Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa
File: 3139332e34362e3139362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: Hfk2mXi972Er9uR81ov0GVMNn1TlCYrQZIQdyUG7mDI=
Subject key identifier: DE:52:49:06:00:D6:B4:1C:ED:45:6B:E4:12:87:DC:93:31:A6:13:E5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6B5D64B11B9674D655AD57CCFDC2D3FF51D1984B
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:25 +0000
ROA not before: Fri 27 Dec 2024 11:42:25 +0000
ROA not after: Fri 26 Dec 2025 11:47:25 +0000
asID: 47583
IP address blocks: 193.46.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5d:64:b1:1b:96:74:d6:55:ad:57:cc:fd:c2:d3:ff:51:d1:98:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:25 2024 GMT
Not After : Dec 26 11:47:25 2025 GMT
Subject: CN=DE52490600D6B41CED456BE41287DC9331A613E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:09:d7:ff:1b:6a:41:72:fd:d4:91:77:cb:
90:37:d2:18:3d:68:5c:bd:06:bf:19:a2:ec:57:99:
64:f2:a5:08:43:89:a5:c0:f5:77:81:5c:fd:ac:95:
e5:20:7d:ea:ca:32:b5:fa:5a:e5:af:2d:fe:c3:87:
6c:16:51:b3:39:ac:54:4c:b5:48:c2:59:e5:5c:6b:
75:cc:db:40:21:93:46:f9:56:f7:b4:3d:c1:19:12:
4c:cc:a5:93:de:4f:df:a7:67:fd:20:90:39:c2:c0:
f5:36:ec:32:17:fd:82:da:3c:3d:3c:be:49:61:50:
ca:85:ab:2e:bd:fb:1f:22:d3:f8:bf:26:ef:f0:6f:
a1:ad:41:2b:66:0d:01:db:62:04:4a:40:6a:29:46:
8d:50:99:98:3b:c6:01:45:44:bd:0b:77:93:9d:67:
db:30:69:01:bc:ba:54:b9:ad:da:ed:7c:23:ee:9e:
ed:fb:74:27:e8:47:bb:af:4b:18:f6:fb:64:46:b7:
68:58:3d:2d:c3:8f:c9:68:72:73:3d:fe:7f:48:6c:
eb:31:ce:39:2a:20:e3:7f:32:47:17:de:be:81:b2:
87:e3:f0:08:55:d7:13:f5:cd:09:36:bb:aa:3e:2a:
33:46:30:91:bb:1a:45:a7:51:a9:9c:70:ee:d8:aa:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:49:06:00:D6:B4:1C:ED:45:6B:E4:12:87:DC:93:31:A6:13:E5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.196.0/22
Signature Algorithm: sha256WithRSAEncryption
67:db:8e:c1:a1:f0:98:6d:0c:80:9f:36:3d:98:38:ca:c2:03:
06:90:dd:4e:b4:83:e5:65:b4:46:f6:29:e0:17:55:7c:64:1a:
2d:88:b1:7d:d5:f4:39:fd:6b:74:f5:2b:4e:27:d6:b1:e6:b3:
94:ec:09:22:5a:e4:63:2b:d7:58:a8:9a:2d:ea:b3:49:2b:a8:
96:08:68:76:a0:fa:63:fa:bc:82:17:a0:4f:b5:a3:e2:3c:6f:
43:06:49:98:cf:21:28:5e:4a:24:88:c9:52:ad:4c:18:52:19:
9d:12:78:8f:78:21:d0:31:a3:d5:ed:81:dd:2a:e2:e6:d1:ad:
c2:53:cb:3f:6a:51:13:5a:3e:3e:54:df:10:28:d9:3e:87:7e:
94:ed:a4:88:11:70:69:b5:4a:8e:43:4f:2d:e9:fc:6e:a4:70:
22:67:12:d5:61:51:5e:bd:c1:b4:7d:97:d2:6d:05:00:2d:39:
df:5c:56:12:90:44:f0:d4:c3:29:ff:63:33:91:d7:24:3a:86:
33:4a:6f:bd:da:75:4c:11:4d:ea:ee:d7:ca:94:b1:a5:49:0e:
f0:bd:b0:f4:26:b9:b5:80:7c:46:d7:68:34:f0:6b:64:5a:81:
93:df:3f:cf:b1:7c:5f:46:05:df:e2:eb:74:ea:c7:da:fd:6a:
4e:19:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:38:17 2025 by rpki-client