Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8zFrmvJAbmYVBF31e+Jtbw6tD83ggSFJdwh16eVEBqM=
Subject key identifier: 21:AF:77:6C:CF:07:37:C8:5D:CC:B7:BA:D4:05:F7:C6:4C:F0:BA:E6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0A53F9F1BE269FC822D6F69F21E96184EB1FED02
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:39 +0000
ROA not before: Fri 20 Dec 2024 15:18:39 +0000
ROA not after: Fri 19 Dec 2025 15:23:39 +0000
asID: 136787
IP address blocks: 193.149.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 19:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:53:f9:f1:be:26:9f:c8:22:d6:f6:9f:21:e9:61:84:eb:1f:ed:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:39 2024 GMT
Not After : Dec 19 15:23:39 2025 GMT
Subject: CN=21AF776CCF0737C85DCCB7BAD405F7C64CF0BAE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:83:e7:b4:a2:75:af:af:ef:11:a8:7b:9e:63:
c6:63:72:9a:b9:39:4b:a5:e7:7f:79:e5:00:e3:b0:
25:68:e5:90:5b:d8:dc:f3:1d:00:3b:90:aa:4e:f8:
66:c2:0c:88:68:14:8b:ed:2f:84:81:c1:ae:26:17:
73:d6:43:0f:76:8d:c9:d6:2c:7a:6c:b8:c7:61:7f:
b7:90:3f:fc:96:0e:e6:cb:b4:5e:d8:68:88:ae:af:
3f:0c:8c:c5:33:09:6b:47:e8:e5:f2:46:69:d3:bd:
db:4c:7b:0d:a1:1a:50:d3:a6:41:6f:9d:20:a5:2a:
5c:22:5f:c7:c2:fe:ab:88:54:49:9c:e2:6e:70:1d:
42:5a:9a:71:b8:d2:76:14:f9:4a:71:60:c8:fa:63:
63:c3:87:f3:62:88:28:56:6e:a7:65:c7:bd:ce:8c:
b8:a3:39:8f:ca:4f:01:53:c8:04:ff:c6:8b:09:c0:
d8:55:a2:ab:8f:6e:3e:a7:a1:1c:af:85:2b:36:ad:
e2:7a:f4:f4:b7:03:32:a8:4a:68:6b:a7:00:8d:2a:
34:2a:dc:18:96:0b:ce:58:50:34:13:9a:53:c6:0b:
00:39:79:6e:cd:f5:1c:f1:44:19:aa:58:22:0e:a6:
60:60:9e:9f:a8:24:7b:35:81:5b:5c:51:da:95:69:
1f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:77:6C:CF:07:37:C8:5D:CC:B7:BA:D4:05:F7:C6:4C:F0:BA:E6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.26.0/24
Signature Algorithm: sha256WithRSAEncryption
88:48:a6:0a:d7:76:b5:53:da:86:52:32:d4:8b:e8:ba:10:ce:
f7:c0:4a:37:56:3e:fc:32:73:81:33:8d:48:2e:11:02:42:a9:
da:04:62:d1:99:ff:e8:e0:09:47:70:ca:c9:9b:2e:29:53:d1:
f0:5c:ea:de:06:3d:03:a6:3c:73:da:a4:f6:f6:29:6b:76:e6:
5d:2a:9e:d1:85:95:97:91:7b:fd:ae:c9:97:8b:c5:0b:de:80:
7b:18:c7:fe:31:38:72:1c:78:ca:90:09:8c:f1:11:00:4d:d5:
f2:2f:e6:1e:f7:33:b4:5f:a8:66:33:ce:8b:35:66:95:79:86:
92:93:87:f8:2f:15:cc:9a:75:91:73:75:19:32:d7:1a:40:bb:
89:81:f2:24:c5:89:bd:f9:6a:cc:90:be:6e:0b:5a:dd:fd:ce:
0e:f0:cc:8f:0a:75:f9:12:12:88:4b:96:8e:0c:4d:ad:11:9f:
79:e2:e9:e1:88:45:e0:f6:57:9f:f9:3a:d1:bd:d7:c5:76:d2:
7c:a1:65:f3:d5:74:f9:e8:24:79:f6:cd:5b:e9:9d:60:52:b4:
c3:64:85:e1:73:3d:f6:da:b6:97:1d:30:ac:69:7f:b4:0e:8b:
79:11:29:66:3d:91:9a:2d:90:24:e7:30:9d:59:82:9c:17:39:
36:51:dc:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:03:44 2025 by rpki-client