Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
File: 3138352e39372e3134342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: aAvAjdb9nXnKlRDJJ0zYrM2BgVkXJgiQQELCA7rmlPw=
Subject key identifier: B4:A9:4D:40:2A:C8:B5:1E:7A:DF:17:B9:39:2B:6B:06:AB:76:48:BA
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5525639AB250D4DB423C67B70C57BB10635576F6
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:44 +0000
ROA not before: Fri 27 Dec 2024 11:42:44 +0000
ROA not after: Fri 26 Dec 2025 11:47:44 +0000
asID: 47583
IP address blocks: 185.97.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:25:63:9a:b2:50:d4:db:42:3c:67:b7:0c:57:bb:10:63:55:76:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:44 2024 GMT
Not After : Dec 26 11:47:44 2025 GMT
Subject: CN=B4A94D402AC8B51E7ADF17B9392B6B06AB7648BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:b8:ae:bb:89:d6:5b:4e:cc:24:6c:0a:8e:
8f:ef:40:1c:d4:1a:36:7d:52:44:e4:7a:ef:c0:f4:
c4:fb:d9:e8:8d:1b:2b:2b:97:c8:1a:3e:c3:9d:7f:
0f:7d:c6:f6:df:38:a3:06:4e:16:70:c2:bd:41:20:
6a:f5:86:f2:97:63:6e:0d:00:f7:99:40:fb:f7:21:
d6:e9:1a:16:4a:a1:9a:8b:f0:15:4b:64:5f:2a:de:
53:84:0d:f3:88:6a:95:e3:21:57:0e:4e:b2:00:ff:
39:19:4f:46:d3:82:59:a0:53:46:40:10:6b:b4:34:
cb:9a:f4:c1:d8:cf:83:fe:03:25:44:0e:42:43:87:
cf:8e:7e:07:f8:bc:db:e1:9a:72:d3:e5:97:6c:a0:
59:e0:90:bb:63:c5:dc:85:bb:aa:f8:f1:1d:d8:f1:
80:87:e2:7a:83:4b:fe:8c:16:a2:83:10:2d:85:c2:
53:da:29:3a:77:7a:eb:8d:62:f8:df:e9:16:e0:66:
b6:b6:0f:74:af:9a:b7:fd:58:cb:c6:2a:fa:57:f1:
24:d1:b7:d2:cb:95:29:06:6e:63:4e:c2:0c:a5:db:
23:6a:cb:93:db:7d:b8:99:af:48:9b:ba:b6:7f:81:
3f:c4:8f:18:94:4b:ec:b1:f4:f7:a5:9b:88:c9:b2:
a4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A9:4D:40:2A:C8:B5:1E:7A:DF:17:B9:39:2B:6B:06:AB:76:48:BA
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.144.0/23
Signature Algorithm: sha256WithRSAEncryption
74:5f:a2:32:19:9c:ed:c5:9d:6c:cb:62:a8:0a:47:a6:cf:e6:
d5:95:2f:3f:bc:17:d4:ea:db:f3:b1:c4:a1:de:41:d8:df:c8:
bd:cb:ef:26:8c:60:2d:06:6f:c7:1c:a9:ee:46:47:b9:c0:30:
fe:b6:5e:c9:ed:16:32:ed:29:5f:23:e7:13:35:b4:a2:56:cf:
6d:eb:24:70:b3:8b:26:43:88:05:bd:96:c3:22:71:84:56:17:
75:cd:33:84:de:5f:f2:83:77:e0:5a:ab:bf:9f:48:b9:69:7c:
26:c7:b9:9c:24:8c:dd:6d:e3:6e:8f:a3:39:cb:64:25:89:d9:
c9:4d:0b:b4:05:13:ef:cb:93:e1:af:8d:16:cd:0b:f3:84:78:
e7:58:ee:72:90:89:67:0b:9a:80:98:2e:76:73:23:8a:b9:79:
34:b1:d2:09:a1:9c:d9:03:7e:d1:2c:58:e5:f9:29:06:7d:de:
f7:66:43:3e:20:cb:c5:eb:f4:04:b7:0e:7d:fe:c7:74:78:2b:
19:07:be:de:f0:a0:24:7b:ef:5c:25:4e:d9:bd:03:70:0b:87:
67:e5:f4:21:46:0b:41:2c:d1:43:d8:dc:e4:e4:ca:50:07:dd:
cb:43:a8:76:e9:aa:3b:3c:27:30:c1:72:da:de:7d:05:4a:8d:
24:a0:fe:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:20 2025 by rpki-client