Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
File: 3139342e3131332e36372e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: aSNaDcXZGFTdc2pnSD81Vbb4xeWi/NT5uqoF0Gykmqo=
Subject key identifier: 04:EA:B9:33:E7:EA:8B:13:A2:9C:69:08:00:A4:AE:09:DE:D5:AA:61
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3AA2274F611F0B1ACE88961F897ABE1CDB8CEC6F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
Signing time: Fri 27 Dec 2024 11:47:31 +0000
ROA not before: Fri 27 Dec 2024 11:42:31 +0000
ROA not after: Fri 26 Dec 2025 11:47:31 +0000
asID: 40021
IP address blocks: 194.113.67.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a2:27:4f:61:1f:0b:1a:ce:88:96:1f:89:7a:be:1c:db:8c:ec:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:31 2024 GMT
Not After : Dec 26 11:47:31 2025 GMT
Subject: CN=04EAB933E7EA8B13A29C690800A4AE09DED5AA61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:18:3b:31:20:e3:1a:ac:83:5e:53:6d:c1:
8b:cd:7d:ef:62:4b:51:ac:bb:b5:2e:41:c8:d4:c0:
f8:61:04:56:a2:04:3f:f0:f3:1e:7c:80:31:26:8c:
c7:ce:2a:e2:5e:48:93:0d:e5:6c:5b:a2:7f:a3:2f:
3c:7d:7b:60:fa:95:51:b1:e7:96:16:0c:72:ad:de:
0d:d3:04:60:9e:0d:b0:9a:0f:c1:37:36:75:fe:38:
f3:e5:d5:34:20:17:96:02:da:78:53:7d:89:97:d0:
db:6c:5a:73:3c:d3:e6:02:e7:2e:3e:ce:ee:fc:6f:
ae:c1:38:46:23:0b:87:44:27:bc:1e:a2:ce:f8:29:
eb:eb:bf:a4:f9:be:78:d3:a2:95:e7:c1:b4:90:01:
1a:09:12:e2:c4:07:43:99:ed:3b:46:7c:04:5e:23:
f4:ce:a0:53:65:37:97:eb:e8:e1:2b:e5:44:cc:8c:
cc:e5:05:6e:c4:be:da:4c:f7:93:a8:be:73:cc:53:
c4:46:8e:1f:02:53:89:4c:3d:c6:02:49:61:a6:02:
e6:1f:a2:f3:e9:e3:b1:30:0a:c5:a8:d9:79:a9:b5:
15:0d:8c:11:43:5a:e8:52:62:66:95:8e:0b:47:5c:
77:13:19:ce:49:d9:2a:65:7f:df:99:da:4f:01:6c:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:B9:33:E7:EA:8B:13:A2:9C:69:08:00:A4:AE:09:DE:D5:AA:61
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3131332e36372e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.67.0/24
Signature Algorithm: sha256WithRSAEncryption
42:21:65:50:21:c2:da:47:4b:6e:b1:1f:1d:df:ee:4d:9c:ae:
a5:b2:97:66:31:9e:76:75:1f:15:47:6b:d5:e8:f5:12:f7:76:
e0:65:76:60:4b:5c:9a:e3:86:50:48:54:ba:64:55:65:24:bf:
87:16:0e:4e:82:e1:02:13:fd:36:61:07:b0:a2:bc:c4:af:f0:
46:91:5e:7b:ba:72:38:32:b9:35:dc:45:aa:1f:5d:23:79:f9:
58:42:8e:1c:b0:26:84:d3:36:c4:6b:b7:1b:9e:0c:17:3e:c6:
d9:f3:5d:16:ae:15:51:bc:16:63:f2:21:d1:90:97:84:f3:15:
93:c5:ad:1e:e0:14:56:05:86:94:7f:75:d3:d8:ed:de:60:ae:
a8:67:ba:ba:20:aa:d2:72:1e:1a:09:93:2e:d4:6d:81:30:63:
ca:a9:93:54:46:09:29:c9:1e:e8:2e:e6:78:54:cc:91:c5:a7:
f3:04:32:1a:9e:75:d5:12:58:6a:4c:cb:85:66:bb:59:3d:0f:
72:c9:86:b8:17:06:9b:7d:25:7e:9b:1b:d9:a0:34:ce:a7:74:
45:16:67:21:1e:ad:4a:6e:68:ba:d7:bf:87:15:38:9f:d8:ef:
b3:57:79:3e:f6:47:f5:de:a2:9d:45:e4:49:c9:08:ec:01:6d:
1a:6a:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:42 2025 by rpki-client