Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
File: 3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: /iyhxRY5U8KdoBROCkhvxdqWITZV/GrrsjIVvEYNMAo=
Subject key identifier: B6:9C:09:56:B7:7F:78:F8:85:FB:15:09:DD:27:B1:C8:8E:4D:60:44
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7843317A4E59EA8AEBD6E9F8BA0D4A34E7698710
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
Signing time: Fri 27 Dec 2024 11:47:34 +0000
ROA not before: Fri 27 Dec 2024 11:42:34 +0000
ROA not after: Fri 26 Dec 2025 11:47:34 +0000
asID: 204170
IP address blocks: 194.156.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:43:31:7a:4e:59:ea:8a:eb:d6:e9:f8:ba:0d:4a:34:e7:69:87:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:34 2024 GMT
Not After : Dec 26 11:47:34 2025 GMT
Subject: CN=B69C0956B77F78F885FB1509DD27B1C88E4D6044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:fe:50:0f:2a:7c:a5:8e:01:31:9c:7a:2d:
c0:c2:ce:bf:37:5a:18:39:9d:c8:4c:e3:e3:af:4c:
04:20:89:68:02:46:1b:a4:7b:ac:cf:99:a4:d6:82:
a5:c9:f4:9f:e2:47:31:58:8d:2c:33:8a:67:0c:d2:
3f:8c:4c:d6:85:fb:f5:e9:b1:48:65:37:ef:95:8a:
25:d0:94:ce:7f:1a:bb:93:3d:52:92:42:d4:58:5f:
91:d5:0b:78:0f:b2:21:7f:14:68:88:d0:6e:a1:3b:
98:ae:81:87:91:f5:54:13:7d:b5:9e:1d:ea:c4:2c:
5b:58:5a:81:0f:5d:49:2e:0c:c5:e1:56:5a:e5:70:
4e:9a:72:58:72:5c:e2:95:ca:39:0d:d1:ce:66:9b:
72:a4:33:a5:5b:17:59:21:d6:91:28:98:06:01:1e:
90:16:60:c1:4f:f2:c9:ec:73:72:2c:35:1e:62:34:
75:8c:3c:b9:8e:ea:bb:61:95:7e:33:77:62:e3:9a:
8d:41:a6:33:d1:1f:64:eb:c5:79:9b:b4:e1:f2:6c:
b6:da:6c:29:4a:f7:f8:20:f2:7e:f0:49:4f:0a:bc:
26:a5:46:a2:e1:a2:85:8e:28:a7:64:0d:18:33:ca:
ef:22:49:cc:f0:81:80:cd:a2:a8:74:5b:26:70:35:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:09:56:B7:7F:78:F8:85:FB:15:09:DD:27:B1:C8:8E:4D:60:44
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3135362e3232362e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.226.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6f:59:cb:4b:36:a1:86:82:cc:e9:dc:61:d8:e1:1b:47:99:
e5:ec:de:38:c2:61:db:5e:3d:59:b2:f9:bb:28:d9:b9:06:e1:
fb:d0:bf:2b:ae:ff:ed:7c:38:d4:5a:8d:3a:c6:8f:5d:14:cf:
1a:c3:51:2e:99:9d:f8:6a:c5:4b:a2:13:24:66:34:29:a0:79:
27:95:20:89:9a:30:85:1f:d7:96:21:7f:38:9b:94:a2:21:e2:
7b:73:8f:86:ae:0a:03:bb:cc:f6:a1:7f:f8:3e:1e:c8:05:5b:
a5:65:93:bd:69:c9:a3:fa:40:8c:a2:e1:6a:d1:fd:aa:06:59:
d0:2f:60:88:b7:43:a6:6c:5e:2f:9c:d9:b9:73:7b:99:3f:1e:
2a:04:93:8f:ce:d7:b1:51:1c:8a:08:ae:53:59:35:4d:a7:b7:
66:85:8f:e9:6c:a3:4c:7b:e8:76:c0:6f:64:41:33:55:a7:96:
ae:91:33:eb:ef:c0:56:6f:13:ed:23:90:12:2a:08:a7:a0:f9:
b6:ef:1c:59:11:32:03:22:f7:e8:61:9c:11:e0:86:a6:75:61:
60:b7:66:32:61:a1:a6:6d:71:76:8b:34:9b:d3:e6:66:2c:7d:
56:ad:48:66:48:8e:a2:c3:c6:f9:ac:54:11:f9:81:46:59:58:
68:3b:4e:74
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUeEMxek5Z6orr1un4ug1KNOdphxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzRaFw0yNTEyMjYxMTQ3MzRaMDMxMTAvBgNV
BAMTKEI2OUMwOTU2Qjc3Rjc4Rjg4NUZCMTUwOUREMjdCMUM4OEU0RDYwNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxv5QDyp8pY4BMZx6LcDCzr83
Whg5nchM4+OvTAQgiWgCRhuke6zPmaTWgqXJ9J/iRzFYjSwzimcM0j+MTNaF+/Xp
sUhlN++ViiXQlM5/GruTPVKSQtRYX5HVC3gPsiF/FGiI0G6hO5iugYeR9VQTfbWe
HerELFtYWoEPXUkuDMXhVlrlcE6aclhyXOKVyjkN0c5mm3KkM6VbF1kh1pEomAYB
HpAWYMFP8snsc3IsNR5iNHWMPLmO6rthlX4zd2Ljmo1BpjPRH2TrxXmbtOHybLba
bClK9/gg8n7wSU8KvCalRqLhooWOKKdkDRgzyu8iSczwgYDNoqh0WyZwNW9RAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUtpwJVrd/ePiF+xUJ3SexyI5NYEQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTMxMzUz
NjJlMzIzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwpziMA0GCSqGSIb3DQEBCwUAA4IBAQB3b1nLSzahhoLM6dxh2OEb
R5nl7N44wmHbXj1Zsvm7KNm5BuH70L8rrv/tfDjUWo06xo9dFM8aw1EumZ34asVL
ohMkZjQpoHknlSCJmjCFH9eWIX84m5SiIeJ7c4+GrgoDu8z2oX/4Ph7IBVulZZO9
acmj+kCMouFq0f2qBlnQL2CIt0OmbF4vnNm5c3uZPx4qBJOPztexURyKCK5TWTVN
p7dmhY/pbKNMe+h2wG9kQTNVp5aukTPr78BWbxPtI5ASKginoPm27xxZETIDIvfo
YZwR4IamdWFgt2YyYaGmbXF2izSb0+ZmLH1WrUhmSI6iw8b5rFQR+YFGWVhoO050
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:12 2025 by rpki-client