Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa
File: 3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: On8juvDnaedi+CH4a0T/uVYv75r9XRqvnVFn62GrrIY=
Subject key identifier: 03:B3:06:27:3C:9E:F2:32:54:20:37:5C:87:DE:F3:C8:D1:39:B3:94
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0D102A330B347F2642F546D07E77DCE7DD077B1F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:34 +0000
ROA not before: Fri 27 Dec 2024 11:42:34 +0000
ROA not after: Fri 26 Dec 2025 11:47:34 +0000
asID: 136787
IP address blocks: 193.36.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:10:2a:33:0b:34:7f:26:42:f5:46:d0:7e:77:dc:e7:dd:07:7b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:34 2024 GMT
Not After : Dec 26 11:47:34 2025 GMT
Subject: CN=03B306273C9EF2325420375C87DEF3C8D139B394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:32:48:6e:8f:6c:ff:da:84:8c:17:ec:8c:
9a:67:b2:05:45:44:7b:6e:80:80:fe:54:f6:2c:56:
55:e9:d0:d6:63:d8:4a:cc:cd:d0:8d:56:a0:18:bd:
74:a2:92:12:fb:f1:4a:c5:db:93:d9:9c:49:a4:6e:
40:2d:90:c3:9e:69:29:0a:33:94:fd:d7:c3:f2:e7:
19:1a:ab:95:64:e8:32:44:86:67:be:c2:81:54:8c:
0a:82:76:c4:c5:ec:2d:18:36:9b:01:d1:d0:94:bf:
e8:12:ba:fe:b1:dc:e9:4e:db:de:7e:bf:e4:d4:29:
11:95:60:2e:05:c4:d6:cd:36:5a:54:87:2a:37:ee:
b2:3f:72:7e:eb:51:40:fd:96:f8:89:78:37:bd:40:
6b:2c:57:5a:b3:e1:af:07:06:55:89:6b:6e:5d:b9:
d2:d4:c4:5c:bd:c2:69:18:9c:6b:4b:a0:72:50:22:
7a:1d:2b:c8:b8:fd:0a:25:b8:c4:86:14:08:a3:bf:
b4:44:83:23:94:aa:69:55:42:c0:97:f3:93:75:bd:
ff:26:14:3c:b9:4a:97:a7:f6:69:0a:2e:73:45:8b:
2f:7b:b0:36:ca:cc:1e:35:b4:1e:19:88:71:fb:a6:
8c:ee:a8:b3:2e:9a:43:ab:23:90:ca:17:b8:44:03:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B3:06:27:3C:9E:F2:32:54:20:37:5C:87:DE:F3:C8:D1:39:B3:94
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.239.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:3f:e5:f9:cb:ae:5e:70:ec:62:29:8b:1e:14:45:81:d0:c2:
ea:0e:2a:03:e1:22:00:4d:23:09:63:72:95:14:42:82:dc:81:
66:0d:3b:c1:7e:3e:26:c9:fd:93:cd:39:dd:3a:8b:0c:3f:39:
c5:98:35:b0:03:94:42:63:1a:a7:b1:1d:41:a6:dd:e8:34:42:
ed:09:2f:8c:f1:2a:67:2f:cb:99:d9:0d:6f:a5:70:cf:84:2b:
12:18:03:d2:53:51:b6:2b:ba:1a:6b:c3:04:2e:ea:b2:22:b7:
03:32:5e:8b:cb:38:f3:7b:dd:a1:78:98:98:1f:f5:da:4b:09:
0a:2b:c2:01:9e:8f:09:61:9f:7a:b9:8d:b7:6b:7e:c2:03:9e:
85:c6:8a:98:da:4e:1b:ac:c3:0b:cc:49:f7:2a:38:05:e5:cb:
f0:4b:44:ed:67:9a:d9:5c:77:dc:4a:cd:97:e3:7f:29:55:5e:
a0:1b:e2:46:88:66:54:b6:bf:76:2a:06:00:00:86:95:63:0f:
e8:3c:7b:5d:62:05:98:3b:6f:e6:36:75:b4:a5:58:e7:16:cc:
30:e8:a7:b3:aa:64:a7:14:c4:79:a1:f4:78:5d:13:00:c6:e8:
fc:37:8e:7e:02:67:5b:46:1c:de:8f:76:9d:f8:0f:c0:bf:4b:
ce:ad:f0:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:02:01 2025 by rpki-client