Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: HZyJT1CYgBH3QLqO+6tDPaRJl2wvwVBgYzig7NfuM5M=
Subject key identifier: 59:BF:C2:11:34:D8:85:93:89:5C:62:1F:BF:4D:9D:7E:6D:79:75:CA
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 143308F9961752B6B91FAC0EB3D538EEAF8884CE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:16 +0000
ROA not before: Fri 27 Dec 2024 11:42:16 +0000
ROA not after: Fri 26 Dec 2025 11:47:16 +0000
asID: 136787
IP address blocks: 193.142.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:33:08:f9:96:17:52:b6:b9:1f:ac:0e:b3:d5:38:ee:af:88:84:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:16 2024 GMT
Not After : Dec 26 11:47:16 2025 GMT
Subject: CN=59BFC21134D88593895C621FBF4D9D7E6D7975CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:ca:c5:54:fd:df:4c:58:e6:4c:c2:7b:d3:
b7:6c:0d:2d:68:2b:cb:63:a5:33:c9:84:f0:55:7b:
96:59:a0:48:51:d4:8d:92:5c:a0:0f:9f:3b:be:30:
e1:7d:f4:5e:97:85:ab:db:fd:98:9e:fd:5c:51:14:
22:e8:ba:98:70:37:e7:ac:78:d1:ae:17:a5:5d:de:
e8:1a:c7:61:55:6b:ae:40:70:ee:46:11:00:49:0b:
b5:4c:e3:de:97:6d:53:92:37:de:72:63:4d:bc:45:
c8:67:60:3e:aa:fa:27:84:bc:e0:81:db:eb:d9:87:
f8:03:18:c6:9f:16:62:88:9a:27:6e:62:8f:b7:ee:
03:e3:02:4e:63:fa:fa:e7:8d:f9:54:46:26:34:ef:
a7:82:ae:cd:c1:52:1c:5f:e6:9c:72:7d:6a:46:39:
b8:28:ae:b3:91:9c:32:66:62:71:1f:07:e1:e3:36:
29:ca:08:cc:76:65:8c:2a:f3:91:56:6a:ea:e2:f3:
e6:b5:e8:e0:70:e7:11:50:6f:d9:0d:9b:d7:c6:eb:
d9:ea:1c:e3:8c:ee:71:de:2d:c9:97:59:b7:53:08:
28:fc:fb:bd:af:db:ac:e6:fb:c7:db:e2:77:a4:70:
a2:d5:d9:0b:7e:e6:f5:48:c5:d0:53:c5:f8:49:c9:
03:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:C2:11:34:D8:85:93:89:5C:62:1F:BF:4D:9D:7E:6D:79:75:CA
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134322e3230312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b7:c1:aa:21:9a:e4:29:e9:60:27:2b:af:b9:48:09:33:bc:
82:44:94:ca:02:39:d8:61:e7:65:28:93:6d:14:b4:19:05:9e:
32:e7:e9:f3:f5:5b:61:b0:2f:18:97:b7:80:51:f2:62:e2:c2:
be:2f:b4:39:3c:6e:ba:bb:81:02:d8:3d:2c:24:0a:96:a6:27:
7c:a2:60:79:db:db:e4:ac:5f:24:f2:71:1f:27:89:9e:bf:71:
05:e3:86:6d:17:36:8d:7d:bb:37:23:69:83:44:f3:43:e0:76:
58:f3:7c:a3:d0:80:bd:63:4a:60:05:d3:81:d7:28:3f:f4:5b:
3e:9c:16:df:77:b8:ae:dd:d2:75:03:35:77:a2:e5:3d:d2:6b:
47:d2:0b:07:35:de:d6:24:dc:da:90:f4:56:15:77:d4:9e:b7:
09:89:ea:7b:79:ee:6d:cd:f3:09:61:66:03:5a:b7:f6:e6:52:
4e:58:73:f6:23:3f:e6:97:26:0e:ef:53:36:f3:e5:7e:38:f7:
ac:15:a5:c2:ea:88:03:51:85:d1:75:c9:c5:1b:29:eb:e7:89:
7f:86:9d:c5:d9:ab:a9:9d:35:50:16:bd:e5:30:69:f7:b2:69:
c4:87:97:92:c6:b8:9d:05:cc:ab:96:e6:aa:89:8d:ca:ee:3f:
0a:f8:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:42 2025 by rpki-client