Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: zmFkYUVuWDhKJ8S0K+xYwGydRgEc1Zzsoca7j9oJwZo=
Subject key identifier: 60:AF:FE:34:45:1E:C6:DF:34:F6:81:1A:22:94:72:1E:85:D6:6A:80
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4EC2F40B6DAFCEDC250C99B5CD30F2E47B966F09
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:28 +0000
ROA not before: Fri 20 Dec 2024 15:18:28 +0000
ROA not after: Fri 19 Dec 2025 15:23:28 +0000
asID: 136787
IP address blocks: 193.149.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c2:f4:0b:6d:af:ce:dc:25:0c:99:b5:cd:30:f2:e4:7b:96:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:28 2024 GMT
Not After : Dec 19 15:23:28 2025 GMT
Subject: CN=60AFFE34451EC6DF34F6811A2294721E85D66A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:76:b6:97:07:2e:2e:20:1a:08:0a:c3:f1:
c3:46:ef:f0:4c:d6:da:32:70:8f:68:8a:94:a5:3f:
5a:e1:8e:21:5f:9f:b6:0e:d2:7b:39:6f:02:4b:2a:
89:e6:e8:9e:09:46:e0:bc:7f:dd:ae:b9:c6:02:f9:
fd:b2:6d:2b:12:a5:66:66:32:d3:fe:fb:29:06:46:
a9:5d:99:97:eb:4e:83:8c:ec:5e:62:51:d6:95:3c:
c7:4a:4e:fc:4b:16:67:bb:9b:da:9f:31:9b:9e:7b:
9e:a5:08:d6:0f:58:08:18:e9:56:7e:dd:3e:c7:62:
0c:0d:19:b8:20:c9:d1:a4:3f:70:b3:cf:0e:d2:b2:
5e:a9:3e:9d:1e:85:31:ef:91:2d:7d:24:f6:94:cc:
c6:d6:cf:d2:94:a5:ca:1c:dd:23:bc:30:29:a0:68:
1e:94:8c:b9:34:cb:15:b5:3b:1f:08:94:82:cc:5e:
fe:49:de:06:1f:b1:8d:67:dc:44:a8:08:df:69:a2:
85:28:64:bc:5d:1b:9e:84:f2:1b:5c:2f:4d:3b:63:
65:bc:ba:9a:bb:67:8d:3f:00:29:e2:42:ed:0c:b5:
00:63:8f:cf:9c:95:10:26:b9:cd:9f:6f:6b:ed:44:
85:3c:17:4b:d9:a1:c8:0a:c9:7b:36:6c:18:b3:2a:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AF:FE:34:45:1E:C6:DF:34:F6:81:1A:22:94:72:1E:85:D6:6A:80
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3134392e32372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.27.0/24
Signature Algorithm: sha256WithRSAEncryption
34:dd:30:9b:19:f5:91:46:bc:dc:58:1f:cc:9c:87:50:c1:0e:
74:f8:61:95:96:2e:0a:33:b4:77:b4:87:d3:60:7c:1b:a3:d2:
50:81:ae:a1:1a:bb:7e:d8:86:09:e8:1b:0b:88:ef:b0:49:50:
a0:96:77:6b:2a:92:6c:e4:e5:e3:12:ea:b5:c6:0d:da:cf:39:
9f:49:6b:d8:e8:43:8d:8a:69:27:0c:62:92:55:fd:3b:0d:57:
39:82:eb:e8:37:ad:1e:89:14:37:e0:c0:f1:6f:0a:0f:54:0e:
12:4c:74:90:6d:7d:a4:cf:08:d6:97:d8:7e:86:7f:01:0b:6a:
12:f3:f0:07:6d:b9:28:94:b4:88:e0:78:f1:b5:3d:a6:ed:36:
66:26:7b:f3:c5:9e:81:fd:94:63:2c:7f:7e:f7:91:9d:04:ee:
4d:4f:e3:3f:2b:96:9b:b4:49:d0:4b:97:45:9f:d4:3d:6d:38:
1a:69:dd:8d:ad:88:f0:a1:7b:5c:62:8d:1e:b9:9e:d3:61:16:
c8:2b:d1:34:64:a6:a9:9c:98:1b:a9:b7:89:f9:c1:e9:5f:4b:
b6:ac:2c:2c:fa:e9:36:eb:7b:a5:b2:70:58:d7:2b:9e:ee:c5:
f4:45:4d:84:41:ac:dc:a1:a0:50:cb:45:79:71:64:7c:11:94:
79:e0:66:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:48 2025 by rpki-client