Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa
File: 3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: HFwTcaD5krZY89KjrcyDI+SrmkShivMQ+4ZoSnrrai8=
Subject key identifier: 01:A3:26:25:2C:E9:13:B2:28:3E:5D:B8:B4:43:AF:3B:2E:1B:FC:6E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3AE534CF0B3E3F9B8C8CDD549F238D353BBC1A4A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:14 +0000
ROA not before: Fri 27 Dec 2024 11:42:14 +0000
ROA not after: Fri 26 Dec 2025 11:47:14 +0000
asID: 51167
IP address blocks: 185.252.234.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e5:34:cf:0b:3e:3f:9b:8c:8c:dd:54:9f:23:8d:35:3b:bc:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:14 2024 GMT
Not After : Dec 26 11:47:14 2025 GMT
Subject: CN=01A326252CE913B2283E5DB8B443AF3B2E1BFC6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:16:4f:85:53:b5:2c:fe:ff:da:ba:31:8e:ce:
a3:61:d4:48:ee:2b:3f:bf:1f:1b:b3:03:2b:82:ca:
b1:d7:5f:1b:20:49:24:10:af:f6:4a:13:fb:8e:50:
9e:eb:02:9f:11:30:85:5c:d0:4a:83:53:44:4e:5f:
01:53:6b:0d:19:be:79:61:c8:4f:f7:78:1f:ff:bd:
1e:ff:64:dc:e4:dd:b1:11:50:99:ee:10:8a:2a:46:
12:f0:0a:93:0f:61:0e:45:83:3a:35:8d:50:81:59:
af:0f:19:fb:3c:5c:dd:2d:70:9e:04:01:81:df:b2:
58:4c:b7:3c:d5:77:6a:ed:94:38:f8:f2:74:9d:12:
30:a7:1e:79:09:06:ce:41:64:14:1f:c3:fc:92:24:
75:9c:08:0d:38:e5:d0:c0:c6:09:c8:47:85:d0:64:
87:dd:82:6a:db:4c:2e:12:56:e6:da:67:b5:71:dc:
80:62:c2:e3:47:ce:e5:b7:b3:e3:08:73:13:c6:ef:
8d:58:2d:4c:aa:4e:36:15:a9:b5:0d:59:d1:76:d4:
d2:c3:64:cc:34:7f:84:98:e7:a0:76:a0:65:ce:21:
f2:d5:7f:f0:a9:c7:3b:36:f2:3e:8a:2f:4f:e9:92:
7f:06:a1:41:5b:c4:67:89:f0:35:26:f5:fb:89:10:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:26:25:2C:E9:13:B2:28:3E:5D:B8:B4:43:AF:3B:2E:1B:FC:6E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3235322e3233342e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.234.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:38:e4:e0:c3:9d:ec:b7:bc:26:e6:b0:80:22:36:9a:4d:43:
f7:98:8b:27:b6:53:d8:fb:fe:e8:47:49:d4:a4:3e:de:29:7b:
e6:52:4d:24:26:f4:d7:b6:f9:07:84:fd:65:75:7a:40:06:7f:
1d:f4:9e:4d:bf:be:ab:0f:51:e9:09:db:c9:2d:57:78:ac:68:
5d:9a:3a:1b:cb:91:a4:93:82:bc:bb:b6:0e:41:d5:9b:17:4f:
c8:07:65:b3:8e:84:6a:7b:42:a3:5e:f8:f4:5d:b5:e0:fd:79:
e5:45:8a:72:5e:86:15:b0:b0:90:3a:aa:8f:e7:25:71:e9:32:
73:cb:85:fc:3a:93:86:13:af:e7:24:ae:cf:5a:8b:fa:da:0b:
93:73:a4:d5:a7:60:92:97:44:69:bc:c4:d0:8f:a7:69:87:58:
bd:8e:e4:0d:d0:5e:c5:ed:02:9a:32:4d:41:a4:59:24:36:01:
4b:20:78:60:36:df:54:30:67:60:bc:4c:86:a0:be:43:8d:40:
1e:7c:ff:22:08:85:a2:db:35:9d:83:6d:01:5c:bc:81:91:99:
a1:06:e5:c1:f5:60:8f:7e:4c:db:ee:c8:42:18:b8:e8:f5:a8:
38:79:d7:01:e1:a1:a1:a1:7a:6b:fa:74:60:0b:a5:46:7d:7f:
19:f2:ea:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:24:56 2025 by rpki-client