Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa
File: 3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: mQA2wR6L+sAxcNWcVsdJUdEA4Tl25g0kd4I0RRcCMKI=
Subject key identifier: 5A:00:7E:18:87:9B:E2:45:34:F6:A5:B8:31:6F:43:77:2F:9B:82:72
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0E9CA919A6396DDE9EE7390E8D30A8CA53B44D1A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 20 Dec 2024 15:23:28 +0000
ROA not before: Fri 20 Dec 2024 15:18:28 +0000
ROA not after: Fri 19 Dec 2025 15:23:28 +0000
asID: 141995
IP address blocks: 185.193.19.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 13:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:9c:a9:19:a6:39:6d:de:9e:e7:39:0e:8d:30:a8:ca:53:b4:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:28 2024 GMT
Not After : Dec 19 15:23:28 2025 GMT
Subject: CN=5A007E18879BE24534F6A5B8316F43772F9B8272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:2c:41:fe:23:2b:d6:17:08:0f:cd:e3:7e:
54:ca:bb:74:c6:af:9a:7f:1d:9f:af:60:73:e9:1a:
6b:e3:ea:be:28:ad:6b:0b:d1:55:46:a4:be:a3:dc:
6f:59:97:90:03:cc:b4:80:21:6c:c0:de:71:f5:17:
58:b0:ac:b6:ea:2c:8f:ae:0f:42:1c:0d:b6:b0:33:
0e:a7:a0:3d:55:e1:70:51:ed:b1:9f:64:5b:fa:ad:
ff:51:bd:11:1a:2a:3c:49:bb:c8:f9:e4:64:16:1e:
79:1e:cd:a9:d0:ee:2a:31:46:3f:68:cc:c3:79:b7:
ae:72:d3:8c:af:da:6e:ee:d7:2a:7b:47:f1:77:a2:
64:75:01:7f:52:ba:9c:04:28:94:c6:5b:f8:a9:bf:
ae:60:fb:b5:1a:c9:e8:05:7f:79:76:b1:fb:cb:16:
07:83:71:a3:10:25:de:cc:ee:3c:11:1c:19:2f:a7:
1e:e7:7c:e1:27:e4:54:07:95:0e:b8:12:b9:39:0f:
d9:bb:f7:10:5f:23:07:7e:85:47:1e:3a:23:f1:cf:
52:ea:6f:6e:6f:9d:75:ab:01:fe:4a:7e:c0:d3:35:
88:c7:78:bf:0c:62:88:f4:83:e7:ce:7b:d4:ba:38:
15:f9:b8:5c:61:f8:b1:f2:ae:65:9a:27:2a:67:24:
ce:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:7E:18:87:9B:E2:45:34:F6:A5:B8:31:6F:43:77:2F:9B:82:72
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139332e31392e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.19.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:35:98:92:b9:12:08:47:1b:e3:42:a7:87:55:09:de:37:6e:
46:f0:40:36:99:55:23:ef:0a:b8:cd:5d:f0:8b:88:ac:ea:a8:
14:db:f7:8a:55:e3:a2:73:79:29:0b:95:7e:b2:bb:04:8c:7f:
fb:05:28:a2:40:ae:00:bc:f1:1b:51:ad:c0:1a:fa:9b:af:c7:
a7:4c:0f:60:71:1c:34:02:17:66:8e:db:33:da:28:98:12:d6:
bf:f7:cd:a6:2b:9f:b8:85:4c:51:ff:76:c7:33:33:5e:cd:a6:
8a:3a:4a:99:1a:b0:77:b8:be:bb:7d:ba:4f:83:7e:9f:4f:f8:
09:c9:17:de:1e:64:13:67:ef:85:db:cd:ad:68:af:be:2c:2f:
b5:45:d0:01:51:06:08:66:58:4c:ae:7a:03:ad:99:b8:68:cf:
f4:0b:c5:e7:22:6a:e2:af:09:cc:57:5f:04:cd:f8:de:cb:6f:
6c:3e:86:cf:15:8f:90:ad:c2:b6:c0:c9:c0:43:8c:d6:11:61:
1a:64:20:83:3a:e1:71:a6:91:ff:dc:28:96:c7:1c:90:fe:57:
e2:f7:c1:4c:b2:ee:9f:72:ca:90:17:98:53:35:aa:f0:c0:43:
3b:85:12:51:7b:12:64:db:a5:da:25:cc:a9:29:cf:e9:f8:b0:
b5:bb:91:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 9 02:47:00 2025 by rpki-client