Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa
File: 3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: YvEEwok+LvbcTXiSB+YAwj+dYAxl5nrTTPQf8kf7KU0=
Subject key identifier: 73:F5:50:05:88:3E:4E:CA:7F:D7:F0:C2:8D:B7:95:29:49:37:53:53
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3380FAA146C673941F12DC57D556E3C3F67413F3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:13 +0000
ROA not before: Fri 27 Dec 2024 11:42:13 +0000
ROA not after: Fri 26 Dec 2025 11:47:13 +0000
asID: 51167
IP address blocks: 185.252.233.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 11:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:80:fa:a1:46:c6:73:94:1f:12:dc:57:d5:56:e3:c3:f6:74:13:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:13 2024 GMT
Not After : Dec 26 11:47:13 2025 GMT
Subject: CN=73F55005883E4ECA7FD7F0C28DB7952949375353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:dc:dc:8e:3c:7a:42:78:d5:a0:17:cc:4a:
60:e8:1f:34:13:fe:09:6b:de:81:51:e8:b5:e5:62:
2d:fa:b5:2e:79:ca:1a:b9:d5:e0:0c:b4:b6:9d:80:
60:c7:8d:07:12:c5:b6:d7:eb:28:30:3a:01:52:11:
b3:c3:2e:5a:16:c7:fd:c9:79:08:c8:35:cd:f3:78:
4b:5f:53:e4:6b:5b:e2:19:95:8c:5d:61:be:9a:92:
fd:e8:50:f4:ae:fe:bf:ee:85:b3:a6:0f:82:88:1f:
52:31:56:28:6e:00:cb:e3:74:5d:52:99:21:27:ed:
27:a6:81:1b:da:78:a0:50:7c:4a:14:7b:26:80:d2:
d9:a9:f7:e4:75:26:28:31:ba:d3:c5:b8:36:1e:f2:
44:04:46:c7:f4:8c:5b:7f:3e:fc:9a:78:15:47:10:
7c:e0:9e:b7:13:7d:0d:74:43:18:07:89:cf:65:31:
a5:49:ad:fb:4b:2b:d9:60:63:15:e5:ab:94:64:fe:
3a:36:83:21:6e:a6:5f:48:48:81:35:4a:91:f4:a2:
e2:e3:2e:fb:7e:7d:8e:b8:75:6f:44:f5:7a:e8:9b:
42:07:0b:61:01:4f:a1:7d:53:52:b0:1a:19:01:f1:
7b:73:b0:54:55:3b:13:40:2e:08:34:9d:4c:82:60:
38:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:50:05:88:3E:4E:CA:7F:D7:F0:C2:8D:B7:95:29:49:37:53:53
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.233.0/24
Signature Algorithm: sha256WithRSAEncryption
24:58:00:23:d1:17:dd:39:d7:06:d6:4b:a4:40:a0:72:75:10:
3d:f3:7c:2e:07:f2:4e:f3:d4:a6:71:54:f0:98:b1:e9:91:26:
93:b1:8b:4d:a4:0b:0b:b4:00:43:a1:6c:36:b0:13:df:a3:b6:
fb:0f:40:70:95:d8:ba:ea:40:86:ce:84:08:d6:09:69:59:84:
69:f7:ef:d6:10:61:d7:c3:ea:26:5b:de:08:07:e4:d6:2a:47:
3c:df:8a:03:ac:be:de:bc:2d:3a:bf:c6:a5:92:59:03:8b:e7:
83:e7:04:44:2f:13:77:a9:c4:fc:09:bf:a6:cd:b4:e9:b1:3e:
d4:dc:74:99:07:0d:a9:fb:a9:e6:ed:a6:d2:b9:d2:1f:ae:cf:
c2:30:c0:f9:e7:7e:66:6a:9a:5f:98:8d:8f:74:13:ce:d3:2f:
3e:0d:71:f7:c8:f3:55:b1:4c:f0:a0:07:10:73:a2:f3:ff:c0:
9a:86:fe:ae:81:9c:33:78:ac:dc:d5:6e:9f:15:96:8f:98:7f:
37:50:ba:74:62:c0:66:12:a5:e7:e8:b7:8c:c9:55:96:48:7b:
cd:06:5c:27:08:67:b3:c5:f3:d7:0f:fc:7a:95:6f:89:74:54:
ee:9a:de:6d:81:a2:2b:f9:72:67:c7:80:e2:3a:eb:23:4e:ae:
95:d4:13:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:28:52 2025 by rpki-client