Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa
File: 3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: /davswl89ZmBW3Cx5+VuEBOQN7H2NPp0gmNdc73hDCg=
Subject key identifier: CE:38:52:3B:52:F2:4C:AB:6B:58:5A:CF:5D:B5:4A:09:11:54:F2:41
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7E085F1DA3CB5342F342A8A36D29EA5EEAC7B8CE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 27 Dec 2024 11:47:47 +0000
ROA not before: Fri 27 Dec 2024 11:42:47 +0000
ROA not after: Fri 26 Dec 2025 11:47:47 +0000
asID: 204170
IP address blocks: 160.238.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:08:5f:1d:a3:cb:53:42:f3:42:a8:a3:6d:29:ea:5e:ea:c7:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:47 2024 GMT
Not After : Dec 26 11:47:47 2025 GMT
Subject: CN=CE38523B52F24CAB6B585ACF5DB54A091154F241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:de:fb:96:f6:32:ff:fb:db:a1:6a:3d:08:
85:05:e2:04:3d:f0:02:60:b9:4a:b8:88:e9:8a:8e:
25:39:25:16:61:9c:3f:b5:65:f9:a1:5f:d0:14:8d:
d4:93:b6:0e:3e:3a:55:15:78:31:58:7a:24:61:95:
6f:15:84:b7:30:90:c4:09:eb:4a:6d:60:92:4a:1f:
01:d7:35:9f:36:ba:74:69:a8:09:8f:6c:af:22:d1:
9d:ce:48:48:ae:c5:cc:4a:e6:f6:b0:0f:ee:45:e1:
fd:a7:b2:0e:80:27:50:61:6f:be:5a:28:e6:5e:b7:
05:75:91:1a:6e:ee:1a:b7:75:4e:4f:24:d9:52:ab:
80:5c:bc:7b:59:2f:87:d4:ac:35:92:ef:27:cf:81:
97:ff:84:b9:22:9e:4a:a1:fa:d6:75:a5:6f:f6:e2:
d5:01:b8:d6:fc:ff:03:f5:25:3e:6d:76:a6:db:dd:
80:cb:6e:6e:41:b5:7a:e5:64:9b:a5:bf:f4:6a:2b:
2f:1b:95:5e:c8:24:85:4a:c4:e2:f3:09:f1:7f:86:
5c:7d:b4:63:e3:6e:84:15:b9:a5:db:15:b5:b1:94:
b4:f0:48:c4:60:19:27:ae:ce:92:0a:b0:3d:fe:51:
37:a0:42:a9:ca:d3:66:08:ba:8a:1a:37:1d:f3:5b:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:38:52:3B:52:F2:4C:AB:6B:58:5A:CF:5D:B5:4A:09:11:54:F2:41
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136302e3233382e33382e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.38.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4a:04:0e:96:83:34:d4:7e:2d:8a:9e:88:b8:3a:82:36:7f:
da:62:2e:eb:9c:3a:ce:f4:e6:df:84:c5:52:c5:8a:59:89:de:
47:1d:de:4e:c3:ec:3c:4b:ab:ee:16:cd:d2:ff:dd:1a:47:10:
9c:83:71:d7:b6:52:5a:0b:00:75:27:49:67:1c:05:f5:97:6b:
73:db:ab:e2:70:3d:25:50:7a:94:af:1d:2f:19:6f:a9:55:1f:
fb:2b:06:fd:f4:d4:15:cb:8a:0a:b0:d3:84:3a:21:d9:b5:8e:
81:76:7e:0f:52:42:83:fc:55:4b:54:3a:89:be:84:1c:44:12:
07:47:d9:95:cd:af:ab:94:95:9d:0d:0c:66:3a:d8:9d:b0:e5:
4d:2a:f0:4c:a1:08:a8:d8:23:eb:ee:e2:df:a9:85:2f:b8:85:
9c:31:bd:e5:9b:5d:d5:5a:01:b7:a9:a3:bb:30:0e:46:9a:b0:
41:ad:10:83:e1:db:10:cb:58:54:3f:12:7f:8a:2a:93:98:b7:
14:41:82:6d:53:76:b7:6a:e8:0e:ff:6e:5f:52:af:b9:41:90:
46:18:32:6d:af:d1:b4:b9:2b:21:dd:01:1a:6b:66:81:c3:ba:
dd:9a:0b:fe:8f:eb:96:08:f8:06:63:87:7c:86:c9:46:22:f5:
40:b0:7f:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:11 2025 by rpki-client