Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa
File: 3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa (raw, json)
Hash identifier: n27H/3T4P8cqGFzlr2yUmLvW+pmGkMJ8/0LuCoj2h6A=
Subject key identifier: 5D:BA:10:58:78:0D:B6:9C:0C:60:22:6C:40:08:73:42:1B:DA:88:89
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 610498F435BA3CC2409A7A4EA2F8C226D3646361
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa
Signing time: Fri 27 Dec 2024 11:47:40 +0000
ROA not before: Fri 27 Dec 2024 11:42:40 +0000
ROA not after: Fri 26 Dec 2025 11:47:40 +0000
asID: 206283
IP address blocks: 185.245.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:04:98:f4:35:ba:3c:c2:40:9a:7a:4e:a2:f8:c2:26:d3:64:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:40 2024 GMT
Not After : Dec 26 11:47:40 2025 GMT
Subject: CN=5DBA1058780DB69C0C60226C400873421BDA8889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:af:72:99:25:cf:87:37:ac:76:e9:c1:98:
55:9a:a5:54:8d:0d:9d:cf:b6:7c:ed:06:03:a7:eb:
78:2b:ed:80:64:75:b8:c1:ef:2d:10:da:08:01:d7:
3c:8b:51:f3:b7:f8:6f:07:9d:d5:48:ac:f1:67:18:
eb:04:32:ec:14:3e:2f:65:7b:58:a2:91:58:2e:a1:
66:ec:fd:5f:c7:e7:21:32:79:8e:b7:e9:0b:1e:cc:
94:2a:be:ef:b3:f5:86:ab:2a:fa:43:8a:94:56:7c:
90:b2:2c:32:b3:ee:d3:41:92:0c:86:d1:3b:e5:28:
f0:87:b2:bf:04:42:13:3a:e3:82:90:b6:90:26:cf:
0b:8c:09:41:c7:2b:fb:34:e2:67:8e:21:4a:23:a5:
8d:6b:b8:4d:5c:c5:ac:66:f2:3c:aa:82:81:a8:b0:
7c:d1:35:de:0f:5d:ee:84:61:6b:88:d9:8e:f3:35:
df:c7:de:a7:05:9a:76:10:ae:36:57:a9:ac:4e:a5:
6b:a5:88:b4:3f:93:ee:fd:ee:c0:6f:fa:c3:5d:56:
81:da:cc:63:e3:27:13:82:67:a5:36:53:bd:a9:cb:
bf:0a:62:43:ed:ea:bd:75:f5:be:86:e6:6b:77:9f:
66:a0:71:ef:2a:fb:5b:dc:96:fe:e9:96:b3:d4:cf:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BA:10:58:78:0D:B6:9C:0C:60:22:6C:40:08:73:42:1B:DA:88:89
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3234352e3135342e302f32342d3234203d3e20323036323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:48:3e:ff:6c:25:cb:e1:5a:33:ec:de:77:63:0f:72:9f:ab:
eb:82:b3:04:3e:c4:50:7f:88:bf:87:3c:6d:f0:2b:d6:37:25:
0c:a8:47:53:9e:b2:8c:05:37:8f:24:52:cc:85:63:d7:36:e3:
7b:03:26:ce:04:07:c8:e1:82:15:34:3a:8c:7d:aa:39:a0:ec:
5c:16:5a:56:49:22:ec:cc:60:90:b7:11:b7:8f:0a:7c:c3:a5:
65:76:94:48:3b:a0:6b:73:9a:5b:09:af:d2:1f:db:ec:cd:21:
c1:aa:ed:44:4c:db:15:d7:f9:85:94:55:5a:1f:6f:c3:29:b8:
db:23:77:21:25:df:1b:53:f7:27:5b:17:50:4b:c3:02:7d:10:
cc:6a:9d:40:d7:23:91:8b:ce:20:e1:79:6c:f7:07:ec:59:ed:
4e:c7:77:41:ed:67:bf:c2:ec:85:de:84:c4:58:9e:82:8b:c6:
b6:2b:d8:1a:64:10:db:b0:29:f9:c8:41:84:90:f0:88:25:4c:
d5:cb:9b:18:97:29:8a:ca:74:51:a2:66:46:2a:b5:e3:20:34:
45:13:72:ac:71:d0:e8:ac:f3:ed:c9:90:bc:09:81:24:9b:a5:
0d:2d:13:d8:8c:54:3a:d5:88:39:cd:8b:75:78:9b:e2:61:ff:
ff:cd:76:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:54:23 2025 by rpki-client