Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
File: 3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: LuBjjNhT9Gfmrk2/zRZlseeeoj0KxgtynxBkNJxF+vU=
Subject key identifier: AA:91:C0:CB:D3:10:1C:54:7C:8B:DF:A2:9D:E3:A8:C7:09:15:E5:E8
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 150D79685382E277C77A2328E55C52E2A9046C2F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:37 +0000
ROA not before: Fri 20 Dec 2024 15:18:37 +0000
ROA not after: Fri 19 Dec 2025 15:23:37 +0000
asID: 51167
IP address blocks: 194.180.176.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0d:79:68:53:82:e2:77:c7:7a:23:28:e5:5c:52:e2:a9:04:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:37 2024 GMT
Not After : Dec 19 15:23:37 2025 GMT
Subject: CN=AA91C0CBD3101C547C8BDFA29DE3A8C70915E5E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:13:c7:f4:b3:ce:df:6a:3c:22:be:78:8b:
7f:27:a1:15:a4:68:51:95:3a:92:0a:db:7f:55:1b:
e9:45:09:66:90:19:71:0c:4b:59:a6:7c:0a:f0:ac:
a6:fb:58:a9:98:7f:39:55:40:f9:34:23:12:b6:71:
69:7b:a8:8b:48:cd:be:e4:49:e4:3e:77:0d:51:ca:
2d:8a:4e:62:c3:43:31:d5:79:dd:af:5a:57:7e:4e:
00:77:59:3d:af:21:0f:b2:a7:3b:7f:d8:bc:9e:e4:
fb:6b:b4:a7:f2:ee:56:bf:db:3f:f9:f9:ef:e6:3b:
08:66:05:0e:9e:e4:14:7c:f3:77:c0:5e:c3:a0:59:
d9:ae:cd:65:ca:e5:05:6c:bc:91:01:20:81:ed:20:
2c:3a:6b:6b:d5:cd:18:3d:d0:9e:ce:1a:32:ec:69:
82:8f:ec:2c:fd:bd:cf:52:c4:c3:6d:1e:dd:a9:d1:
50:ec:76:28:fd:76:96:19:0a:27:69:7e:09:19:0e:
6d:31:8e:dc:78:53:df:e8:a5:19:88:5f:aa:3d:ea:
5f:03:5e:22:85:af:2c:93:ee:08:93:8f:1b:b2:15:
d7:64:c8:31:49:30:bd:33:df:e4:62:89:08:51:5f:
83:44:0c:0e:9c:8d:4e:8c:7a:3b:3c:f8:0f:52:85:
ae:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:C0:CB:D3:10:1C:54:7C:8B:DF:A2:9D:E3:A8:C7:09:15:E5:E8
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.176.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:90:87:f3:1d:a5:3e:29:62:e8:c6:95:09:7c:a8:f8:f7:40:
f8:10:09:db:c4:17:16:94:19:d2:cf:60:01:3b:80:6c:d3:2b:
9c:1f:e7:ca:10:9e:63:26:67:28:3d:b7:75:47:d1:6b:a2:74:
7b:a4:8f:76:f0:fa:9e:43:a3:a2:41:2f:7b:d0:73:55:0f:57:
f3:84:d3:f0:57:75:69:8c:65:5e:b7:0e:93:e2:39:61:18:7d:
c4:31:70:1c:75:c1:cd:66:ff:b6:4c:a3:99:64:8e:0e:d9:b6:
28:3e:b0:22:7c:42:0c:da:a0:25:bf:90:6e:43:80:1c:7d:90:
a0:e8:0c:d7:f4:5f:1a:83:70:73:85:1d:a7:23:6e:00:18:92:
36:b0:c9:c6:88:0f:2e:ae:35:92:87:0d:ed:32:01:4a:4e:2b:
e3:f1:34:90:65:34:3f:01:cd:d4:d5:25:f1:2d:a3:43:e8:a6:
7f:30:0a:19:fd:71:d0:cc:83:2f:67:7f:14:5b:31:fa:f2:c4:
90:7e:72:f4:f1:4a:5a:7c:85:d3:3f:36:57:02:0e:c7:2d:70:
2d:aa:c6:04:dd:e7:5f:a2:88:92:05:19:f5:c2:8a:12:21:a8:
15:02:de:ed:7f:a6:6c:c7:3f:b4:ec:c1:66:63:04:a7:13:ab:
01:c6:1c:ff
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 05:14:45 2025 by rpki-client