Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa
File: 3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: QT/B4Y8fvzUOZBJPxH0ddwaBLkUs8O06AVy3fumrKns=
Subject key identifier: BA:3B:4F:5B:09:2A:99:DB:56:ED:F4:41:99:FD:55:68:2B:42:46:11
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2C44D8112C0DB64CDFCC10B965CC123439B91783
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa
Signing time: Fri 27 Dec 2024 11:47:33 +0000
ROA not before: Fri 27 Dec 2024 11:42:33 +0000
ROA not after: Fri 26 Dec 2025 11:47:33 +0000
asID: 201341
IP address blocks: 193.32.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:44:d8:11:2c:0d:b6:4c:df:cc:10:b9:65:cc:12:34:39:b9:17:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:33 2024 GMT
Not After : Dec 26 11:47:33 2025 GMT
Subject: CN=BA3B4F5B092A99DB56EDF44199FD55682B424611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:3f:70:e2:eb:67:8b:48:47:d3:e7:23:3e:
72:47:03:3a:90:db:a2:74:62:57:a3:c4:f8:39:5f:
50:b1:d4:af:74:04:8e:5f:39:d1:69:b6:3e:28:0f:
3d:3e:3c:98:67:8f:14:54:f3:57:4c:5b:c9:f8:0b:
4a:23:a3:53:59:2b:97:20:8a:c9:d1:eb:91:6c:d9:
00:ed:d8:a1:52:65:28:69:95:7c:ce:6e:7c:fc:71:
7d:72:8b:71:4b:51:18:99:4e:83:1b:f5:1f:c3:f3:
fa:c9:fa:37:08:48:8b:6d:c3:4c:8e:d4:bf:28:32:
84:c5:90:d8:19:9d:5c:17:d9:10:aa:d5:da:1a:1f:
1a:0c:b6:9d:3c:51:48:17:d3:07:e7:b3:0e:9d:84:
ea:b8:2d:38:71:43:d0:14:a8:8b:c3:70:2b:a4:9a:
b9:d8:f2:93:8a:f8:45:d1:a3:3c:24:ee:44:7c:80:
6c:b8:e1:e7:be:0f:94:09:93:3e:a8:f4:f6:5e:f7:
d3:66:e0:71:74:ff:87:3b:db:fe:88:cf:9d:53:b4:
f4:6e:44:24:dc:a7:6f:c8:53:c7:ac:a5:ed:27:e9:
70:c3:43:22:a9:51:d8:43:fe:3b:26:e4:f3:85:db:
52:ee:f9:25:68:84:d8:d7:7b:e6:ab:5b:00:38:e9:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:4F:5B:09:2A:99:DB:56:ED:F4:41:99:FD:55:68:2B:42:46:11
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8d:f6:59:57:a2:b2:f6:15:b7:ec:7e:b6:f0:26:5f:d8:4a:
12:84:e2:ce:02:eb:b8:44:c1:4e:7e:e4:4d:05:fd:2a:7b:97:
3d:d1:60:9f:e4:85:2e:fd:89:a3:5b:9b:a2:fb:1b:af:03:2a:
b4:8c:f6:85:64:9a:fb:38:f4:eb:08:13:bf:8c:db:a9:3d:df:
cb:d3:5c:25:b4:1d:6d:6e:1e:2f:58:b6:8a:ba:0c:e1:56:1e:
ea:f4:2d:47:58:8f:c0:1b:b0:bf:30:77:66:f7:9a:56:77:64:
e7:53:bf:7e:70:51:82:21:5d:98:e1:cb:7f:92:92:66:9f:c5:
c0:8f:b9:33:ca:00:13:79:1f:81:e7:95:34:04:92:fa:e3:d3:
23:87:81:ae:c4:8a:da:17:28:f1:ae:d1:6d:e8:3b:2d:9b:a8:
f3:c9:b5:10:48:70:64:34:4f:a3:fb:dc:58:a7:6c:f1:85:96:
7b:ca:f7:87:c1:ed:ab:8a:7f:20:b8:d2:28:47:70:af:44:ad:
ff:b2:61:db:94:9a:50:2c:d0:cb:c4:8c:78:da:d6:e9:65:25:
50:38:65:98:ef:35:58:75:de:a2:38:f0:74:40:f4:31:b1:19:
10:b7:ac:1f:6e:52:a7:c4:51:dd:7c:f1:66:36:48:a4:aa:88:
42:5e:f4:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:23:05 2025 by rpki-client