Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139362e302f32322d3234203d3e203432333636.roa
File: 3138352e3137302e3139362e302f32322d3234203d3e203432333636.roa (raw, json)
Hash identifier: LzR04kVQl+lv/xULScIWKGb3a8tM0901uBQYuDeI+Ng=
Subject key identifier: A9:65:7D:EF:34:5A:9D:0F:7F:94:1F:C7:2E:23:54:7F:93:1B:C3:6B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2A7C8B8098130C00C489C7461F8765AB7CCA0A3C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139362e302f32322d3234203d3e203432333636.roa
Signing time: Sun 07 Apr 2024 16:03:28 +0000
ROA not before: Sun 07 Apr 2024 15:58:28 +0000
ROA not after: Sun 06 Apr 2025 16:03:28 +0000
asID: 42366
IP address blocks: 185.170.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7c:8b:80:98:13:0c:00:c4:89:c7:46:1f:87:65:ab:7c:ca:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 7 15:58:28 2024 GMT
Not After : Apr 6 16:03:28 2025 GMT
Subject: CN=A9657DEF345A9D0F7F941FC72E23547F931BC36B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:88:43:59:00:96:c4:53:9b:f2:40:fe:c9:
87:7c:90:55:17:a5:cb:af:84:17:df:e7:36:6e:fd:
dd:cb:14:5a:b9:4f:bc:20:51:91:c3:f3:38:c1:31:
25:16:d2:43:76:b3:e5:c3:ff:0d:8e:dc:20:05:ee:
39:9a:7c:fa:9a:ef:e7:08:4a:09:9d:18:cf:1a:08:
6e:3e:52:09:0c:e0:5e:d0:e1:94:fa:26:2c:f2:53:
83:5a:fe:a2:25:d4:f8:f5:07:4f:35:88:3b:88:56:
00:d3:5f:67:58:35:94:0b:17:a4:4b:14:a9:62:ee:
ee:e7:4b:d9:0f:75:cc:38:49:72:b3:b0:b1:3a:fc:
87:6d:84:6a:89:9e:71:3f:1a:aa:6f:58:44:86:37:
e3:39:9c:40:d4:fd:46:6a:37:dd:ab:36:7f:99:68:
52:2f:0e:e5:50:6f:18:b2:2e:d4:93:87:33:b6:95:
42:bd:b8:8e:06:17:4e:a3:4c:88:9d:72:1a:0f:73:
95:6d:27:24:01:3f:61:43:e7:5a:ec:cb:0d:5b:79:
4c:a8:2f:24:f3:db:fa:87:43:f5:e1:bb:85:af:c8:
b4:34:91:19:66:e0:e4:2c:6b:51:c7:c7:1e:d9:92:
8f:b1:d8:2d:6d:fe:d8:03:b1:35:02:19:62:a9:d5:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:65:7D:EF:34:5A:9D:0F:7F:94:1F:C7:2E:23:54:7F:93:1B:C3:6B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139362e302f32322d3234203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:7a:69:b1:93:17:8e:49:80:56:03:87:5c:b7:b7:a4:5b:fc:
99:35:5e:a8:45:65:65:98:03:21:4c:47:b6:71:8e:fb:4f:66:
ec:e3:df:b0:6f:4d:de:a9:c8:19:88:f5:9b:a5:28:46:af:47:
f4:8d:b4:5f:81:16:49:97:8e:bf:f9:23:8c:5b:fa:a1:3f:58:
83:0c:85:ef:51:49:21:28:30:ec:56:57:02:52:44:e9:24:db:
1e:f9:ed:45:35:2a:e2:d9:b4:45:24:5a:c1:7d:ac:1a:ac:56:
4c:85:d8:88:a0:5e:19:e3:61:18:58:55:86:38:f3:d4:3b:73:
08:ec:2f:c3:7d:16:54:ac:1c:b7:ad:47:2c:b8:24:0d:a5:d0:
05:58:61:34:2c:6b:77:58:50:2c:c6:8f:98:7e:73:6f:21:3e:
f4:63:bd:9a:0e:35:a7:78:1f:9f:30:1a:2d:14:12:83:23:ac:
a3:66:ac:ac:1d:a3:f3:f2:25:46:a9:0b:0d:9a:ad:0a:7e:8c:
3f:f8:d0:40:6f:d5:47:9f:98:f5:f7:56:c2:bb:e1:48:c2:aa:
9b:17:00:54:a2:ba:63:6a:cd:9f:1e:1e:d7:3d:cf:45:07:57:
64:f5:ca:9f:0c:7c:81:d6:2e:1e:ae:64:96:27:2d:34:7f:f1:
1d:44:5a:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 19 17:58:47 2024 by rpki-client on console-fra.rpki-client.org