Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139382e302f32332d3234203d3e203437353833.roa
File: 3138352e3137302e3139382e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: giMrjvcY15y9piIM2SULpjfMynjKo2MHWvAUqluMyWA=
Subject key identifier: 8C:3A:24:54:CA:E0:42:06:ED:89:5E:4D:98:92:57:80:80:73:0F:69
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5CC30DCF9C433EC9AC9505A6435EC94DEE4DBE89
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139382e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:24 +0000
ROA not before: Thu 13 Jun 2024 10:36:24 +0000
ROA not after: Thu 12 Jun 2025 10:41:24 +0000
asID: 47583
IP address blocks: 185.170.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:c3:0d:cf:9c:43:3e:c9:ac:95:05:a6:43:5e:c9:4d:ee:4d:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 13 10:36:24 2024 GMT
Not After : Jun 12 10:41:24 2025 GMT
Subject: CN=8C3A2454CAE04206ED895E4D9892578080730F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:04:ad:26:65:48:3d:e5:03:be:b9:48:bb:
94:a1:be:4a:95:07:7c:7e:5d:68:9a:e4:0a:e4:7e:
bc:7d:b1:32:71:49:4a:c5:46:7c:67:ee:73:06:60:
af:64:24:3a:f8:66:b0:e0:4a:27:3a:be:20:61:1a:
e7:4c:74:e1:8e:3d:26:27:5c:b9:9a:6e:d7:3f:b7:
b5:40:de:5f:a4:2c:89:36:d5:4c:64:83:00:55:7c:
d2:92:bd:ce:93:39:52:08:2b:19:44:a1:87:ff:c8:
67:6f:10:04:1f:78:03:a5:ae:4a:e3:8b:51:5e:82:
4b:60:23:e3:8d:c8:84:2c:07:ed:f0:b1:64:01:7e:
99:2c:aa:bf:68:e9:90:27:b0:ab:e3:d2:fb:01:a9:
72:2a:13:c0:19:d2:bb:98:ce:43:16:1b:3c:ad:16:
53:76:44:d1:07:24:76:6a:43:53:19:64:cf:e0:79:
e0:94:66:02:2c:24:f6:fc:1d:c7:f7:2b:29:b3:b3:
23:29:7f:17:d5:9e:96:e0:c0:22:52:d7:3e:62:3d:
ea:98:6b:1b:76:53:a5:70:df:81:2b:fc:35:bc:aa:
24:e8:83:82:19:14:aa:71:40:e4:71:43:87:0a:93:
01:a6:3d:85:1b:80:73:86:a7:2f:49:a9:3d:ef:12:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3A:24:54:CA:E0:42:06:ED:89:5E:4D:98:92:57:80:80:73:0F:69
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137302e3139382e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.198.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:b2:ee:cc:36:d9:7d:ce:cd:32:3c:86:ad:64:4f:0e:4f:28:
13:10:27:12:3e:9f:92:6c:69:c4:b5:8f:46:c9:b2:e8:1a:f2:
fe:44:b8:b5:0b:04:a3:a4:ba:ee:ec:cb:53:03:05:b0:4e:c2:
8d:b5:b9:36:f1:76:c3:d8:6c:37:3c:1d:69:eb:ad:91:ec:b2:
9c:ed:a2:d3:eb:9d:8c:8d:dd:cc:fb:9d:94:f4:12:d2:bd:fa:
fa:b1:b6:a5:47:6c:50:e3:62:94:ee:ab:3e:3e:b2:93:d8:55:
0b:a7:b9:41:67:e1:83:90:95:f8:66:49:dd:30:02:dd:e7:b6:
b9:8f:f2:ed:49:06:db:ea:76:2b:64:2a:4b:7d:85:a7:da:c8:
10:55:f7:67:ec:16:6c:24:30:20:d2:7f:2b:30:06:c4:a8:04:
cd:b7:bd:99:a6:d5:b5:41:c7:bd:87:6a:70:54:ba:db:52:d8:
47:f7:24:4e:c7:7b:65:c0:bc:0e:e1:8c:b5:3f:57:69:d1:5e:
8a:6c:70:78:c2:3b:7e:95:3f:8a:d4:1d:ba:35:4e:a9:a7:9c:
e1:5c:3c:73:76:5d:ae:3a:3b:85:a8:72:7e:de:da:9a:69:14:
1c:a6:d8:4e:9f:6c:99:38:02:fa:7e:9d:fb:87:9f:b1:1a:b8:
fe:de:4d:1f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org