Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa
File: 3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: ozeEqctxw3p+aesuSfAf31irgKlCBntvLj8LaQwgyp4=
Subject key identifier: 49:1A:CD:76:A9:63:BD:61:F5:F5:A8:7D:39:27:53:4D:03:65:1D:FD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 15A0A31FFB80BECE77976D8B1FA89EBB2C33DA8F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 204170
IP address blocks: 194.110.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:a0:a3:1f:fb:80:be:ce:77:97:6d:8b:1f:a8:9e:bb:2c:33:da:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=491ACD76A963BD61F5F5A87D3927534D03651DFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:cf:a8:ca:d5:cb:76:5f:4a:e8:ba:50:41:
3e:f1:b8:54:b2:04:7e:06:87:ea:33:37:74:34:f7:
80:14:6b:d7:7b:0c:89:87:84:34:f8:b9:dc:6b:90:
87:ab:9d:a7:20:74:02:ac:de:eb:4f:63:a3:c6:f3:
91:30:71:63:77:5f:6f:81:e5:52:a8:9a:fa:ef:cb:
10:96:84:be:f8:d2:b7:be:58:81:a7:55:76:a9:71:
da:41:27:c2:4c:29:4e:ba:91:6a:69:ab:53:86:99:
55:ec:c2:b9:03:ed:d1:3d:fc:a7:33:8f:21:d5:51:
88:89:66:0c:39:d6:68:30:9f:39:4b:96:ce:30:63:
28:8e:f7:67:58:aa:a7:5b:79:41:d6:6a:b5:30:f1:
b9:92:1f:8c:03:80:17:9a:cd:f0:7f:91:9b:ba:9c:
7a:fe:f7:60:a3:a3:28:0c:d0:bf:9a:73:26:38:18:
d2:62:5f:53:a7:d4:12:28:0d:50:88:f9:ce:2b:8e:
59:bd:71:41:d4:63:c3:5d:5a:ea:68:3c:8e:af:96:
78:9b:8d:b8:f1:bf:86:69:f1:bf:07:77:fa:ba:ee:
e2:eb:77:52:25:c5:fc:a0:4a:3d:1d:ef:c4:b1:5a:
f2:58:37:5c:5f:65:a8:31:e3:6a:80:91:62:ed:62:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1A:CD:76:A9:63:BD:61:F5:F5:A8:7D:39:27:53:4D:03:65:1D:FD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131302e3139332e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f6:47:3e:43:a4:f3:4d:85:fd:0e:17:72:26:ed:c7:35:53:
59:d2:69:45:fd:77:d0:af:3e:0b:e2:3e:51:33:d2:bf:00:d4:
be:26:ac:a9:17:4e:1a:c8:a9:fc:4d:6e:66:57:d6:6b:37:c3:
a9:aa:6b:a4:5e:87:84:3c:8d:93:1e:0e:eb:aa:b9:63:71:aa:
07:87:d4:96:50:9b:42:79:da:cd:c0:2e:31:28:a3:89:e3:d5:
d4:6f:af:55:88:38:9e:95:9f:ae:f8:8f:29:f5:b9:80:57:6b:
9e:93:eb:35:97:ae:35:f4:4b:c6:91:1c:83:61:dc:86:52:03:
da:cc:35:4e:4c:19:6a:16:39:84:a8:9a:10:a2:d4:44:53:8e:
48:67:91:13:6e:15:95:7b:c4:a0:05:28:6e:35:5a:91:ab:d0:
55:f8:56:55:f1:78:e2:7b:1e:13:c0:fb:80:00:63:e7:97:cd:
40:21:26:94:51:3a:88:f5:e2:9a:55:97:49:f0:26:c8:06:8b:
e6:e3:bb:74:0d:da:36:f3:7c:1f:22:7b:1e:01:0e:ba:77:0c:
33:b8:d1:b9:89:ca:7e:46:0c:e5:4f:25:26:85:57:59:9c:83:
d1:fa:81:52:45:f9:eb:af:58:6e:c5:df:9d:b7:f3:86:5f:8b:
e6:77:d7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:03:27 2025 by rpki-client