Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa
File: 3139322e3134352e33372e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: Ju0FqNhTWgzKkFm39Bi3FxrKrCV9L5qVrDRK8Bn0TGY=
Subject key identifier: 6C:A9:87:DC:4F:AE:24:30:10:D1:23:22:AF:F7:35:85:76:C5:5E:FE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 09C351920D52733C0C4C02651EE2D9C567D3E693
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:26 +0000
ROA not before: Fri 20 Dec 2024 15:18:26 +0000
ROA not after: Fri 19 Dec 2025 15:23:26 +0000
asID: 51167
IP address blocks: 192.145.37.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:c3:51:92:0d:52:73:3c:0c:4c:02:65:1e:e2:d9:c5:67:d3:e6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:26 2024 GMT
Not After : Dec 19 15:23:26 2025 GMT
Subject: CN=6CA987DC4FAE243010D12322AFF7358576C55EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ea:42:2f:65:46:13:a6:51:88:8b:9d:18:47:
5d:c5:f6:a6:34:e5:86:61:07:53:c1:65:7b:ea:c6:
aa:38:30:4d:de:3e:38:f3:a7:8d:c8:9a:7d:36:ff:
75:49:93:39:77:2c:5f:a1:54:d8:d4:38:90:be:59:
41:c5:92:1b:30:4e:4c:84:43:ab:19:52:7e:91:4e:
f0:85:d1:e2:55:22:8a:84:fb:00:5f:2f:da:a0:16:
19:9b:f6:87:b2:b5:19:c9:02:ad:dd:fd:78:aa:81:
84:b6:ab:c8:6f:a0:b6:ae:e1:54:e2:b9:14:6b:f9:
47:d7:4a:4e:d8:f2:f9:a3:52:73:74:1c:94:ea:e2:
1c:ea:9e:b3:52:3a:f6:33:97:32:48:70:42:7b:64:
9b:4f:3e:7a:13:e1:f2:2e:5b:e3:d5:9f:74:be:e4:
4b:9f:7b:28:35:76:9b:fa:15:12:a7:99:d8:64:6d:
58:bc:b0:9e:6e:29:7b:dc:65:80:28:82:0e:0a:2e:
fd:53:2b:3a:96:ca:6f:39:05:07:31:a2:e7:2f:af:
99:d6:a1:c7:64:c5:fe:90:48:56:cc:6e:76:3d:22:
4b:7a:ed:d0:c2:55:05:73:e5:30:38:c4:ec:c8:6d:
08:07:53:5c:c3:91:8c:68:49:ff:c4:52:54:73:12:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A9:87:DC:4F:AE:24:30:10:D1:23:22:AF:F7:35:85:76:C5:5E:FE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e33372e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.37.0/24
Signature Algorithm: sha256WithRSAEncryption
13:41:29:44:00:c1:1e:c5:c9:06:3c:e2:a2:9d:11:c3:90:ca:
e7:71:f1:a4:65:10:8f:5d:9b:ed:45:3a:b0:4c:32:75:2b:b8:
36:a0:f6:7f:38:a9:49:99:a2:54:68:a3:be:9c:14:14:18:35:
d8:01:02:da:ba:e3:a6:a6:4e:5f:1a:d5:f7:fe:16:88:a0:3b:
3f:1b:42:cf:d6:7d:3a:6c:21:4a:fd:09:47:64:66:ee:8a:57:
1c:4f:fe:fe:c6:ff:5d:8e:bf:e4:62:7a:47:1c:3e:8a:6a:18:
ad:b8:ba:bc:89:2a:95:62:76:a0:c0:90:24:77:91:5b:46:fd:
d5:14:97:02:3e:71:e1:d8:db:f8:c7:b4:49:ee:e5:37:71:a6:
88:43:98:da:fd:48:0d:dd:89:f3:c0:09:fa:03:bd:8f:89:ad:
48:5e:8f:a2:3f:36:ea:0d:ba:aa:44:80:a5:83:e4:a7:a4:95:
84:ed:30:fd:c1:b3:7b:45:4c:7f:58:aa:30:02:70:5c:11:e1:
9f:fa:e6:b8:73:af:d5:91:56:03:0c:5a:4e:25:f7:51:75:ba:
db:44:2f:1c:38:ec:bf:65:a3:3c:8c:fc:fe:d2:b1:02:2d:15:
b5:53:99:a7:17:40:a8:f6:49:46:e9:f2:ad:d9:9a:31:ef:a4:
18:79:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:13:56 2025 by rpki-client