Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135332e302f32342d3234203d3e20323036323833.roa
File: 3138352e3234352e3135332e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: kbtbO8BKDjzX7DFcf3C4Zew9mgf76QlBE07QjlbASaI=
Subject key identifier: 6C:64:0E:B5:37:68:DE:03:29:F9:D4:E8:1D:9D:90:7F:F5:1D:E3:A3
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 418995ABBBF03DD521DE6A4FD0C499CC76DD0D4C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135332e302f32342d3234203d3e20323036323833.roa
Signing time: Fri 27 Dec 2024 11:47:45 +0000
ROA not before: Fri 27 Dec 2024 11:42:45 +0000
ROA not after: Fri 26 Dec 2025 11:47:45 +0000
asID: 206283
IP address blocks: 185.245.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:89:95:ab:bb:f0:3d:d5:21:de:6a:4f:d0:c4:99:cc:76:dd:0d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:45 2024 GMT
Not After : Dec 26 11:47:45 2025 GMT
Subject: CN=6C640EB53768DE0329F9D4E81D9D907FF51DE3A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:cb:cd:07:eb:bb:fb:bd:b8:05:4e:0b:b0:
9f:22:8b:e2:6a:16:0f:00:e2:55:d4:ce:8b:79:9d:
24:87:ce:b5:a9:1a:22:da:0a:1f:51:02:c2:89:c7:
61:bd:0c:ea:6c:24:32:da:f3:04:84:bc:66:8a:d2:
83:4d:76:fb:60:63:3e:be:29:f3:f1:c4:d0:41:c3:
dd:0d:16:7d:72:9f:f4:84:d9:71:43:46:4f:a4:e2:
b9:23:39:7f:67:1c:dc:ca:1d:a2:b9:3a:b0:91:0c:
5d:cd:22:75:1f:2c:38:16:c2:aa:9f:02:5b:af:cb:
00:ca:56:d1:14:84:b4:8b:b9:ce:b2:2f:68:44:68:
47:0b:b4:1a:78:48:32:25:30:66:71:44:c4:52:5b:
44:42:c1:93:ef:63:83:83:18:47:ac:26:34:90:2b:
ba:48:33:59:7f:81:1b:2f:08:fe:ca:fd:b0:e4:1f:
5d:bf:c0:11:1a:1e:d2:b4:44:75:68:75:9e:0e:2a:
c9:20:39:b9:68:72:3d:45:27:3f:36:43:0c:72:75:
eb:19:c8:8d:ef:b6:59:c6:fd:6a:32:c5:25:8f:c5:
d1:d0:65:58:50:96:30:37:bd:ec:f8:8d:c2:0d:0f:
83:4e:5c:5a:b1:4b:20:19:71:b3:b2:e2:a9:87:54:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:64:0E:B5:37:68:DE:03:29:F9:D4:E8:1D:9D:90:7F:F5:1D:E3:A3
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135332e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.153.0/24
Signature Algorithm: sha256WithRSAEncryption
00:48:3c:2c:ac:99:a6:db:65:58:35:b7:a8:e2:fd:63:ac:37:
a0:c4:17:ec:93:a0:93:05:69:ee:ec:a8:03:42:b8:9f:24:28:
f9:82:2e:94:2e:b0:c9:4c:0c:cc:73:0f:1f:a0:ca:51:21:b1:
91:1f:0f:3b:09:a1:2a:a4:a4:35:61:33:bd:e7:e3:37:f9:50:
bb:56:f3:b3:9f:26:fc:64:b0:5b:1e:cf:c3:d4:d1:7a:2a:e0:
30:09:73:f5:7f:24:f0:60:d4:f6:db:a7:58:08:4f:a4:78:c7:
1e:ca:eb:0f:3e:cf:a5:3b:85:f9:3e:74:43:25:62:67:43:94:
80:46:f7:9c:2b:a0:6c:11:b1:e7:e2:81:7c:7c:80:2c:3a:d9:
f9:cf:14:c2:5d:bd:b2:23:05:f7:43:4d:c7:ee:61:0f:b4:8f:
c7:8e:cc:62:d7:04:de:02:5e:73:f4:df:b5:5e:7c:72:0b:6a:
8f:2f:e1:1b:d9:e1:a7:fb:ca:f4:60:ae:ce:3b:47:7f:05:92:
43:bf:d2:44:e1:5d:ae:23:31:9f:d9:4a:c5:27:e9:a3:25:c5:
04:b6:27:e4:ad:30:f4:21:c8:13:dd:37:0a:71:79:16:d3:65:
2b:e7:99:82:4a:84:f2:66:fb:45:08:ea:7c:2a:18:ad:d4:0a:
16:08:cf:15
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUQYmVq7vwPdUh3mpP0MSZzHbdDUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDVaFw0yNTEyMjYxMTQ3NDVaMDMxMTAvBgNV
BAMTKDZDNjQwRUI1Mzc2OERFMDMyOUY5RDRFODFEOUQ5MDdGRjUxREUzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtr8vNB+u7+724BU4LsJ8ii+Jq
Fg8A4lXUzot5nSSHzrWpGiLaCh9RAsKJx2G9DOpsJDLa8wSEvGaK0oNNdvtgYz6+
KfPxxNBBw90NFn1yn/SE2XFDRk+k4rkjOX9nHNzKHaK5OrCRDF3NInUfLDgWwqqf
AluvywDKVtEUhLSLuc6yL2hEaEcLtBp4SDIlMGZxRMRSW0RCwZPvY4ODGEesJjSQ
K7pIM1l/gRsvCP7K/bDkH12/wBEaHtK0RHVodZ4OKskgOblocj1FJz82QwxydesZ
yI3vtlnG/WoyxSWPxdHQZVhQljA3vez4jcIND4NOXFqxSyAZcbOy4qmHVJR3AgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUbGQOtTdo3gMp+dToHZ2Qf/Ud46MwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM4MzUyZTMyMzQz
NTJlMzEzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzIzODMzLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAufWZMA0GCSqGSIb3DQEBCwUAA4IBAQAASDwsrJmm22VYNbeo4v1j
rDegxBfsk6CTBWnu7KgDQrifJCj5gi6ULrDJTAzMcw8foMpRIbGRHw87CaEqpKQ1
YTO95+M3+VC7VvOznyb8ZLBbHs/D1NF6KuAwCXP1fyTwYNT226dYCE+keMceyusP
Ps+lO4X5PnRDJWJnQ5SARvecK6BsEbHn4oF8fIAsOtn5zxTCXb2yIwX3Q03H7mEP
tI/Hjsxi1wTeAl5z9N+1XnxyC2qPL+Eb2eGn+8r0YK7OO0d/BZJDv9JE4V2uIzGf
2UrFJ+mjJcUEtifkrTD0IcgT3TcKcXkW02Ur55mCSoTyZvtFCOp8Khit1AoWCM8V
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:32 2025 by rpki-client