Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa
File: 3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: g8NV9QQmD4vYV5ymask5nQIALR/W6Ot89T5b6WN4uRM=
Subject key identifier: EB:6D:15:17:16:7E:BF:D5:1D:FF:72:6E:5A:49:FC:6A:09:3A:CA:5F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 293E45305B12BBC88F82B2456A500C3209255BB9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:09 +0000
ROA not before: Fri 27 Dec 2024 11:42:09 +0000
ROA not after: Fri 26 Dec 2025 11:47:09 +0000
asID: 62240
IP address blocks: 194.156.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3e:45:30:5b:12:bb:c8:8f:82:b2:45:6a:50:0c:32:09:25:5b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:09 2024 GMT
Not After : Dec 26 11:47:09 2025 GMT
Subject: CN=EB6D1517167EBFD51DFF726E5A49FC6A093ACA5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:7c:17:27:d6:2b:ed:3a:a7:b0:93:20:30:
3b:bb:68:3f:a9:d8:d8:0b:1d:38:3b:f1:a8:d3:19:
a9:c3:fe:46:82:f0:c9:b9:ad:8b:57:34:bf:ef:2c:
a3:3f:01:6a:5c:60:91:61:c8:4f:46:08:dd:89:95:
19:37:9e:71:38:9d:c4:9f:af:b3:45:84:ef:0c:8d:
b6:81:69:58:1f:4b:15:64:8b:90:ae:db:cc:92:14:
5c:9f:ce:69:2c:e3:bd:5b:d0:7f:2a:81:f8:9b:aa:
12:fd:63:fd:d5:e1:46:bf:1d:7f:3e:79:80:43:1d:
5c:48:e2:55:e3:1f:ba:f2:b5:bd:dc:26:d8:92:29:
e9:cc:ea:d5:91:a2:a7:1f:a5:d9:7e:a9:1a:46:ef:
4f:98:77:e5:83:77:86:2a:bf:90:a7:f0:84:47:0e:
25:da:3f:83:79:fa:b3:5c:2b:8f:b8:d0:a7:74:6f:
bb:e6:4a:a6:07:67:7f:16:e7:d3:5f:37:42:90:91:
65:33:98:c5:6e:1e:30:83:ce:c9:92:3d:a4:bd:38:
d7:26:28:49:3f:6a:64:bf:ea:e2:3f:00:71:15:b6:
cd:a5:22:c1:c7:76:cf:7a:3b:fb:ce:d5:83:5c:b2:
ec:1f:f5:f7:fd:e0:f5:40:56:7e:2e:b8:7e:c5:f3:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6D:15:17:16:7E:BF:D5:1D:FF:72:6E:5A:49:FC:6A:09:3A:CA:5F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232342e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.224.0/24
Signature Algorithm: sha256WithRSAEncryption
61:56:77:f4:1e:48:a0:05:05:a5:f0:6e:79:3a:9b:af:9b:9d:
c3:af:04:ca:ac:b0:c7:a1:33:bf:38:bf:df:60:78:9d:f3:8a:
25:44:28:26:9c:fd:42:67:f6:90:bf:49:e7:1f:c7:87:fa:86:
c9:38:66:21:d1:d5:c6:59:66:53:56:8e:be:2f:d1:88:0a:9b:
c1:5b:a3:a1:54:57:8c:57:4e:fe:2a:7e:1c:4a:59:3c:dc:ae:
08:a8:30:24:95:16:39:94:bf:b1:81:6e:7f:f2:cb:9e:70:c2:
2c:52:4c:71:7a:8b:12:c1:cd:6d:3b:de:aa:90:f5:8b:61:bd:
59:4e:36:9e:83:05:d8:51:bb:e1:35:76:2a:0d:99:1e:4a:e3:
b3:b5:d3:1a:2c:6d:e9:4d:46:27:d0:47:8f:97:a6:19:ad:14:
02:c9:69:b5:06:cf:b7:69:ce:88:a9:ef:4a:0e:12:31:8e:74:
73:96:80:39:58:ba:15:b7:f9:d6:12:1d:37:aa:4f:92:39:e7:
f1:33:af:2e:4a:b5:d6:c1:95:58:ad:df:88:78:fc:e6:43:67:
f3:a5:6e:ca:e6:a1:16:a8:0e:81:9e:b7:ba:87:4a:2e:75:3c:
77:6c:49:98:eb:c3:78:b8:15:aa:37:f5:a3:de:9c:ff:6f:33:
0e:27:45:4d
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUKT5FMFsSu8iPgrJFalAMMgklW7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMDlaFw0yNTEyMjYxMTQ3MDlaMDMxMTAvBgNV
BAMTKEVCNkQxNTE3MTY3RUJGRDUxREZGNzI2RTVBNDlGQzZBMDkzQUNBNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp5XwXJ9Yr7TqnsJMgMDu7aD+p
2NgLHTg78ajTGanD/kaC8Mm5rYtXNL/vLKM/AWpcYJFhyE9GCN2JlRk3nnE4ncSf
r7NFhO8MjbaBaVgfSxVki5Cu28ySFFyfzmks471b0H8qgfibqhL9Y/3V4Ua/HX8+
eYBDHVxI4lXjH7rytb3cJtiSKenM6tWRoqcfpdl+qRpG70+Yd+WDd4Yqv5Cn8IRH
DiXaP4N5+rNcK4+40Kd0b7vmSqYHZ38W59NfN0KQkWUzmMVuHjCDzsmSPaS9ONcm
KEk/amS/6uI/AHEVts2lIsHHds96O/vO1YNcsuwf9ff94PVAVn4uuH7F8xF5AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU620VFxZ+v9Ud/3JuWkn8agk6yl8wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUz
NjJlMzIzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMKc4DANBgkqhkiG9w0BAQsFAAOCAQEAYVZ39B5IoAUFpfBueTqbr5ud
w68Eyqywx6Ezvzi/32B4nfOKJUQoJpz9Qmf2kL9J5x/Hh/qGyThmIdHVxllmU1aO
vi/RiAqbwVujoVRXjFdO/ip+HEpZPNyuCKgwJJUWOZS/sYFuf/LLnnDCLFJMcXqL
EsHNbTveqpD1i2G9WU42noMF2FG74TV2Kg2ZHkrjs7XTGixt6U1GJ9BHj5emGa0U
AslptQbPt2nOiKnvSg4SMY50c5aAOVi6Fbf51hIdN6pPkjnn8TOvLkq11sGVWK3f
iHj85kNn86VuyuahFqgOgZ63uodKLnU8d2xJmOvDeLgVqjf1o96c/28zDidFTQ==
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:19:31 2025 by rpki-client