Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa
File: 3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: pphdaurt2x9tomRFBHtO+Hk7g3+mSWqnoroPfgnqYFI=
Subject key identifier: 64:AE:79:7F:7A:D5:CD:2E:E3:B0:55:DE:34:40:6F:5A:FB:69:AC:CC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 08A3439787F60DAB7BD742F3706B0AECE55575DA
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:14 +0000
ROA not before: Fri 27 Dec 2024 11:42:14 +0000
ROA not after: Fri 26 Dec 2025 11:47:14 +0000
asID: 136787
IP address blocks: 185.240.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a3:43:97:87:f6:0d:ab:7b:d7:42:f3:70:6b:0a:ec:e5:55:75:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:14 2024 GMT
Not After : Dec 26 11:47:14 2025 GMT
Subject: CN=64AE797F7AD5CD2EE3B055DE34406F5AFB69ACCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:be:80:94:c2:d8:7f:0b:72:31:a0:22:42:
86:ca:b2:6c:ba:d3:e1:cf:1f:33:59:30:47:ad:a1:
8b:0b:68:84:31:93:ce:8a:ec:fb:55:96:a8:50:2b:
2f:d1:e9:df:7c:77:7c:15:f6:a7:da:b1:1a:5a:1f:
46:6f:f9:68:ed:47:eb:9a:d4:f0:80:01:5b:9b:18:
92:56:21:48:40:c3:69:05:2c:29:46:a2:0c:b7:7b:
08:90:f5:c7:27:5d:13:ca:5c:82:96:4c:b2:46:b3:
ad:6c:2e:ce:8a:ce:9b:c4:b2:19:2b:92:fb:b9:46:
23:be:d7:2a:d8:53:b9:a0:47:71:01:61:a9:c5:6b:
e1:17:55:a1:4c:bb:1f:77:77:56:1a:d1:0a:3b:a4:
ae:d7:53:99:a7:06:c8:40:d7:92:52:ef:e1:8a:58:
85:01:96:17:b5:0b:16:02:07:10:ba:e1:36:4f:42:
85:0d:47:f1:1c:ba:3d:19:0d:c2:7b:06:fa:5e:6a:
8c:1a:95:5e:84:13:d8:ca:d9:0c:93:9f:76:33:ea:
f9:95:79:b0:ca:a7:06:ae:54:70:d1:42:86:d4:7e:
cd:26:ba:96:f4:1a:3d:cc:b1:f0:40:f0:b9:4f:59:
c8:fd:97:cb:e1:9a:a1:19:82:82:f1:7a:0d:d1:82:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:79:7F:7A:D5:CD:2E:E3:B0:55:DE:34:40:6F:5A:FB:69:AC:CC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234302e3234372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a3:d9:05:2c:3a:fc:b8:50:5b:92:b4:d9:dd:f2:2c:63:45:
50:80:2b:7a:68:f3:55:03:e5:96:ae:a7:35:29:1d:3c:24:ec:
c5:c7:98:fa:95:90:8a:5b:f9:17:07:98:d8:7f:20:bf:94:2c:
fa:ef:6d:9f:78:51:9f:ef:54:f2:41:a8:38:0d:83:e6:51:a4:
77:b2:9d:88:39:95:a3:73:3a:8f:8d:7e:d4:36:23:4b:16:61:
81:5c:d2:db:e8:59:48:5c:66:ff:a5:e8:f7:90:ee:84:a0:51:
af:75:b0:46:bc:f9:c6:7a:8b:0c:d1:21:3a:a7:bb:90:f0:a4:
b3:ec:71:ff:a8:3d:e6:ac:c8:b0:ff:07:6d:84:b7:af:fc:29:
21:35:40:46:6d:eb:4f:a9:de:78:1c:fe:53:79:9e:6f:63:97:
0b:ff:01:0b:dd:b1:26:5d:dd:d0:08:54:29:5d:57:c2:39:06:
fe:3d:00:9d:0b:58:ab:19:60:d5:5f:fd:42:55:37:be:28:8b:
34:43:52:c6:aa:38:fa:89:e8:fa:c0:c8:8a:2e:4c:d6:36:ff:
1b:08:10:19:99:f1:98:6c:f6:94:9e:7c:a9:a8:44:46:4e:d1:
16:ee:b6:a4:24:33:39:08:8b:0d:f4:22:5b:ae:74:9b:08:35:
67:86:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:32 2025 by rpki-client