Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa
File: 3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: O7j7/I54EpDmWVFGZdKF0wPo3RueDYeBhSBgf0C2bgA=
Subject key identifier: B4:BB:61:F2:0D:18:F6:73:A9:3C:A6:84:55:0F:1D:1C:20:E6:B9:C5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 61CA0460B56BEA678C039B0DCF0D00DC60CA7E5B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:41 +0000
ROA not before: Fri 27 Dec 2024 11:42:41 +0000
ROA not after: Fri 26 Dec 2025 11:47:41 +0000
asID: 136787
IP address blocks: 193.160.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ca:04:60:b5:6b:ea:67:8c:03:9b:0d:cf:0d:00:dc:60:ca:7e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:41 2024 GMT
Not After : Dec 26 11:47:41 2025 GMT
Subject: CN=B4BB61F20D18F673A93CA684550F1D1C20E6B9C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:0a:6b:c7:59:fb:dc:ab:4e:b7:5a:e2:6b:
93:db:b6:48:57:0c:71:17:2b:2a:65:8e:e1:1a:0a:
79:1f:50:db:87:55:b3:7e:1f:b7:90:5e:e7:97:f9:
ce:1a:ee:5a:6a:33:59:86:c8:fe:5b:24:ed:97:62:
df:ed:57:dd:a0:a7:08:6f:6a:b6:68:de:48:ac:7f:
83:7e:90:69:a5:70:ce:a9:4c:c0:34:42:96:ad:02:
15:5c:b2:b9:79:f9:0c:8d:08:e5:6c:5e:c0:bf:aa:
95:92:62:d7:1f:dc:cd:6c:60:65:13:ae:a4:3e:03:
a0:2e:f7:3e:bf:d2:7c:a7:3e:ab:98:56:1c:b1:81:
73:9b:43:05:8b:2d:ea:2b:19:58:f5:a3:51:e3:9e:
d2:65:1a:20:d6:10:62:c7:f9:d8:ff:eb:6b:0f:31:
60:cf:eb:bc:c2:e5:91:ff:c7:f3:5c:81:e3:b5:14:
46:8e:b4:57:bc:f3:a5:c5:5e:45:60:88:3d:25:f7:
6a:f1:f8:01:45:eb:ad:ef:98:8e:85:aa:b5:cf:d2:
4d:33:e4:39:46:81:4d:2c:35:af:a9:3e:a8:5b:ec:
02:b2:70:8e:a7:28:5b:d9:2a:c9:94:78:66:6e:a9:
58:f0:5d:46:d3:8e:bc:86:69:a7:31:86:04:c0:98:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BB:61:F2:0D:18:F6:73:A9:3C:A6:84:55:0F:1D:1C:20:E6:B9:C5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.246.0/24
Signature Algorithm: sha256WithRSAEncryption
50:29:56:23:40:1e:26:9d:79:76:a9:60:e4:bd:f1:96:c0:60:
f3:71:76:75:bd:5a:1b:7c:79:0d:d9:8c:5e:55:47:f5:55:16:
01:2b:b3:2b:42:49:a2:60:51:51:1e:62:f7:41:00:4c:08:7c:
c7:12:b9:95:c6:e5:10:50:61:f8:cc:74:7b:1e:a0:24:31:b1:
ac:b4:1d:de:93:f6:e3:6a:5d:d3:ea:36:b9:a0:f6:b8:8d:40:
fc:aa:ec:f9:c6:95:63:6b:c5:a8:c0:a0:1d:ca:9a:ea:5c:08:
ff:e8:0d:c3:27:42:4e:ea:6b:9f:7e:eb:2e:c6:bc:96:d4:2f:
fb:52:9b:1f:3a:3e:7d:32:f4:f4:cf:d1:4a:db:62:6e:3f:ee:
e8:31:4c:28:ad:7e:42:89:01:0a:9d:cd:67:d3:f7:9f:8c:3c:
f5:c2:ee:c5:07:c3:06:88:bd:0b:3f:5e:c5:88:95:7d:77:70:
ab:97:25:5d:43:a0:70:4b:9a:5c:28:fa:7a:92:f5:b6:6f:56:
c5:d0:e1:d1:29:ee:5e:bc:c5:6e:92:2f:40:81:83:ca:f4:5d:
75:11:15:be:ab:cb:af:ec:64:7e:b7:51:6b:64:75:3d:50:c6:
83:54:f6:f3:b3:23:2d:2a:36:90:e1:09:dc:b1:67:00:78:9b:
f2:33:3a:0b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUYcoEYLVr6meMA5sNzw0A3GDKflswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDFaFw0yNTEyMjYxMTQ3NDFaMDMxMTAvBgNV
BAMTKEI0QkI2MUYyMEQxOEY2NzNBOTNDQTY4NDU1MEYxRDFDMjBFNkI5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6gprx1n73KtOt1ria5PbtkhX
DHEXKypljuEaCnkfUNuHVbN+H7eQXueX+c4a7lpqM1mGyP5bJO2XYt/tV92gpwhv
arZo3kisf4N+kGmlcM6pTMA0QpatAhVcsrl5+QyNCOVsXsC/qpWSYtcf3M1sYGUT
rqQ+A6Au9z6/0nynPquYVhyxgXObQwWLLeorGVj1o1HjntJlGiDWEGLH+dj/62sP
MWDP67zC5ZH/x/NcgeO1FEaOtFe886XFXkVgiD0l92rx+AFF663vmI6FqrXP0k0z
5DlGgU0sNa+pPqhb7AKycI6nKFvZKsmUeGZuqVjwXUbTjryGaacxhgTAmIdRAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUtLth8g0Y9nOpPKaEVQ8dHCDmucUwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMxMzYz
MDJlMzIzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwaD2MA0GCSqGSIb3DQEBCwUAA4IBAQBQKVYjQB4mnXl2qWDkvfGW
wGDzcXZ1vVobfHkN2YxeVUf1VRYBK7MrQkmiYFFRHmL3QQBMCHzHErmVxuUQUGH4
zHR7HqAkMbGstB3ek/bjal3T6ja5oPa4jUD8quz5xpVja8WowKAdyprqXAj/6A3D
J0JO6muffusuxryW1C/7UpsfOj59MvT0z9FK22JuP+7oMUworX5CiQEKnc1n0/ef
jDz1wu7FB8MGiL0LP17FiJV9d3CrlyVdQ6BwS5pcKPp6kvW2b1bF0OHRKe5evMVu
ki9AgYPK9F11ERW+q8uv7GR+t1FrZHU9UMaDVPbzsyMtKjaQ4QncsWcAeJvyMzoL
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:40:17 2025 by rpki-client