Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa
File: 3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: AhzwvMfEEGng0cd3pf+GWm83ZEj9RzhosVDb6FVWn2E=
Subject key identifier: DF:F7:68:38:7D:C0:F2:79:FC:6D:5C:C0:5C:B4:C1:8D:6E:CC:1D:B0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0D092F3D73EDDD0C651DB680BC5AC1792F565CF3
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:26 +0000
ROA not before: Fri 20 Dec 2024 15:18:26 +0000
ROA not after: Fri 19 Dec 2025 15:23:26 +0000
asID: 136787
IP address blocks: 194.180.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:09:2f:3d:73:ed:dd:0c:65:1d:b6:80:bc:5a:c1:79:2f:56:5c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:26 2024 GMT
Not After : Dec 19 15:23:26 2025 GMT
Subject: CN=DFF768387DC0F279FC6D5CC05CB4C18D6ECC1DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:5b:3d:7c:63:9d:c5:55:bc:ef:c8:a3:fa:
f7:c7:db:f4:5e:45:4b:c2:a3:f8:a0:57:d1:58:0b:
60:48:a5:7f:f9:03:e3:6d:91:c0:81:4a:95:c1:e2:
cb:ad:6c:21:f3:2f:1f:ac:19:a2:6c:29:d7:72:ff:
df:c7:dc:92:55:1a:f0:14:a7:ca:de:aa:57:8a:4a:
e6:fe:95:32:2f:56:17:02:73:19:fe:69:ad:42:1c:
19:8b:85:df:6b:f7:72:89:33:82:96:3c:f6:3f:c4:
3f:08:07:a8:3d:ab:13:08:73:52:fa:6b:06:09:e2:
7b:2c:64:aa:5a:ed:59:fd:3f:a9:33:8e:e7:c7:c5:
97:5c:60:b6:34:95:4a:1c:ca:27:7e:39:96:26:0d:
f3:c7:8e:b8:37:95:d0:fa:11:56:9a:4e:25:c2:f3:
43:06:16:96:9e:84:60:7b:a6:7b:ad:38:d4:37:28:
42:27:4f:eb:8a:66:d8:5b:d1:44:56:8f:df:f6:8b:
34:da:af:e7:27:7c:c2:e5:41:7f:5b:7d:83:bd:10:
6e:c0:3c:3b:bf:36:1c:cd:55:69:91:db:5c:27:fd:
56:41:09:d8:55:43:eb:12:56:59:45:ca:1a:52:e2:
72:34:3c:f8:43:ed:fd:44:83:c5:6f:14:95:ab:ab:
57:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:68:38:7D:C0:F2:79:FC:6D:5C:C0:5C:B4:C1:8D:6E:CC:1D:B0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3138302e3137382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.178.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4f:5d:fb:4a:2d:5b:b3:b2:6e:c6:e8:fe:21:88:6a:78:dd:
cd:4c:50:5f:5c:17:f9:b8:32:00:fb:7e:4b:9e:db:2a:87:a3:
e7:6a:6b:74:11:69:11:82:7c:6c:ba:c5:03:0e:9f:73:bc:33:
31:8c:73:c5:79:0b:70:7c:37:4d:d8:9c:c7:f8:e3:31:44:4b:
1e:9e:18:f6:e6:59:b8:1a:0f:1c:86:32:bc:6a:6c:00:bc:f6:
0b:5b:e0:b6:57:b9:59:67:3c:8e:b7:d2:bc:bb:4a:90:6e:f9:
70:67:a4:d9:28:a1:7b:b9:70:cd:66:e1:df:18:ed:0c:e8:2c:
74:dd:95:61:84:d0:c6:5f:01:6a:63:79:e9:1e:c5:0b:a1:94:
df:94:05:5b:40:1a:a5:b6:e1:5c:b0:2d:f7:be:8c:e3:a9:1d:
ef:22:0b:b3:56:94:3a:73:38:f7:65:65:8b:b8:51:2c:ed:ba:
a1:33:23:7d:7c:08:60:c8:b7:11:ac:f4:5f:2e:53:22:93:83:
61:02:8a:31:7a:aa:1d:53:86:30:a2:e7:e0:fc:33:f6:bd:a0:
c5:84:a8:50:1a:05:52:83:70:a4:16:6c:80:8a:de:ed:f1:72:
1e:70:0c:49:6c:6b:6d:93:1c:b0:cb:66:c7:8a:ba:de:b5:da:
ed:5d:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:23:45 2025 by rpki-client