Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3133302e302f32332d3332203d3e203531313637.roa
File: 3134372e37382e3133302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: BPKZfnP+7/muk7zzwvuPAO+aeVouTQqHpnpFTFASQow=
Subject key identifier: 95:DA:72:1C:BF:53:0E:BB:2D:1D:B4:0E:23:52:E5:05:4F:76:5B:53
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 571044186989E7AB6246CE167819483A8735BAC5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3133302e302f32332d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:38 +0000
ROA not before: Fri 27 Dec 2024 11:42:38 +0000
ROA not after: Fri 26 Dec 2025 11:47:38 +0000
asID: 51167
IP address blocks: 147.78.130.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:10:44:18:69:89:e7:ab:62:46:ce:16:78:19:48:3a:87:35:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:38 2024 GMT
Not After : Dec 26 11:47:38 2025 GMT
Subject: CN=95DA721CBF530EBB2D1DB40E2352E5054F765B53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:37:7b:8a:d4:8e:8b:e3:57:c4:31:a5:df:
45:d0:3d:2e:84:4f:9a:eb:c6:0e:6f:ee:04:c2:07:
46:90:e1:2a:95:d9:a9:dc:fd:a2:cc:d4:ef:ed:c3:
23:d8:94:fd:95:da:a7:d3:5b:ad:b9:39:41:08:2c:
a6:e9:e7:d4:ea:0b:9d:b0:4a:ad:0f:f3:14:a6:f4:
cc:2a:f7:34:bb:6a:67:fe:3f:d5:38:65:7b:5b:5a:
b5:62:9f:9e:69:d6:69:cb:98:c3:b5:8b:b0:c1:ad:
ab:42:ce:7e:3d:34:8a:4c:67:84:9e:69:d2:26:d3:
7d:10:a4:21:63:b9:21:c8:b6:87:24:6e:55:39:81:
71:e1:a5:c9:61:01:96:e8:c3:c0:90:55:e5:a7:f0:
c5:76:2a:bf:a3:47:86:fb:6e:f2:cd:10:3d:17:9a:
fe:cd:9c:51:6b:5d:0a:94:aa:67:96:b7:78:1b:74:
0f:0a:28:72:d7:ca:d6:00:37:32:3c:bc:81:13:91:
3d:9f:a2:16:ec:07:67:f4:19:b3:cf:bc:8c:35:f0:
a5:fc:3c:e1:1a:29:40:38:03:d4:1e:76:66:87:ee:
91:32:27:37:c0:87:43:80:c7:8c:b3:c2:f6:97:26:
c1:38:b4:0a:65:26:c8:70:d2:05:0e:0d:a5:4c:0a:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:72:1C:BF:53:0E:BB:2D:1D:B4:0E:23:52:E5:05:4F:76:5B:53
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3134372e37382e3133302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.130.0/23
Signature Algorithm: sha256WithRSAEncryption
07:c7:93:59:0b:48:f2:c9:d4:30:fa:c2:2a:91:4e:59:35:e0:
07:49:bf:71:c6:5b:88:eb:e9:17:2a:71:a1:5b:52:0f:ca:f3:
6d:62:52:61:e3:88:a9:3a:33:ee:fd:b3:20:c3:f1:b8:03:4c:
e1:49:54:17:d1:cf:73:be:14:c8:35:e1:c3:ee:19:50:7d:9c:
b4:6b:1f:82:c6:f5:ea:a6:af:81:68:09:61:a2:10:12:0d:03:
ba:95:94:95:66:80:98:61:1f:d4:ec:47:22:11:dd:13:ce:cd:
53:fc:a0:c2:e9:d1:b0:a9:42:67:5b:3c:bb:7b:12:df:f8:d8:
99:7a:bc:27:09:e8:37:10:fc:7a:3c:11:76:7d:0e:62:53:7c:
27:03:0b:c0:6a:65:97:af:00:3f:71:76:90:ec:8e:96:cc:e0:
9f:fe:c2:fa:f5:88:91:ad:81:31:e1:70:d0:ae:bc:7f:4d:4f:
b6:49:7f:eb:b1:7c:8c:72:09:85:55:73:e2:f3:b2:7c:96:0f:
fe:4c:10:99:3e:12:10:c1:cd:6f:bb:55:8e:96:71:d9:a2:08:
ac:00:38:07:8d:fc:d9:c4:2c:26:b7:1d:73:b3:95:5a:fc:64:
c0:33:40:da:ea:f7:cd:02:c1:81:24:44:34:a6:f7:49:d3:34:
a0:63:13:ea
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUVxBEGGmJ56tiRs4WeBlIOoc1usUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzhaFw0yNTEyMjYxMTQ3MzhaMDMxMTAvBgNV
BAMTKDk1REE3MjFDQkY1MzBFQkIyRDFEQjQwRTIzNTJFNTA1NEY3NjVCNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZmzd7itSOi+NXxDGl30XQPS6E
T5rrxg5v7gTCB0aQ4SqV2anc/aLM1O/twyPYlP2V2qfTW625OUEILKbp59TqC52w
Sq0P8xSm9Mwq9zS7amf+P9U4ZXtbWrVin55p1mnLmMO1i7DBratCzn49NIpMZ4Se
adIm030QpCFjuSHItockblU5gXHhpclhAZbow8CQVeWn8MV2Kr+jR4b7bvLNED0X
mv7NnFFrXQqUqmeWt3gbdA8KKHLXytYANzI8vIETkT2fohbsB2f0GbPPvIw18KX8
POEaKUA4A9QedmaH7pEyJzfAh0OAx4yzwvaXJsE4tAplJshw0gUODaVMChFlAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUldpyHL9TDrstHbQOI1LlBU92W1MwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM0MzcyZTM3Mzgy
ZTMxMzMzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAGTToIwDQYJKoZIhvcNAQELBQADggEBAAfHk1kLSPLJ1DD6wiqRTlk14AdJ
v3HGW4jr6RcqcaFbUg/K821iUmHjiKk6M+79syDD8bgDTOFJVBfRz3O+FMg14cPu
GVB9nLRrH4LG9eqmr4FoCWGiEBINA7qVlJVmgJhhH9TsRyIR3RPOzVP8oMLp0bCp
QmdbPLt7Et/42Jl6vCcJ6DcQ/Ho8EXZ9DmJTfCcDC8BqZZevAD9xdpDsjpbM4J/+
wvr1iJGtgTHhcNCuvH9NT7ZJf+uxfIxyCYVVc+LzsnyWD/5MEJk+EhDBzW+7VY6W
cdmiCKwAOAeN/NnELCa3HXOzlVr8ZMAzQNrq980CwYEkRDSm90nTNKBjE+o=
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:17:51 2025 by rpki-client