Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
File: 3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier: IMIh5r5gnVpU/EEh1X/dNscLVt6JoXiZUdShTZW5vko=
Subject key identifier: 55:EA:65:87:32:A7:F1:E9:2A:27:62:CC:B9:BA:EC:4F:C0:86:87:C0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 584CECCCE90077EBE13045E0A6CC9ABEB7FCD7BC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
Signing time: Fri 20 Dec 2024 15:23:30 +0000
ROA not before: Fri 20 Dec 2024 15:18:30 +0000
ROA not after: Fri 19 Dec 2025 15:23:30 +0000
asID: 211192
IP address blocks: 194.15.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4c:ec:cc:e9:00:77:eb:e1:30:45:e0:a6:cc:9a:be:b7:fc:d7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:30 2024 GMT
Not After : Dec 19 15:23:30 2025 GMT
Subject: CN=55EA658732A7F1E92A2762CCB9BAEC4FC08687C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:e7:95:a2:46:67:0d:62:44:39:b7:3b:ca:
8f:cc:41:13:f3:b6:77:03:83:a6:70:37:0a:2e:ef:
2f:41:85:7e:cd:6c:f9:00:fb:66:65:9a:8e:77:d6:
34:9e:4f:87:1a:a6:65:59:f5:e9:68:88:4f:a2:53:
80:1f:04:71:39:57:d9:4c:2b:dd:28:ce:03:3a:f2:
58:e2:83:af:42:9d:e0:e8:01:53:9f:38:e4:74:a0:
28:4a:9d:6e:1a:8a:c9:ad:38:64:1d:fc:c9:2b:f7:
c6:b7:d6:05:a4:1c:7e:54:4f:3f:b6:f4:28:7a:ac:
ec:61:3d:b0:93:b4:64:33:9c:79:58:36:23:fb:cd:
15:66:61:5e:52:17:b9:42:71:b0:19:e1:b6:c1:ea:
04:ee:41:31:8a:90:ea:74:c0:b2:1a:86:26:e8:33:
de:f4:1c:d1:16:45:25:12:de:dd:11:23:d4:61:9e:
da:30:7f:7f:49:63:15:0a:0e:bc:34:a0:e2:f1:2d:
00:3c:fb:8c:f6:5c:65:c7:32:25:a1:93:90:40:fc:
7f:a3:a2:c7:2a:ca:7b:66:a0:c3:e9:a8:e6:a4:87:
1c:c9:94:eb:31:e7:4b:34:03:01:47:72:d9:47:71:
31:14:75:e1:12:26:20:b9:0d:5b:aa:30:be:d3:27:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EA:65:87:32:A7:F1:E9:2A:27:62:CC:B9:BA:EC:4F:C0:86:87:C0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e31352e3130392e302f32342d3234203d3e20323131313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.109.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a4:21:12:9e:53:e1:b1:25:1e:85:7a:42:da:3f:96:7e:ab:
af:b8:83:5b:a6:a7:be:99:b7:19:b1:fb:b7:91:69:79:fb:1f:
6b:74:c2:e5:31:04:cd:74:7b:79:3b:7c:d9:06:bc:96:fc:c0:
b3:03:fc:fa:fe:b6:06:e3:33:e5:a6:60:45:cf:b5:64:45:34:
78:6c:d9:35:2b:cf:bc:c4:2f:5f:5b:bd:61:b7:d3:44:73:93:
38:09:5f:3c:d8:25:cd:e3:8f:5b:95:6d:94:56:c9:c7:af:cf:
95:02:d5:0a:29:d4:d2:d4:d2:5f:2f:f0:3f:1a:e6:13:bc:af:
3b:16:03:09:54:81:12:61:73:10:1d:d0:a0:6b:18:25:98:40:
4c:69:c4:1f:11:47:36:d6:ee:0e:83:26:52:bb:7e:9f:48:83:
95:db:8d:bd:8c:36:24:74:22:8d:12:f8:9b:cc:a2:75:1c:4e:
69:5e:2a:db:1b:c2:73:c2:f1:ec:42:a2:62:59:41:3d:17:84:
e8:96:53:a1:2e:43:e0:5b:5a:cd:12:86:c3:eb:13:6b:b4:80:
2b:a0:af:6d:03:84:7b:22:78:1d:09:b7:49:7a:4c:2e:ba:77:
23:e7:08:db:fc:22:07:73:24:0c:58:1d:37:3b:3f:4e:24:a7:
d1:9e:ff:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:25:20 2025 by rpki-client