Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa
File: 3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: w5qBl8IjZ6ipzxEtU9dByJ8cdWjqtQUHm5/8YGCry14=
Subject key identifier: E4:F6:5B:EA:16:A7:10:D3:1D:54:58:58:95:1A:C6:C7:8E:3C:12:DC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 22235DF684219A5B53BF2D19EBC941577D1D40AF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:33 +0000
ROA not before: Fri 27 Dec 2024 11:42:33 +0000
ROA not after: Fri 26 Dec 2025 11:47:33 +0000
asID: 136787
IP address blocks: 193.160.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:23:5d:f6:84:21:9a:5b:53:bf:2d:19:eb:c9:41:57:7d:1d:40:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:33 2024 GMT
Not After : Dec 26 11:47:33 2025 GMT
Subject: CN=E4F65BEA16A710D31D545858951AC6C78E3C12DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:1c:16:7a:77:30:44:66:9f:8e:ab:b0:c7:
87:92:90:e9:75:55:27:3d:01:83:36:ba:b8:dd:53:
a3:b8:6e:97:49:21:4d:9c:aa:b4:6b:3d:22:6f:2e:
1d:c5:66:29:35:7b:cb:16:69:81:11:78:4e:fb:35:
25:99:db:19:5d:23:26:38:03:53:99:5e:dc:12:5b:
81:e5:45:26:e8:bb:13:55:9a:2a:ca:52:22:8a:dd:
8c:6f:7e:f7:34:5d:a4:6b:12:41:49:1f:60:02:dc:
11:fc:59:51:ea:96:a0:b4:dd:69:ef:2f:93:57:d1:
e7:e1:94:1c:51:f9:c3:8d:f6:f6:b6:fa:27:19:02:
9a:ef:0f:c7:7e:5f:dd:05:f0:37:b9:ec:b4:dd:27:
1b:69:a4:a4:10:2e:c8:06:1c:2d:65:18:c7:e5:6b:
5e:ef:85:08:ec:ea:e4:9c:e5:dc:59:4e:56:2a:96:
39:c6:fd:4a:e3:c6:5c:a5:66:65:f5:da:35:5d:06:
28:5f:ff:07:36:41:ae:75:9d:61:7d:2e:33:10:66:
4e:af:9f:d1:6a:e1:c9:a1:98:a3:4f:3f:8f:e9:d7:
69:30:20:da:76:ae:92:f0:6f:cd:70:52:22:dc:ec:
94:69:6b:6f:46:3e:ed:3a:30:c2:2a:4f:c4:85:c1:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F6:5B:EA:16:A7:10:D3:1D:54:58:58:95:1A:C6:C7:8E:3C:12:DC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3136302e3234372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.247.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:26:a7:f0:8d:36:f3:1a:1a:60:cb:b3:bd:d7:ab:af:8a:08:
0e:0e:e5:cf:ba:b2:4d:44:04:f0:7a:16:e3:7d:73:1d:70:0f:
a7:25:e5:3a:a2:60:3d:fe:b9:5b:85:00:d5:d6:50:5f:bc:18:
99:9c:2f:76:4d:86:5e:39:a5:ec:02:19:e2:48:e2:7f:b7:f9:
5e:11:0e:b3:6d:3d:2c:b2:42:9f:ce:16:4a:9c:68:69:db:c4:
c0:46:d0:e0:3b:30:dc:c0:20:74:80:49:0d:ce:ba:95:8a:54:
0f:cb:d9:80:c4:a0:83:9c:be:fe:45:4a:08:fe:a9:57:69:b8:
a1:3b:c9:ef:f4:ec:72:43:c7:a7:f0:3e:7c:a6:fe:b5:b7:c6:
ed:71:35:3a:52:9b:82:fc:fa:6f:37:78:99:05:f2:10:7e:75:
98:95:20:ed:58:aa:66:43:52:a8:71:34:1b:f3:a3:8e:9a:a4:
e6:f7:c7:d6:37:95:6d:e2:9d:51:26:2f:5b:19:a8:e5:58:97:
24:48:a2:d0:11:60:f3:d2:fa:a2:69:29:06:81:cf:08:6c:8c:
96:4c:9c:d3:1b:c1:e0:8a:9a:71:ed:e4:69:b4:52:2f:c3:f9:
48:f6:fd:ea:c1:5d:87:2c:0c:80:47:83:d8:13:b8:71:dc:aa:
9d:f2:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:09 2025 by rpki-client