Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa
File: 3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: PZQD/jOq8imerOLIkdrypjH6321aXxvwzrp5bP2eu4s=
Subject key identifier: 84:95:9E:59:B7:F8:AB:52:E4:26:B4:09:DA:F2:95:15:6F:FD:9E:4B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 21E923B15713FEDF054892682E88FDFDD0D374B6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:27 +0000
ROA not before: Fri 20 Dec 2024 15:18:27 +0000
ROA not after: Fri 19 Dec 2025 15:23:27 +0000
asID: 136787
IP address blocks: 185.193.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e9:23:b1:57:13:fe:df:05:48:92:68:2e:88:fd:fd:d0:d3:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:27 2024 GMT
Not After : Dec 19 15:23:27 2025 GMT
Subject: CN=84959E59B7F8AB52E426B409DAF295156FFD9E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:b2:30:4c:63:93:e7:7a:1e:cb:21:62:d1:
3d:19:56:f2:ce:62:43:8d:4e:c6:f7:cd:32:29:13:
d0:53:74:57:da:08:9e:ce:81:71:be:ee:a0:21:c8:
93:92:4d:00:de:e0:33:ff:0a:2e:c9:4a:98:df:bc:
75:57:35:78:9d:0e:90:34:ae:ad:3e:d0:a3:48:16:
8d:4d:fb:f8:73:17:a4:45:b1:47:0b:40:8e:7f:06:
41:53:bf:d1:07:ad:04:4b:f0:29:e2:b0:4a:56:66:
86:d1:72:a2:82:54:82:ef:c7:13:f3:43:e1:20:82:
56:d1:0f:df:8d:f6:3c:0e:b6:63:05:6b:f1:7c:bd:
fe:9d:f2:7d:76:29:1f:42:91:eb:f2:2f:f7:76:5e:
ad:fe:87:1b:d1:88:dc:4f:3a:9b:92:12:c0:5b:e9:
9a:3d:63:74:44:59:a9:6e:bb:d2:92:9a:62:f9:13:
83:0b:30:e5:a8:6d:ce:4a:30:62:1f:7c:88:1d:73:
aa:4d:30:eb:14:09:41:e7:b7:cd:96:63:f8:bc:ca:
c3:cb:96:e9:45:a3:43:fd:3f:00:a4:f7:60:fc:e1:
2d:7a:28:52:11:f8:ee:c3:60:8a:fa:20:72:8c:9d:
bd:2d:bb:c2:4e:d1:53:34:69:80:3c:96:d0:7a:8f:
c0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:9E:59:B7:F8:AB:52:E4:26:B4:09:DA:F2:95:15:6F:FD:9E:4B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.18.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:33:a5:29:79:b8:45:03:e1:63:82:60:f1:64:46:74:92:35:
2c:ee:4e:d1:32:1c:40:f0:90:ef:04:7f:fb:13:b2:ee:db:56:
29:2b:4b:73:df:cd:f0:25:bd:e2:5e:15:62:75:83:8b:e8:d9:
1b:5d:39:59:4d:64:ec:82:ee:e8:90:ab:69:76:23:a6:01:f6:
14:f2:66:da:2c:26:8e:99:2e:1c:55:ef:5e:d5:64:44:86:d6:
dc:58:ef:bf:10:95:cd:50:7e:ad:47:1b:6b:da:32:79:a0:56:
f8:9a:b0:10:b7:e1:e8:dd:9a:0d:74:54:8c:59:21:04:8c:6b:
b7:8d:b4:51:d3:b8:85:80:5d:37:59:5f:0a:cd:dd:8c:9f:66:
26:73:e5:40:3d:f8:40:2d:4b:e8:be:88:48:98:d1:8f:6b:5d:
44:84:8d:f2:33:9e:2e:02:33:10:6e:44:07:8c:b4:d8:2f:85:
29:e3:78:14:47:ee:5b:48:7b:bc:1c:fe:25:bd:ce:6c:e6:f9:
bd:75:30:5d:a5:ed:c9:e0:ac:67:64:bb:dd:04:dd:8d:ee:1a:
94:36:83:5f:48:9a:b2:de:13:8f:00:83:44:46:92:a8:eb:01:
e7:22:d9:3a:6d:0f:88:44:24:72:4e:71:fc:a5:47:0d:f8:2a:
d1:24:24:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:33 2025 by rpki-client