Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa
File: 3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: tm3h96WVYxh/c+TklBJY5MqPVL2gPUzLEk4duDuV7xE=
Subject key identifier: 83:AB:00:DF:42:5A:8E:90:FC:56:8A:C3:26:BB:66:85:53:00:59:52
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1671D6BBC5A02493EC8476CF559A084F67C0538D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 136787
IP address blocks: 193.160.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:71:d6:bb:c5:a0:24:93:ec:84:76:cf:55:9a:08:4f:67:c0:53:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=83AB00DF425A8E90FC568AC326BB668553005952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:0c:90:73:2b:0b:46:bb:3d:77:f7:33:7a:
30:35:0b:3c:8e:66:e0:36:16:24:d8:28:72:0b:ab:
11:ac:55:79:f8:00:95:03:8c:7a:4a:dd:67:57:ee:
dd:49:03:ab:8e:31:7f:8f:81:70:6b:1e:cb:b9:04:
3b:91:b5:66:3e:6f:7c:da:5a:27:29:a3:b7:a2:e1:
76:24:1b:94:45:1f:46:e7:78:21:2e:04:9f:a5:d6:
f7:4b:93:fe:72:ba:1f:53:5b:05:94:89:9f:f7:4f:
f2:b8:fd:24:36:37:62:eb:6d:d8:93:bd:86:90:39:
3c:a2:fa:0f:9e:7e:e7:d4:e8:88:1f:f5:43:09:6a:
04:53:31:65:8c:d6:5a:65:89:55:a4:bd:8d:e8:a6:
81:52:96:a1:38:0e:30:8c:57:a6:cd:93:3f:b6:ca:
2c:f8:a8:9c:35:f7:56:fa:be:d6:cb:2e:25:ef:c4:
24:75:05:45:24:46:84:93:87:34:f6:f3:66:1e:98:
d7:66:5d:9f:0b:07:22:33:da:38:85:df:21:31:8d:
f7:46:ef:b7:d5:3e:06:5b:97:85:57:3b:a4:be:8a:
39:34:eb:83:40:9a:08:fb:53:f9:92:62:3c:73:ae:
19:4d:93:cb:ff:5f:94:64:c1:f0:03:12:41:19:c7:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:00:DF:42:5A:8E:90:FC:56:8A:C3:26:BB:66:85:53:00:59:52
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.244.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:2b:e0:4d:b6:43:c0:74:2e:a7:c9:9a:15:94:59:ea:42:e4:
5f:11:5a:9b:9e:22:e0:fa:9c:98:a3:55:ce:bb:7e:00:c0:d2:
67:b9:d6:54:fb:5f:91:1b:5e:b0:a8:61:98:8d:4f:92:a7:5d:
47:35:72:2e:c4:e9:ea:e0:c7:31:e5:03:2e:2f:32:6a:e2:24:
9c:79:7d:ca:ed:3a:38:e0:04:bf:8f:e8:c4:39:6a:61:c6:e6:
c9:7a:85:07:06:83:4b:28:9b:d1:2f:9d:a5:92:d8:1d:2b:ba:
bb:ae:8a:f3:1f:39:a8:f6:57:35:08:0d:f3:34:9d:33:08:48:
62:3e:c6:fa:63:e2:55:8b:af:81:d6:70:c6:53:47:77:bf:1a:
a5:86:99:34:73:42:63:a5:04:e7:20:2c:af:0e:84:4a:d8:1d:
fa:fb:d2:95:e5:d9:91:92:fa:01:86:5a:bf:ea:1d:2b:43:7a:
30:d2:4f:a2:7a:d1:e6:3f:0b:25:bc:4d:de:6d:45:5c:bc:e7:
22:61:1f:5b:2a:38:44:95:a6:9e:8f:80:29:d4:e5:ec:04:d3:
44:e8:ba:5e:6a:f0:22:5c:df:f3:66:a3:d3:a9:cf:61:64:7f:
ef:da:c8:54:cd:99:a6:27:94:b9:85:37:71:8e:df:85:22:a6:
f8:ae:40:23
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUFnHWu8WgJJPshHbPVZoIT2fAU40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzdaFw0yNTEyMjYxMTQ3MzdaMDMxMTAvBgNV
BAMTKDgzQUIwMERGNDI1QThFOTBGQzU2OEFDMzI2QkI2Njg1NTMwMDU5NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQwyQcysLRrs9d/czejA1CzyO
ZuA2FiTYKHILqxGsVXn4AJUDjHpK3WdX7t1JA6uOMX+PgXBrHsu5BDuRtWY+b3za
Wicpo7ei4XYkG5RFH0bneCEuBJ+l1vdLk/5yuh9TWwWUiZ/3T/K4/SQ2N2LrbdiT
vYaQOTyi+g+efufU6Igf9UMJagRTMWWM1lpliVWkvY3opoFSlqE4DjCMV6bNkz+2
yiz4qJw191b6vtbLLiXvxCR1BUUkRoSThzT282YemNdmXZ8LByIz2jiF3yExjfdG
77fVPgZbl4VXO6S+ijk064NAmgj7U/mSYjxzrhlNk8v/X5RkwfADEkEZxyNNAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUg6sA30JajpD8VorDJrtmhVMAWVIwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzYz
MDJlMzIzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwaD0MA0GCSqGSIb3DQEBCwUAA4IBAQDYK+BNtkPAdC6nyZoVlFnq
QuRfEVqbniLg+pyYo1XOu34AwNJnudZU+1+RG16wqGGYjU+Sp11HNXIuxOnq4Mcx
5QMuLzJq4iSceX3K7To44AS/j+jEOWphxubJeoUHBoNLKJvRL52lktgdK7q7rorz
Hzmo9lc1CA3zNJ0zCEhiPsb6Y+JVi6+B1nDGU0d3vxqlhpk0c0JjpQTnICyvDoRK
2B36+9KV5dmRkvoBhlq/6h0rQ3ow0k+ietHmPwslvE3ebUVcvOciYR9bKjhElaae
j4Ap1OXsBNNE6LpeavAiXN/zZqPTqc9hZH/v2shUzZmmJ5S5hTdxjt+FIqb4rkAj
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:02 2025 by rpki-client