94:ab:c4:c8:32:1e:6d:
0e:31:91:9a:08:e8:ac:19:e3:0d:36:90:bb:88:9f:
8e:b3:9d:92:08:3f:c9:44:9b:11:54:6b:00:1e:c4:
9f:89:0f:a7:83:61:23:3d:fc:1c:2e:40:f5:8a:3e:
a4:51:97:ec:f6:42:f8:66:a2:90:9a:bb:06:cf:fa:
f4:76:ce:d6:a0:09:65:d0:3f:9b:f9:70:23:ce:2b:
79:23:c3:d5:17:27:e6:c2:e6:50:10:fa:40:46:43:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5C:CE:5A:01:FA:90:B1:53:59:51:50:FE:9C:5F:FE:E5:E5:54:A4
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3137342e302f32342d3234203d3e203233383635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.174.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e7:f3:5e:e6:e9:20:39:7e:f6:5f:9f:74:1c:e3:e1:d2:b2:
2e:35:c9:2b:53:2e:4c:32:ed:77:c2:d9:a8:f4:56:bb:0b:f6:
45:91:93:58:1e:9b:aa:06:77:d8:5d:39:40:43:b6:07:da:7c:
b7:13:4a:54:fa:dc:d3:b9:25:58:ca:82:4c:bd:48:f3:7c:a5:
5a:2b:51:b5:83:de:cb:2d:0c:a7:14:fd:65:4b:47:7e:1f:0b:
4b:25:53:7e:d9:b5:86:3f:0e:ee:0b:e2:ab:82:4a:43:a7:00:
d6:bb:3d:b0:87:fe:fc:54:87:a1:40:b9:34:f4:b4:75:67:9c:
bb:d6:40:cc:33:82:9f:bc:b8:cb:55:11:e3:3f:a0:7e:2a:8a:
b5:a1:bc:53:96:a7:65:6d:98:40:f1:fe:2a:18:8e:5b:e9:8a:
1a:d2:1e:07:cc:c5:5e:bb:4b:12:26:b4:cf:c3:7a:09:b1:70:
40:b5:27:14:ad:c4:88:23:0c:c0:a0:24:81:a9:c9:48:12:13:
ee:56:ee:b9:5a:c1:0e:d6:cc:3a:92:2f:97:9e:f7:ac:57:4e:
33:3b:a6:a5:c2:ab:bd:a6:8f:9a:4a:ab:54:f3:ff:d9:ba:e0:
a1:a6:6e:e2:36:b9:b3:d0:fb:63:65:60:6a:9f:7e:58:ce:9e:
3d:c9:d1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:30 2025 by rpki-client