Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134362e302f32332d3234203d3e203437353833.roa
File: 3138352e39372e3134362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: nRPRLUX+SCjjoREBpTLdj4GNUKe3OGicipa8w9It1Tw=
Subject key identifier: 9B:11:5D:DC:B9:98:F2:B2:DE:0D:AF:38:3F:8F:02:4C:17:DE:94:35
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4741AAB598167AB46054481A74F9AA4377CCA589
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134362e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:20 +0000
ROA not before: Fri 27 Dec 2024 11:42:20 +0000
ROA not after: Fri 26 Dec 2025 11:47:20 +0000
asID: 47583
IP address blocks: 185.97.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:41:aa:b5:98:16:7a:b4:60:54:48:1a:74:f9:aa:43:77:cc:a5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:20 2024 GMT
Not After : Dec 26 11:47:20 2025 GMT
Subject: CN=9B115DDCB998F2B2DE0DAF383F8F024C17DE9435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9a:21:4b:41:e2:34:0a:18:08:20:55:b2:88:
b9:8e:f4:df:a0:fc:56:dc:15:db:09:b4:f7:cb:ea:
44:00:44:83:ae:d3:d3:4d:06:01:1d:46:f3:b6:b3:
f3:d3:98:ae:5a:20:58:f0:62:62:36:0a:de:3b:78:
9c:0a:c9:c4:e3:e8:9c:23:e8:cb:bf:56:62:38:c3:
a7:88:05:ae:7a:cf:a2:9e:f0:b2:05:be:93:6f:e2:
bb:af:2e:7b:1b:e7:96:f6:27:ab:ec:4b:63:12:e7:
0a:a8:cc:d9:eb:e6:9e:08:4c:4e:29:4e:f9:43:9e:
ce:9e:70:bd:61:c6:93:0b:6f:7b:f5:7c:16:5b:2d:
cb:de:95:cc:f4:db:39:8c:48:84:f2:a9:18:77:15:
97:2f:8c:8a:06:f8:09:0e:cf:fb:2a:e9:57:91:26:
8a:3e:eb:e0:dc:6c:5b:02:3b:54:1b:7a:af:db:ba:
37:82:e4:4d:d5:3b:3a:64:1a:76:dd:2f:b3:66:2f:
11:db:6c:1f:b9:73:5c:22:a4:7f:0b:74:34:7f:4c:
11:d0:a0:f6:9c:c0:1d:f1:50:48:6b:26:96:0a:ee:
72:1b:be:70:10:bb:74:7f:3e:22:d0:f1:73:2d:3f:
4c:83:40:14:c3:86:a4:dc:74:fe:5d:e0:75:3c:47:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:5D:DC:B9:98:F2:B2:DE:0D:AF:38:3F:8F:02:4C:17:DE:94:35
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e39372e3134362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.146.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:9b:d0:0e:41:5b:9e:c1:d4:b4:8a:a4:f6:6e:1e:35:2e:80:
a0:f0:4e:05:f7:1f:93:73:9b:0f:ef:ce:23:4d:9f:eb:8d:b2:
7c:3d:10:2a:6b:d1:12:b5:2a:24:69:99:21:95:cf:2e:b5:9c:
8d:4d:35:05:0b:9f:c3:a8:9b:96:41:77:7d:b5:10:65:80:32:
73:e1:bc:d1:a6:a2:40:60:eb:b6:6e:ae:10:d2:37:c8:07:ac:
6c:98:a3:05:a0:69:c3:33:d2:99:f5:1d:b9:14:eb:80:a1:30:
f1:2b:1a:35:55:47:a4:c8:3a:4c:b1:86:ec:69:c5:5b:35:5d:
9f:11:a9:bb:13:c0:2a:5c:9e:15:14:c5:48:54:d6:93:18:da:
9d:0c:06:b0:2d:cb:49:4b:c8:b3:ad:8f:b5:a4:c1:49:ac:1c:
3b:a6:1b:5f:fe:c6:e9:38:b0:0e:44:41:90:5b:91:54:05:f7:
2c:80:d4:ed:f1:ff:14:fe:a5:1a:c8:5a:8c:52:a2:88:2b:fb:
3c:41:6c:a1:d6:8a:c8:58:d2:d6:ea:39:17:e5:2e:dc:c8:10:
a7:24:4e:3b:b6:8d:d9:d0:71:fc:ca:94:66:cc:64:72:b2:28:
f9:d8:30:18:50:cf:cf:f5:c9:f0:31:de:31:22:eb:32:cd:9c:
20:0a:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:11 2025 by rpki-client