Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
File: 3139342e3131332e36352e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier: tBQ6RVJw4bH0FrGfbr5/9uvIFjsar09pWFjMPRXiD3s=
Subject key identifier: 8F:BC:AD:14:C6:FD:59:43:C0:D4:B5:38:9B:8E:8E:7C:60:0D:5B:C5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4943F714D554DAE844C4C59C616D512ED21C1BCB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
Signing time: Fri 27 Dec 2024 11:47:47 +0000
ROA not before: Fri 27 Dec 2024 11:42:47 +0000
ROA not after: Fri 26 Dec 2025 11:47:47 +0000
asID: 56876
IP address blocks: 194.113.65.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:43:f7:14:d5:54:da:e8:44:c4:c5:9c:61:6d:51:2e:d2:1c:1b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:47 2024 GMT
Not After : Dec 26 11:47:47 2025 GMT
Subject: CN=8FBCAD14C6FD5943C0D4B5389B8E8E7C600D5BC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:6a:f5:11:24:39:09:47:28:0c:41:7e:14:
fe:c5:a5:65:12:b4:52:6f:50:a0:81:17:b1:f2:87:
24:5a:b2:8f:6b:64:be:3d:2b:5a:49:fb:65:77:68:
43:db:7f:db:e0:5b:9d:8b:2d:00:1e:87:6b:8e:62:
c5:85:88:4a:ed:f1:94:a7:ee:b2:3b:ab:56:f0:ce:
83:e4:2a:46:41:c1:d1:4a:5c:0e:fa:da:32:0a:2a:
fb:80:fb:c4:b3:74:60:fd:81:36:48:21:05:79:4a:
4a:f6:2c:28:36:cf:80:0d:4b:13:7d:7a:62:6e:e5:
a7:83:cb:1f:81:0d:21:1f:80:eb:f9:ea:22:91:e1:
d6:be:90:6f:fb:e6:f6:7e:15:d7:59:5b:1c:68:54:
9e:a4:69:33:97:c8:66:ef:b7:82:3c:7a:4d:08:7f:
ba:37:5a:34:59:d0:ff:0a:95:63:63:ac:f2:48:19:
3f:aa:95:30:0a:26:cb:71:5c:13:2a:ed:6b:6a:00:
a8:75:15:7c:bc:22:30:3d:35:88:79:85:5c:0b:0c:
85:14:c3:66:6c:16:dd:db:a9:a0:79:b2:5a:17:53:
aa:6a:cb:10:7c:87:e0:f9:f1:1c:02:1b:9f:0d:10:
8f:88:c0:74:d0:33:fb:52:7f:ea:be:a1:9d:ec:bb:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BC:AD:14:C6:FD:59:43:C0:D4:B5:38:9B:8E:8E:7C:60:0D:5B:C5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.65.0/24
Signature Algorithm: sha256WithRSAEncryption
07:3d:e8:a0:e1:ac:1b:5f:fa:81:e6:1c:f6:5f:79:8b:85:a2:
86:e8:60:17:5e:6b:71:e3:5e:82:24:c8:f3:5d:8c:91:fb:1e:
06:38:fa:09:cf:35:f1:5f:15:ed:c9:1d:02:68:7d:d7:a9:2b:
13:cf:b1:c4:c2:4b:38:e3:63:bc:24:dc:47:07:22:d3:d0:2c:
e1:3d:9e:4d:ae:72:99:cc:aa:b7:26:d1:6a:e3:6f:8e:27:b3:
b3:bb:09:79:c1:75:40:6e:aa:dd:f3:46:c4:e5:ad:6c:5d:88:
a9:29:12:b4:ac:c0:cf:c6:ed:e0:1c:25:9c:42:ce:4f:08:26:
70:64:6b:14:c4:fc:9e:eb:8a:d0:bb:0b:d3:6a:42:76:c9:85:
59:40:34:c5:74:01:e1:99:32:a3:55:01:e0:3d:88:ff:b4:0d:
56:01:20:e5:ac:b1:06:20:06:38:0c:f7:c2:26:37:d0:2e:c1:
d0:5a:63:f9:8c:ff:c9:93:03:89:ac:c4:43:d5:f0:b8:ff:86:
1b:57:07:ab:6c:1a:80:22:be:16:65:70:a2:fb:d6:fb:3d:af:
4d:be:22:ea:77:02:1f:93:79:57:d6:44:10:01:53:15:04:71:
28:8a:29:63:9d:63:6a:b1:7f:00:e8:2a:d4:1d:fd:11:25:a9:
01:47:2a:18
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUSUP3FNVU2uhExMWcYW1RLtIcG8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDdaFw0yNTEyMjYxMTQ3NDdaMDMxMTAvBgNV
BAMTKDhGQkNBRDE0QzZGRDU5NDNDMEQ0QjUzODlCOEU4RTdDNjAwRDVCQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oWr1ESQ5CUcoDEF+FP7FpWUS
tFJvUKCBF7HyhyRaso9rZL49K1pJ+2V3aEPbf9vgW52LLQAeh2uOYsWFiErt8ZSn
7rI7q1bwzoPkKkZBwdFKXA762jIKKvuA+8SzdGD9gTZIIQV5Skr2LCg2z4ANSxN9
emJu5aeDyx+BDSEfgOv56iKR4da+kG/75vZ+FddZWxxoVJ6kaTOXyGbvt4I8ek0I
f7o3WjRZ0P8KlWNjrPJIGT+qlTAKJstxXBMq7WtqAKh1FXy8IjA9NYh5hVwLDIUU
w2ZsFt3bqaB5sloXU6pqyxB8h+D58RwCG58NEI+IwHTQM/tSf+q+oZ3su6RNAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUj7ytFMb9WUPA1LU4m46OfGANW8UwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzEz
MzJlMzYzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzYzODM3MzYucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCcUEwDQYJKoZIhvcNAQELBQADggEBAAc96KDhrBtf+oHmHPZfeYuFoobo
YBdea3HjXoIkyPNdjJH7HgY4+gnPNfFfFe3JHQJofdepKxPPscTCSzjjY7wk3EcH
ItPQLOE9nk2ucpnMqrcm0Wrjb44ns7O7CXnBdUBuqt3zRsTlrWxdiKkpErSswM/G
7eAcJZxCzk8IJnBkaxTE/J7ritC7C9NqQnbJhVlANMV0AeGZMqNVAeA9iP+0DVYB
IOWssQYgBjgM98ImN9AuwdBaY/mM/8mTA4msxEPV8Lj/hhtXB6tsGoAivhZlcKL7
1vs9r02+Iup3Ah+TeVfWRBABUxUEcSiKKWOdY2qxfwDoKtQd/RElqQFHKhg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 03:26:00 2025 by rpki-client