Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa
File: 3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: P0KVtbg253gHMSJPXuGBLJbi/+uoVMHfy/AFjT1Y07M=
Subject key identifier: E3:50:42:4C:ED:F6:3B:D3:0A:1A:D2:0C:22:FA:41:CB:C3:E1:59:62
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 09467B70C85C38D5BB2D8C9443A2BA650EEF7F52
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:16 +0000
ROA not before: Fri 27 Dec 2024 11:42:16 +0000
ROA not after: Fri 26 Dec 2025 11:47:16 +0000
asID: 62240
IP address blocks: 194.156.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:46:7b:70:c8:5c:38:d5:bb:2d:8c:94:43:a2:ba:65:0e:ef:7f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:16 2024 GMT
Not After : Dec 26 11:47:16 2025 GMT
Subject: CN=E350424CEDF63BD30A1AD20C22FA41CBC3E15962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:a9:04:37:73:d9:bb:42:05:42:2c:23:10:
ee:13:91:8e:68:92:d9:56:47:44:8c:e4:fc:62:da:
e1:4d:04:ca:73:e2:c3:52:d8:fd:d0:fa:7f:88:39:
2a:9b:d8:de:00:bb:d4:63:2e:97:ca:0d:0b:cb:41:
84:ac:5c:ad:16:2f:61:54:fc:e4:21:80:a2:5e:9a:
85:f2:cb:c3:ed:0e:a9:9d:ef:a6:75:c7:13:d1:43:
d6:08:60:99:c2:0a:e8:00:16:1d:cc:0b:2a:7c:06:
2e:d4:11:b9:55:3c:d5:87:20:7a:a2:7f:5a:7e:1a:
31:19:a6:48:45:0e:87:5c:e7:55:94:de:5e:69:29:
7f:1d:d7:30:da:dd:7d:9c:fa:bf:37:77:2c:0b:1f:
b0:a9:b1:45:cf:06:9a:a4:1b:92:f0:52:79:47:38:
db:8a:b0:ca:c6:11:26:19:fd:43:06:09:a9:9f:e8:
56:08:47:69:45:44:0f:8b:e5:bb:09:dd:0d:1b:e5:
24:4f:c9:fb:3d:90:c8:19:d8:17:54:c3:91:54:b1:
6a:d6:38:4e:17:27:5d:f7:33:71:f0:f6:33:11:e5:
9a:1a:3b:d7:4b:a5:80:67:50:ac:67:71:85:b0:35:
90:14:60:c3:a3:e8:a0:21:38:97:d4:a4:cc:d5:ae:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:50:42:4C:ED:F6:3B:D3:0A:1A:D2:0C:22:FA:41:CB:C3:E1:59:62
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232352e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.225.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:d1:48:d1:b3:b8:db:11:57:bd:97:43:36:1b:ec:9c:dc:c9:
60:87:7b:ba:28:97:25:f3:a0:45:5d:ea:5c:a6:01:e6:63:fe:
b1:cc:f8:94:fd:3b:36:0a:0a:14:07:fb:4e:4c:b0:7e:15:0b:
a3:73:d9:70:6e:f8:4a:4d:a5:bd:ba:70:ab:d2:4c:b3:93:db:
97:6b:9e:04:4e:83:88:93:8a:f6:31:91:04:f1:db:8c:5e:84:
43:37:43:af:bb:d0:ca:38:df:89:b8:d8:0b:cf:04:23:ee:63:
aa:29:82:4f:ac:7d:04:4b:fa:c9:3a:9c:58:22:14:30:18:2f:
a6:75:17:ca:f1:46:78:5b:15:ca:ef:46:1e:57:b0:04:bc:5f:
6b:2d:5d:de:9c:e6:d1:38:9c:02:f1:76:5a:57:64:ab:bd:fd:
d3:aa:0d:5d:a3:24:38:0c:74:e2:7b:b6:6e:c0:73:e9:62:88:
12:6d:8c:5d:89:cd:84:18:78:05:fe:a8:fd:0f:07:e6:f5:50:
4d:14:2a:99:22:cb:c2:62:b7:cc:28:21:37:75:d7:55:45:ff:
91:e2:46:07:c0:b7:c8:00:09:6a:04:7f:64:7e:95:9e:26:7f:
70:0e:4b:25:f1:5e:2e:cf:c8:45:c1:f3:01:8e:60:23:d5:1d:
0b:0f:da:07
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUCUZ7cMhcONW7LYyUQ6K6ZQ7vf1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMTZaFw0yNTEyMjYxMTQ3MTZaMDMxMTAvBgNV
BAMTKEUzNTA0MjRDRURGNjNCRDMwQTFBRDIwQzIyRkE0MUNCQzNFMTU5NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjakEN3PZu0IFQiwjEO4TkY5o
ktlWR0SM5Pxi2uFNBMpz4sNS2P3Q+n+IOSqb2N4Au9RjLpfKDQvLQYSsXK0WL2FU
/OQhgKJemoXyy8PtDqmd76Z1xxPRQ9YIYJnCCugAFh3MCyp8Bi7UEblVPNWHIHqi
f1p+GjEZpkhFDodc51WU3l5pKX8d1zDa3X2c+r83dywLH7CpsUXPBpqkG5LwUnlH
ONuKsMrGESYZ/UMGCamf6FYIR2lFRA+L5bsJ3Q0b5SRPyfs9kMgZ2BdUw5FUsWrW
OE4XJ133M3Hw9jMR5ZoaO9dLpYBnUKxncYWwNZAUYMOj6KAhOJfUpMzVrqtpAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQU41BCTO32O9MKGtIMIvpBy8PhWWIwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUz
NjJlMzIzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjMyMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMKc4TANBgkqhkiG9w0BAQsFAAOCAQEA3dFI0bO42xFXvZdDNhvsnNzJ
YId7uiiXJfOgRV3qXKYB5mP+scz4lP07NgoKFAf7TkywfhULo3PZcG74Sk2lvbpw
q9JMs5Pbl2ueBE6DiJOK9jGRBPHbjF6EQzdDr7vQyjjfibjYC88EI+5jqimCT6x9
BEv6yTqcWCIUMBgvpnUXyvFGeFsVyu9GHlewBLxfay1d3pzm0TicAvF2Wldkq739
06oNXaMkOAx04nu2bsBz6WKIEm2MXYnNhBh4Bf6o/Q8H5vVQTRQqmSLLwmK3zCgh
N3XXVUX/keJGB8C3yAAJagR/ZH6VniZ/cA5LJfFeLs/IRcHzAY5gI9UdCw/aBw==
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:20:18 2025 by rpki-client