Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa
File: 3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa (raw, json)
Hash identifier: WeIAwaKAaXY4MiGMyKo8Cvrq0sO4X51tCTCUChJrUnc=
Subject key identifier: 7B:47:C0:24:1C:C2:69:CB:B8:4E:10:A7:1D:44:68:20:CE:34:48:87
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6ED7EA3050D969FC1B7A031D77905D8400E720B2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:30 +0000
ROA not before: Fri 20 Dec 2024 15:18:30 +0000
ROA not after: Fri 19 Dec 2025 15:23:30 +0000
asID: 136787
IP address blocks: 176.113.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:d7:ea:30:50:d9:69:fc:1b:7a:03:1d:77:90:5d:84:00:e7:20:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:30 2024 GMT
Not After : Dec 19 15:23:30 2025 GMT
Subject: CN=7B47C0241CC269CBB84E10A71D446820CE344887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:f3:15:36:4b:2d:e5:1a:6b:b3:11:d6:ec:
27:36:23:6b:e8:50:9a:45:56:47:6e:d5:f7:63:8d:
2c:6c:a3:a5:83:9f:8a:4f:26:23:bf:69:c7:5a:79:
d7:f6:b0:75:0c:2a:29:86:ce:48:e0:fe:72:e4:21:
3b:48:a2:0f:78:09:5e:d6:12:da:3d:ad:0d:83:ba:
b2:57:3a:ef:14:e3:0e:4d:23:47:c3:94:ba:74:94:
06:f8:37:10:8d:e2:a8:93:c8:f1:81:c5:5a:b0:e1:
37:9e:ff:6c:c6:25:47:b5:c8:fb:51:78:3e:8b:06:
ba:1e:e5:82:0a:6d:af:b3:d7:59:73:e6:68:65:26:
0d:9f:2e:c9:f7:ac:cb:32:ca:f6:95:a5:fb:bd:5e:
b7:99:69:e5:eb:70:55:66:83:50:1a:48:cb:76:66:
4b:5b:ce:a7:10:93:40:2f:c9:f8:b4:87:03:25:3c:
17:88:ea:ae:85:0d:57:9d:f1:91:a9:f7:ed:a9:6a:
05:b7:ef:e5:a3:25:8e:3e:a1:71:84:8a:1e:34:e6:
37:2a:2d:df:a3:aa:30:32:b3:7d:ab:60:16:90:0e:
16:62:bd:f2:61:76:9e:d2:9a:b3:c2:a0:02:72:6d:
e9:58:28:3f:f4:81:55:7e:31:09:08:e0:53:51:37:
93:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:C0:24:1C:C2:69:CB:B8:4E:10:A7:1D:44:68:20:CE:34:48:87
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3137362e3131332e37362e302f32322d3232203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:21:e7:9a:65:74:51:61:03:be:64:5f:07:f5:c3:e0:ff:05:
8f:1e:ef:80:40:b1:3e:d8:95:de:9f:0b:a1:d0:07:b5:d2:6d:
93:7e:d3:a6:d4:0f:a7:14:42:34:d8:05:59:23:32:36:35:ee:
24:eb:69:e3:f8:b1:e9:63:dc:e5:62:66:b2:01:df:50:0d:5c:
f1:8b:6d:4e:1a:57:bf:7e:77:d2:28:a2:da:2c:da:f4:58:c9:
65:ad:cd:e0:71:9a:0a:20:85:60:aa:92:15:16:a2:d4:bc:83:
51:2b:5a:8f:1a:0b:c2:a9:04:a5:58:67:b7:14:56:1f:ab:31:
5b:c8:7d:4f:dc:3a:e2:cd:f5:20:5b:ff:75:cb:93:c9:e1:d1:
52:4f:a2:71:99:20:f9:bc:1e:f3:64:56:0c:c4:ea:26:98:9f:
f5:95:8c:cc:5a:3f:dd:1f:fb:1a:9f:49:3b:6c:87:79:90:10:
53:f3:a4:5d:19:f8:19:59:ae:2c:9d:05:db:36:b8:b2:ef:f0:
66:ae:22:c6:ee:75:d5:7b:09:3d:26:51:7a:a7:d6:e6:f8:fe:
4e:9a:f5:53:9b:c7:15:d4:7c:5b:b7:c0:e6:87:84:99:98:87:
57:6d:cb:ef:3a:42:d7:ed:09:f5:35:c3:53:95:e4:59:b4:43:
9f:87:92:10
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUbtfqMFDZafwbegMdd5BdhADnILIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MzBaFw0yNTEyMTkxNTIzMzBaMDMxMTAvBgNV
BAMTKDdCNDdDMDI0MUNDMjY5Q0JCODRFMTBBNzFENDQ2ODIwQ0UzNDQ4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkfMVNkst5RprsxHW7Cc2I2vo
UJpFVkdu1fdjjSxso6WDn4pPJiO/acdaedf2sHUMKimGzkjg/nLkITtIog94CV7W
Eto9rQ2DurJXOu8U4w5NI0fDlLp0lAb4NxCN4qiTyPGBxVqw4Tee/2zGJUe1yPtR
eD6LBroe5YIKba+z11lz5mhlJg2fLsn3rMsyyvaVpfu9XreZaeXrcFVmg1AaSMt2
ZktbzqcQk0Avyfi0hwMlPBeI6q6FDVed8ZGp9+2pagW37+WjJY4+oXGEih405jcq
Ld+jqjAys32rYBaQDhZivfJhdp7SmrPCoAJybelYKD/0gVV+MQkI4FNRN5NpAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUe0fAJBzCacu4ThCnHURoIM40SIcwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM3MzYyZTMxMzEz
MzJlMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEArBxTDANBgkqhkiG9w0BAQsFAAOCAQEAXCHnmmV0UWEDvmRfB/XD4P8F
jx7vgECxPtiV3p8LodAHtdJtk37TptQPpxRCNNgFWSMyNjXuJOtp4/ix6WPc5WJm
sgHfUA1c8YttThpXv3530iii2iza9FjJZa3N4HGaCiCFYKqSFRai1LyDUStajxoL
wqkEpVhntxRWH6sxW8h9T9w64s31IFv/dcuTyeHRUk+icZkg+bwe82RWDMTqJpif
9ZWMzFo/3R/7Gp9JO2yHeZAQU/OkXRn4GVmuLJ0F2za4su/wZq4ixu511XsJPSZR
eqfW5vj+Tpr1U5vHFdR8W7fA5oeEmZiHV23L7zpC1+0J9TXDU5XkWbRDn4eSEA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:19 2025 by rpki-client