Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32332d3234203d3e203631333137.roa
File: 3139342e3134372e35362e302f32332d3234203d3e203631333137.roa (raw, json)
Hash identifier: i8Tc+CCarPVrfXxhOamJnjqKaoOVunBduIhmNqhdyg8=
Subject key identifier: DE:AC:89:0E:66:88:00:77:17:D6:40:F7:C5:5A:0C:4F:CC:AC:AC:0E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3EE9AED8E3356A73629B89D3B7E124799A3B7C69
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32332d3234203d3e203631333137.roa
Signing time: Fri 27 Dec 2024 11:47:38 +0000
ROA not before: Fri 27 Dec 2024 11:42:38 +0000
ROA not after: Fri 26 Dec 2025 11:47:38 +0000
asID: 61317
IP address blocks: 194.147.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e9:ae:d8:e3:35:6a:73:62:9b:89:d3:b7:e1:24:79:9a:3b:7c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:38 2024 GMT
Not After : Dec 26 11:47:38 2025 GMT
Subject: CN=DEAC890E6688007717D640F7C55A0C4FCCACAC0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:9a:30:08:59:2a:cb:11:54:bd:95:66:12:
91:23:4e:b2:c4:09:41:72:17:03:02:b4:fb:4a:ec:
83:5d:45:48:38:9c:6e:be:bd:e3:49:3e:5c:b3:26:
a4:10:11:88:59:c1:57:af:b2:2a:b1:b1:11:72:cb:
98:9a:63:f2:85:81:62:60:dc:0d:84:c7:e4:35:7d:
3d:c4:8c:64:68:d9:ad:27:7b:91:ec:8b:31:ed:16:
44:53:b8:51:ba:13:23:6b:1b:36:23:d7:cd:84:ff:
ba:81:81:20:ba:b4:26:2e:94:6c:3a:d1:71:08:1e:
43:8f:07:e8:93:2d:8e:25:78:33:60:36:64:8a:08:
6e:5a:9b:52:e6:82:b3:77:5f:4f:62:43:8c:81:6a:
05:87:ad:d0:55:23:e1:69:e3:48:85:2a:26:18:28:
4a:75:28:80:45:2d:72:a2:58:21:64:0a:51:91:6a:
fb:1d:76:bb:e8:59:24:d0:3c:45:d2:ec:93:2c:c4:
5b:30:55:f1:96:74:d3:3d:40:2b:19:fc:6d:af:05:
56:85:c1:a1:a1:d3:fc:70:f2:5f:5f:9f:3b:af:00:
84:54:8b:c4:a7:6d:66:a4:24:8d:d7:43:34:0c:dc:
8d:b7:02:58:86:12:5f:96:cd:33:85:28:ec:ce:ba:
1a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AC:89:0E:66:88:00:77:17:D6:40:F7:C5:5A:0C:4F:CC:AC:AC:0E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35362e302f32332d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.56.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:b5:d3:6b:1d:81:89:9f:b9:2e:35:b5:42:4d:79:0e:bf:81:
aa:2c:6a:07:33:c7:97:4f:ff:ba:e2:e1:8c:85:92:59:aa:58:
eb:08:d5:24:54:a3:da:ea:72:d6:82:97:85:ff:60:68:af:49:
1d:cb:0c:a7:91:02:92:59:cc:0b:7d:6c:2a:7d:54:2b:26:a1:
9b:db:2d:40:b3:d8:05:03:40:da:89:c0:de:2b:f7:c3:26:e4:
b2:d1:c7:7e:fd:8f:a8:56:1b:ba:58:ce:5b:52:c2:9e:db:08:
2f:1b:99:7c:cb:d7:d9:ad:ef:b8:14:3b:05:9f:29:39:51:24:
c2:39:e4:ee:c6:1c:39:d6:a0:de:0d:39:f0:4b:26:77:b9:ab:
26:1f:f9:c2:c2:16:ff:4d:e6:04:97:46:e3:65:53:c8:9f:65:
f3:22:dc:99:2e:d2:dc:61:3a:1a:a3:bf:35:d4:ad:72:ee:99:
fc:56:16:b7:94:66:9c:9b:4a:f5:e2:23:73:0a:81:11:2a:8d:
4d:c9:4c:c0:d7:58:0e:0e:d7:d7:cb:63:a7:50:4e:05:7c:34:
fc:36:e8:13:33:6c:3d:2f:e0:06:a5:7b:02:f2:f4:c3:b2:d6:
e5:75:af:90:ed:d4:d5:eb:12:07:55:42:62:32:61:18:bb:40:
b2:cd:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:55:07 2025 by rpki-client