Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa
File: 3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iS5u44pPDb3h/5PPexuHw5ZmIfwyZxlNaGpR39GvLyY=
Subject key identifier: 86:A1:8B:B1:32:B5:84:EE:1F:DD:1E:14:D0:9E:9C:DD:F3:C1:0F:44
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6AB51EA4C639A2C7018FEFDA0D8AFC5B070352B9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 24 Jan 2025 13:34:56 +0000
ROA not before: Fri 24 Jan 2025 13:29:56 +0000
ROA not after: Fri 23 Jan 2026 13:34:56 +0000
asID: 136787
IP address blocks: 194.113.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:b5:1e:a4:c6:39:a2:c7:01:8f:ef:da:0d:8a:fc:5b:07:03:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jan 24 13:29:56 2025 GMT
Not After : Jan 23 13:34:56 2026 GMT
Subject: CN=86A18BB132B584EE1FDD1E14D09E9CDDF3C10F44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:21:84:cd:28:f9:cc:85:8d:51:e1:12:0d:
96:c2:cc:ad:df:7f:51:23:f7:56:62:44:bb:2d:fe:
03:06:88:3e:5d:f5:ae:93:22:b6:a4:32:10:fb:75:
cd:31:eb:17:bd:33:90:31:7b:f8:3c:c2:ad:26:25:
f3:e7:ba:d6:fd:bf:76:10:10:62:c1:22:3e:75:da:
b5:29:3f:d2:51:2d:96:ab:db:09:8f:fa:f0:18:28:
3e:25:c7:14:f3:ad:db:b2:c0:62:83:a4:a1:0c:e0:
4b:2a:1e:0b:8b:99:d7:61:61:58:65:0d:e5:62:a9:
b9:81:50:b8:af:34:f0:c7:83:98:25:5a:c8:63:83:
38:5f:02:d7:fa:e4:54:91:59:b3:18:40:31:87:aa:
bc:0e:22:a2:4d:f2:e0:1f:7e:22:85:da:05:76:ef:
52:77:08:21:86:9c:bf:30:bf:69:90:66:65:70:87:
65:a9:74:c3:28:00:b5:53:60:4b:86:83:2a:0c:d5:
9b:b6:58:02:5c:fe:f0:01:fb:99:bb:17:0b:e2:bd:
55:8c:17:70:c0:03:82:99:94:a4:2e:29:7b:4d:de:
d4:f2:7d:17:fe:3e:71:1f:5c:b9:c7:14:f0:9e:fa:
1b:52:3b:c5:db:15:5f:5c:f4:7f:1e:1e:34:6c:9e:
b7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:8B:B1:32:B5:84:EE:1F:DD:1E:14:D0:9E:9C:DD:F3:C1:0F:44
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.66.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:03:bb:b1:f5:cd:6d:b1:91:67:f1:12:ce:3b:71:a0:6c:58:
e2:6c:f3:2a:4b:d7:9d:b6:ce:a7:87:ff:33:fc:3e:bd:6f:04:
8b:27:df:e1:ee:c9:09:af:31:d5:94:a6:f4:4c:c1:fb:8c:e2:
de:bc:13:b6:25:aa:43:36:0c:68:cf:1f:40:92:fd:f0:8c:c0:
6e:a4:f2:b7:18:b7:7d:cf:dc:b2:87:f4:28:e7:2f:b9:b2:73:
63:78:d7:5d:fe:22:89:50:3b:0b:19:7b:f9:43:96:6a:4c:4d:
bc:1b:94:50:94:bc:ea:83:e5:17:77:b6:01:9c:d1:02:ea:b4:
05:e6:e6:a7:b9:a1:2e:81:eb:3b:95:bd:47:2f:a0:cf:41:86:
c1:6d:48:c2:e0:0d:22:5b:ab:5c:e3:4d:41:a5:7a:63:e0:ac:
d0:5b:5b:72:b0:4a:a9:57:ce:89:82:ba:5e:c5:52:2a:f6:38:
50:1a:f2:dd:4b:2a:ac:0c:55:a8:08:84:5d:7a:20:0d:70:d2:
ba:4a:68:9e:c7:cb:bb:8d:3f:5d:e8:68:df:eb:76:21:b1:94:
8d:3f:fa:7a:22:e9:4a:31:d5:81:87:ba:3b:e0:75:db:3b:75:
00:a8:d9:97:fd:1b:4b:eb:28:ff:22:3b:36:d4:3c:04:94:20:
22:c2:4a:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:23 2025 by rpki-client