Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa
File: 3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: M/7QvxYZSHwU/XlIoKlQpdeIcoe2gYVS30bYnslv/go=
Subject key identifier: 44:58:09:B7:FB:C1:71:77:E9:5B:46:93:71:52:00:1A:FD:C0:A3:9D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 14DA8CC660B15DDA0008A6D8745B65221AFBBC08
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 27 Dec 2024 11:47:18 +0000
ROA not before: Fri 27 Dec 2024 11:42:18 +0000
ROA not after: Fri 26 Dec 2025 11:47:18 +0000
asID: 147049
IP address blocks: 192.166.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:da:8c:c6:60:b1:5d:da:00:08:a6:d8:74:5b:65:22:1a:fb:bc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:18 2024 GMT
Not After : Dec 26 11:47:18 2025 GMT
Subject: CN=445809B7FBC17177E95B46937152001AFDC0A39D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:11:9f:f5:59:14:30:bc:66:0c:41:e9:9c:
5f:8c:0b:d3:98:d5:34:ce:b9:16:e7:c9:42:5a:5e:
8c:da:83:dc:84:a8:bc:78:47:20:4f:a9:e4:24:39:
c8:97:89:03:7f:3a:a5:94:fa:58:6e:a9:01:a5:43:
16:d0:b5:30:48:6b:4a:c1:70:b4:c1:7b:c7:7d:2c:
bf:53:33:48:d0:11:95:17:9c:fe:52:cf:26:a8:c8:
3f:f3:b5:e9:76:4c:87:9f:f6:5f:ca:2c:5c:55:52:
ea:87:f4:25:3a:30:ac:fa:60:c0:26:dd:96:c7:76:
29:98:6d:e1:e8:07:9b:3c:8a:a7:a1:d3:33:a1:be:
e7:90:ea:1c:4c:d9:69:a8:f5:91:87:6d:14:44:85:
41:1c:ca:16:8b:02:5d:37:5c:1e:20:da:61:8f:f9:
52:45:d3:cd:2d:6e:f1:26:35:d4:64:6f:c1:c5:0e:
d3:11:17:5d:db:78:df:f7:42:fc:94:d3:0d:83:b0:
1e:09:72:df:3c:54:a5:de:6e:c3:d0:6e:3f:bf:1f:
db:24:ce:79:b2:99:83:26:dd:35:c5:57:9b:52:f3:
00:76:92:2c:c5:bc:5e:24:9b:9c:8b:50:d5:5c:af:
d0:d1:78:5f:8a:c6:54:54:f7:3f:8a:22:00:25:b2:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:09:B7:FB:C1:71:77:E9:5B:46:93:71:52:00:1A:FD:C0:A3:9D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ac:03:dd:15:af:c2:3e:2a:39:76:1b:22:a5:22:29:97:6a:
4e:86:f1:54:72:be:20:93:28:56:83:cf:b8:43:9b:cb:8e:19:
6d:76:bc:d7:af:2b:74:ba:52:95:40:95:69:4b:68:02:a4:c7:
98:b1:8b:66:c5:0e:3d:8c:1b:0e:ab:47:20:55:b2:5f:03:9b:
c2:20:95:b8:a3:f5:57:83:2e:2b:af:37:58:24:d1:b0:c7:d9:
ae:97:9d:d3:03:2c:cf:2f:3b:da:68:de:81:d4:7d:06:47:f1:
42:90:c3:98:cb:67:0a:8d:b6:6c:41:cd:53:d3:01:57:b5:55:
05:af:84:69:ba:cc:d8:bd:22:8c:20:55:78:cf:96:e0:0a:0f:
04:23:80:86:e1:61:02:1c:02:5a:97:c7:14:41:c5:cb:d2:06:
cf:f5:3d:88:e3:d8:a8:39:6a:6d:0f:d0:9c:1e:24:13:f8:39:
c5:d5:5f:29:53:dc:36:28:d6:a8:b1:77:4f:ac:43:b8:08:63:
9a:58:4e:6e:dc:a8:50:a5:65:af:26:0c:f2:96:fc:0b:06:68:
d4:f1:8c:a3:73:12:bf:c5:ec:9e:5f:4f:3e:5a:14:a9:bf:64:
52:0f:ac:47:71:e1:41:b8:7d:47:27:54:cd:6d:15:6f:70:8f:
16:eb:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:19 2025 by rpki-client