Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31332e302f32342d3234203d3e20313336373837.roa
File: 3139332e3230332e31332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nr1ymDWx2SHmQSswmTQmN9cMwNKJ+NX9csk0WIgRxm0=
Subject key identifier: A4:CA:55:A8:A8:18:B3:AC:51:1F:58:B8:AC:64:DA:E4:2F:E1:2C:F8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 24B02874A1FCABC9D90B82F35B3359167822DC55
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:16 +0000
ROA not before: Fri 27 Dec 2024 11:42:16 +0000
ROA not after: Fri 26 Dec 2025 11:47:16 +0000
asID: 136787
IP address blocks: 193.203.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b0:28:74:a1:fc:ab:c9:d9:0b:82:f3:5b:33:59:16:78:22:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:16 2024 GMT
Not After : Dec 26 11:47:16 2025 GMT
Subject: CN=A4CA55A8A818B3AC511F58B8AC64DAE42FE12CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:4d:54:59:74:08:e7:24:f0:c9:fe:d4:c6:
5b:b5:e2:ae:ca:8d:9d:05:73:08:de:8f:34:1b:12:
25:96:1e:08:33:3c:2e:8a:79:6b:ce:de:22:1b:2b:
b2:83:8c:21:21:4f:5f:0c:a8:d7:fe:39:97:ad:00:
54:76:da:2b:6f:78:ce:47:21:f1:ea:96:83:88:15:
d0:1f:d0:3b:40:37:c7:ad:72:9e:ac:12:4f:f7:00:
1d:c5:72:44:f2:8b:bf:a6:d2:1d:e1:0c:30:4a:9d:
93:6b:20:e5:5a:13:40:91:e9:92:b9:f6:36:3f:b1:
85:28:c1:84:0b:61:de:59:01:ef:81:22:2a:c6:e3:
9c:e5:ff:a9:8f:d9:de:c1:53:c4:54:9d:54:93:f8:
b8:97:a9:f6:da:85:1e:16:07:ef:79:b3:fd:79:17:
73:d7:34:dc:95:9b:55:4b:bc:35:f6:ac:5c:e9:87:
ff:ea:41:cd:27:e9:b0:40:56:3f:34:48:19:6d:94:
3b:9d:66:2d:3a:bd:30:e0:40:94:7d:0f:d0:ae:f4:
7f:09:69:63:d0:e3:2c:ff:47:53:88:99:1c:11:e9:
9a:45:fc:b7:e8:f2:34:f0:01:ec:41:89:03:3f:2e:
32:7a:62:79:2c:79:5b:7b:fd:7a:1e:f4:9c:df:4c:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:55:A8:A8:18:B3:AC:51:1F:58:B8:AC:64:DA:E4:2F:E1:2C:F8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e3230332e31332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.13.0/24
Signature Algorithm: sha256WithRSAEncryption
18:69:40:36:81:e4:33:02:00:a4:7b:9a:64:30:c7:ce:d9:29:
0e:62:59:b5:bd:40:71:20:72:d2:9e:88:f0:3d:98:10:03:59:
5e:b8:3d:91:31:37:91:5f:07:5c:1f:e6:3c:cc:53:7a:ff:cc:
19:68:a3:ee:03:1b:67:2d:77:76:3a:be:48:c6:3a:13:c2:83:
05:05:c8:d6:81:cb:d5:3d:58:8c:02:25:f3:81:b6:bb:72:f8:
10:22:4d:d1:0d:11:af:f1:b1:31:5e:c3:de:a0:a5:b4:e5:6c:
42:d4:55:05:a7:e4:bc:a9:0e:17:1a:47:40:5d:af:0a:47:df:
88:e3:99:13:fa:74:82:c3:30:df:47:75:a4:83:15:81:97:aa:
85:1e:ae:37:75:52:f2:df:ed:03:1c:e7:ff:84:7d:d8:90:96:
09:23:18:41:1d:24:92:e1:01:9c:fb:b9:93:ed:2e:16:90:82:
96:26:e5:78:a2:70:e1:df:33:3e:cb:e1:c4:38:8f:68:a4:5b:
29:a0:3a:d5:56:8d:19:ac:fb:2f:ea:b9:e2:5b:00:48:88:ef:
fa:a1:ad:63:f3:65:d4:c7:6e:e2:41:3c:02:fc:39:10:03:98:
6a:25:4f:7b:c8:db:1d:5e:bf:ba:86:fb:63:2b:b8:37:8b:20:
2a:af:b2:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:04:14 2025 by rpki-client