Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203430303231.roa
File: 3130392e3233362e36302e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: HWiBy/cJdEbDzXR0Oq2I8iphVF+3cdzNH7w3oYDOhqk=
Subject key identifier: 9C:D5:78:91:2D:EF:18:4E:60:1F:59:80:CF:90:51:0B:B5:A6:0B:B8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7F545DE889C5C983D590515A66B280E3E330F229
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203430303231.roa
Signing time: Fri 20 Dec 2024 15:23:25 +0000
ROA not before: Fri 20 Dec 2024 15:18:25 +0000
ROA not after: Fri 19 Dec 2025 15:23:25 +0000
asID: 40021
IP address blocks: 109.236.60.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:54:5d:e8:89:c5:c9:83:d5:90:51:5a:66:b2:80:e3:e3:30:f2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:25 2024 GMT
Not After : Dec 19 15:23:25 2025 GMT
Subject: CN=9CD578912DEF184E601F5980CF90510BB5A60BB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:e8:64:b5:f8:88:d1:d5:a9:84:6f:67:1f:
5c:f0:00:00:64:42:b8:58:30:49:30:95:bc:e3:64:
f0:be:30:d7:36:f8:44:ee:be:44:87:c2:cc:9d:74:
4e:b7:ab:d5:5f:c2:cc:ce:20:69:d8:57:88:ff:59:
41:97:1e:83:0a:6f:6d:9c:ed:bc:2b:99:44:29:51:
42:c9:8b:90:79:20:45:4c:2a:ef:6d:f3:1c:33:cd:
87:50:c9:54:94:0a:36:4a:ad:5a:49:88:3e:6c:e5:
5e:21:a6:1e:bd:09:41:24:12:88:29:3c:6c:8b:49:
b8:8a:14:24:12:aa:a9:cb:6c:19:d1:97:1c:ea:ea:
51:e2:c4:91:49:58:f7:e9:bc:ae:1b:1a:29:66:87:
c9:2c:36:4e:47:22:25:ea:d9:88:26:13:0f:74:88:
c7:60:8b:b2:a7:26:c5:e4:1e:af:bd:6f:68:b0:51:
07:a1:9c:a1:6b:93:fd:84:e3:aa:48:af:26:a8:2f:
e4:35:24:c9:38:82:86:e1:1b:fc:47:b5:38:d6:f9:
7e:2e:d7:e9:27:af:36:0f:0f:67:9e:31:f8:00:c2:
85:4f:9f:91:f7:fb:a8:a1:2d:d2:4a:fe:c5:0e:6f:
b7:95:0d:12:b6:4a:88:99:a6:13:c4:1a:0f:53:ca:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D5:78:91:2D:EF:18:4E:60:1F:59:80:CF:90:51:0B:B5:A6:0B:B8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3130392e3233362e36302e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0d:82:3b:bf:41:79:03:7e:01:4f:fe:d9:1c:b0:76:4f:81:
6c:bb:70:ff:6e:77:f1:35:c0:5d:82:ab:ca:c1:41:c7:3f:47:
20:f0:db:d9:c5:56:5b:88:69:af:1e:58:d3:f4:a4:f0:2c:f7:
3d:82:57:53:8d:89:00:4a:a2:4d:56:83:49:51:bd:25:ae:b0:
f6:b4:92:3a:e8:75:6a:38:9a:14:71:b3:5c:59:04:9a:35:7f:
0d:07:30:2f:33:21:26:4e:b4:37:b7:77:ee:7c:37:f1:9d:55:
6b:b3:18:d0:79:dd:4d:76:5b:7e:af:c4:aa:35:07:a5:b2:ce:
24:86:b8:80:f4:66:77:b2:bb:64:07:e8:8f:be:45:94:5f:a2:
23:68:17:64:68:24:f0:44:c7:c0:10:e3:e8:20:9d:39:88:55:
4b:d5:ea:9b:e5:60:03:28:0a:29:27:10:a6:80:8e:f7:be:20:
4b:14:d0:8e:0f:f7:ed:96:90:c8:85:6c:4a:db:f1:6b:02:a8:
7a:7b:c6:7f:f3:2c:39:6b:6c:45:63:d8:e2:15:cb:a9:96:d2:
59:52:3b:f9:86:43:95:93:1c:1c:cb:05:08:1a:f9:28:57:f2:
79:20:88:d1:29:d5:30:c9:10:cf:4c:33:e4:6b:6a:ec:00:6b:
46:60:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:10 2025 by rpki-client