Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39392e302f32342d3234203d3e20313336373837.roa
File: 3139332e34322e39392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: WTje5Ji27sontA1+0cagBO2nQxC3nCWo6dBps7UyWtM=
Subject key identifier: 90:10:72:47:78:B8:C7:C2:AC:D0:93:75:98:E8:24:60:E7:27:8D:38
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 500B4D4548D4BD28DE8E6403BF30870552D19DEE
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:23 +0000
ROA not before: Fri 27 Dec 2024 11:42:23 +0000
ROA not after: Fri 26 Dec 2025 11:47:23 +0000
asID: 136787
IP address blocks: 193.42.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 13:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0b:4d:45:48:d4:bd:28:de:8e:64:03:bf:30:87:05:52:d1:9d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:23 2024 GMT
Not After : Dec 26 11:47:23 2025 GMT
Subject: CN=9010724778B8C7C2ACD0937598E82460E7278D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:c2:2d:cd:b3:7f:dd:55:e0:0e:47:a4:31:
e5:a7:9a:fd:1a:f6:2a:c0:e8:06:56:a8:e4:0f:d8:
db:cd:56:49:9a:de:8b:6d:3c:8f:f6:53:ed:47:ac:
a4:8f:fb:41:c8:d3:ea:fc:70:4e:fb:e0:a1:02:2e:
cc:e0:5a:91:8f:ab:af:50:98:ce:f2:cd:13:15:3f:
75:87:6b:ce:e5:7f:b2:e7:eb:71:95:59:b7:10:7b:
d3:3c:48:a5:2f:d4:88:3e:7c:98:f4:1f:35:59:81:
c9:b9:b3:89:a9:a7:93:19:27:15:8d:df:f3:6d:b1:
ab:77:7b:ba:f8:95:fb:4b:04:51:80:5c:34:ad:24:
5e:21:ac:45:16:38:b6:3b:c6:d8:99:25:eb:ec:84:
70:83:b9:50:cd:bb:3e:83:23:66:4a:2b:e5:5b:9a:
06:10:38:0a:4e:55:6b:78:e8:63:86:72:e7:1f:9b:
e3:af:91:86:ad:6f:c0:b6:9f:0f:22:be:85:80:fc:
09:f6:2a:9e:6e:49:2b:46:f7:bf:b6:19:72:9f:ef:
f0:74:05:3f:46:e6:54:6b:78:62:b2:0a:d4:5c:cd:
4b:8b:db:10:1a:04:e2:35:9b:64:5a:b7:bc:00:02:
7b:0c:91:01:52:e5:44:ec:72:e1:e3:42:16:20:96:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:10:72:47:78:B8:C7:C2:AC:D0:93:75:98:E8:24:60:E7:27:8D:38
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
55:50:65:df:1f:57:b9:c3:c2:1d:a7:3d:0f:66:29:f2:d4:22:
57:b4:0e:5d:f3:1f:39:46:62:ad:1c:0f:0a:7a:8d:05:35:9c:
a9:ef:e1:c3:50:b2:c1:ac:2d:81:94:0e:45:40:16:68:b9:15:
57:00:3d:e6:f6:65:63:bd:06:e7:84:13:61:00:63:43:cb:1a:
9d:f0:5a:a6:fb:cc:f3:c6:f2:c7:b5:fb:81:cc:5e:6d:17:56:
a2:17:8f:17:f1:19:66:8c:b8:76:0f:0a:4f:cb:22:57:af:40:
d6:ea:38:22:ba:63:06:f2:55:0c:30:25:fc:06:c3:8a:3b:9e:
7c:df:e0:07:ee:12:42:ce:3b:0e:af:a5:1e:3b:77:00:0b:5a:
0d:94:bb:c6:7d:0c:be:4d:71:21:de:4f:4e:74:2e:55:ad:96:
66:5d:31:76:9b:3e:4f:58:1c:87:8b:ac:ff:80:41:d8:a1:4e:
67:bb:41:ad:b1:d7:f3:a2:95:11:cb:d6:f6:a6:5e:dc:9e:20:
c3:10:49:bd:25:c6:44:11:31:c6:e0:20:2a:39:7c:68:30:08:
7e:ee:41:e3:90:1c:77:18:f8:d7:34:60:01:f7:de:74:d7:81:
e9:ad:f0:9c:eb:87:51:71:c7:b5:45:97:ff:f7:e7:26:80:77:
68:ce:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:30 2025 by rpki-client