Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa
File: 3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: BRHXVJEkhLbbl/gjTY8U3Q4THHQ7m+Y5f9iUUpKI2ZQ=
Subject key identifier: B6:2C:71:4E:72:64:77:FE:CD:01:E5:B0:D7:8D:41:01:6E:1A:EC:BE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 41579AA0CF769D5B78942B2CC1F96CEECC0B1B10
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:17 +0000
ROA not before: Fri 27 Dec 2024 11:42:17 +0000
ROA not after: Fri 26 Dec 2025 11:47:17 +0000
asID: 136787
IP address blocks: 193.36.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:57:9a:a0:cf:76:9d:5b:78:94:2b:2c:c1:f9:6c:ee:cc:0b:1b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:17 2024 GMT
Not After : Dec 26 11:47:17 2025 GMT
Subject: CN=B62C714E726477FECD01E5B0D78D41016E1AECBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:1d:0d:45:29:2a:e8:87:1a:4b:48:05:e7:
86:0e:e7:e1:18:7d:4a:d4:f7:d9:b7:b9:44:02:6a:
25:0c:c1:e3:7f:5c:e0:73:17:43:61:9f:7e:4a:a4:
23:51:2b:53:22:88:81:13:a2:28:5d:92:8c:ab:8d:
83:5f:b3:0f:e8:b0:08:5a:cf:48:99:84:8d:cb:53:
ed:ee:47:ac:d2:27:a7:71:5f:2a:96:4c:ad:c4:19:
76:62:31:d9:c8:ee:bb:dc:5b:77:9e:13:62:be:ec:
57:27:95:ec:2d:df:ea:26:1e:43:ce:5c:03:b0:75:
2b:9d:a7:92:4a:d3:07:62:9e:3a:d4:d4:59:ab:00:
02:d5:6a:87:14:93:c6:9f:36:55:0d:30:1a:7c:72:
d3:f9:79:f0:a6:3b:50:44:ca:4e:d1:7b:98:a6:d2:
31:47:31:f9:f9:94:1e:48:35:e2:02:c1:40:c1:0d:
30:22:33:31:2d:16:97:00:85:b2:c1:23:c7:d9:2a:
96:4d:8d:23:e0:cc:9d:e8:4c:c8:59:b2:39:a3:f1:
c2:55:94:c3:bc:b4:4e:86:91:67:3b:df:5b:55:50:
b3:e4:5b:d1:51:fc:33:b9:db:c0:df:cc:f1:31:52:
3c:9d:4f:52:86:58:2f:32:2e:10:49:17:5d:5d:e2:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:71:4E:72:64:77:FE:CD:01:E5:B0:D7:8D:41:01:6E:1A:EC:BE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:9f:7f:c5:34:4f:e1:c2:4a:f8:da:f2:2b:4f:c9:a5:bf:45:
05:89:c2:66:58:2d:31:53:a8:dd:90:8f:b2:6a:f9:03:89:6c:
31:04:0e:68:39:31:5c:31:b0:0f:33:7c:ce:93:01:ab:38:79:
5f:11:e5:df:50:9d:31:15:ec:94:54:bc:05:33:1c:4c:c2:39:
a0:bb:e3:60:f8:35:10:57:a1:51:ce:e9:f5:9e:67:33:1a:69:
a9:76:28:5a:7b:a5:5f:d8:b0:fc:6b:7a:ad:60:f5:f9:b8:7f:
8e:2f:f4:e1:0a:4a:53:ed:2f:0e:47:df:bf:77:bf:55:42:c0:
f1:c7:4c:60:dd:55:c7:b2:67:3b:02:fe:99:aa:72:7a:43:ad:
f7:7a:a4:8b:40:f2:0b:29:7e:b2:77:d9:4f:44:c1:bd:d7:73:
6b:83:ea:c6:f9:08:92:db:99:16:59:c7:5c:ef:be:f0:b5:44:
59:a1:74:bf:7f:bc:b4:58:6f:50:56:56:31:d5:d5:8b:c7:e1:
50:cd:b0:f3:e6:05:e4:62:bb:30:27:2d:63:13:81:ef:b7:b1:
a6:14:14:50:e2:09:8a:23:19:bf:5b:f8:1d:84:2b:92:64:3f:
6c:55:ce:9e:28:98:7b:ce:6b:7c:ff:03:d3:ea:93:28:0f:d3:
bb:87:59:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:35 2025 by rpki-client