Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e302e302f32342d3234203d3e20323039383534.roa
File: 3138352e3139362e302e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: qDoFmMi8JUiyQCqE+Y5JFvHZy2Bgf6jUyfCmRrrRQO8=
Subject key identifier: 03:95:B0:A3:1E:35:31:23:F1:B5:67:1E:FE:0E:FB:16:27:C8:17:06
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5F65B2191CC7A3F70123634FA33FA76BD435F578
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e302e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:13 +0000
ROA not before: Fri 27 Dec 2024 11:42:13 +0000
ROA not after: Fri 26 Dec 2025 11:47:13 +0000
asID: 209854
IP address blocks: 185.196.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:65:b2:19:1c:c7:a3:f7:01:23:63:4f:a3:3f:a7:6b:d4:35:f5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:13 2024 GMT
Not After : Dec 26 11:47:13 2025 GMT
Subject: CN=0395B0A31E353123F1B5671EFE0EFB1627C81706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:e7:0e:54:51:6c:e5:0e:eb:5f:62:5d:90:
87:3e:c3:ce:ad:18:a9:39:5c:c3:37:6a:cb:a1:b0:
b8:e7:60:d3:e7:ef:56:fe:02:c1:ca:bb:b4:96:68:
b8:7c:7f:b3:df:ee:18:0f:d0:a4:54:b7:0c:83:61:
98:b4:a4:a8:9b:dc:2d:e2:4a:7e:dd:01:ed:9f:b3:
59:dd:f7:62:2a:5a:1c:57:e6:ab:c9:2a:dd:0f:1f:
e9:f0:52:74:06:06:00:3a:22:bd:1f:af:54:12:bd:
d8:03:ac:81:99:d2:c8:e8:ad:09:6d:c4:ce:56:31:
17:0c:04:db:b2:e3:af:9b:1c:c0:89:89:c7:10:b0:
14:38:a8:e1:79:86:a5:63:db:5a:8a:37:0a:e7:ad:
bc:3e:88:b4:52:46:25:17:56:bd:14:c9:4e:b9:46:
08:1c:d2:e0:17:c9:47:d2:a5:73:be:99:05:f1:8d:
14:ac:1f:b8:f5:e4:3a:c9:7b:e6:e0:a8:d0:53:1b:
2e:a2:ee:c5:a6:e8:22:b8:c6:b4:31:e7:57:70:35:
2c:65:d6:e9:cb:20:8d:95:97:f5:cd:f8:80:ef:38:
5f:44:49:80:f0:c3:48:a3:08:7c:f8:60:0c:4d:56:
77:2f:e9:b3:be:b3:c7:47:40:ae:32:6f:65:8c:11:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:95:B0:A3:1E:35:31:23:F1:B5:67:1E:FE:0E:FB:16:27:C8:17:06
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3139362e302e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:47:46:1b:a9:a1:2f:ab:6d:dd:73:fe:de:2c:2f:8a:28:48:
63:ca:56:c2:61:81:db:c2:27:2b:9d:0a:f5:f4:be:72:c6:12:
0f:96:eb:70:72:69:c3:06:3a:eb:d6:4e:bd:83:13:5a:27:69:
05:c2:f6:34:83:f3:29:d5:19:b6:6f:69:5e:b9:76:e9:b6:73:
a0:76:cb:aa:b6:67:1e:14:62:eb:08:c2:77:96:14:8a:17:48:
e7:18:b4:56:82:f7:36:9c:57:c4:d3:16:c8:d5:4c:53:69:24:
6c:c7:b1:f3:da:90:3b:29:fe:19:21:af:ec:b1:97:c9:02:0f:
63:12:7f:5c:e3:f2:ee:be:d3:8f:d3:7a:94:7b:2c:25:68:de:
c3:14:25:0d:47:09:87:f8:89:1b:3b:28:c8:1b:3b:3a:7c:f0:
ac:8a:63:bc:5a:45:eb:ab:25:2b:4a:c2:06:0c:b5:40:73:d8:
6e:e1:45:96:bf:f0:a3:d0:f0:49:33:9d:89:d7:e5:7e:e3:5d:
74:c6:79:ca:b5:20:3c:72:5b:60:ed:b4:47:1c:47:7f:5f:66:
dd:d8:ee:d8:12:aa:40:9d:db:8a:14:ac:b2:bb:f1:ac:c3:33:
d3:7d:c4:72:f1:af:e4:83:e0:d8:f9:77:88:5c:d7:ab:5b:25:
ad:20:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:58:15 2025 by rpki-client