Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
File: 3139342e3234322e35362e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: tSf9xCKcDp0ZBG5oQqDOybI0ujpM4qi9tT28HOE6Q5w=
Subject key identifier: 2F:17:52:DD:33:BD:ED:34:E2:5F:66:C5:30:5F:72:F9:9A:23:7E:0A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 07784E3378D9DCED994C1FA2453B2F79A314A1B1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:30 +0000
ROA not before: Fri 27 Dec 2024 11:42:30 +0000
ROA not after: Fri 26 Dec 2025 11:47:30 +0000
asID: 51167
IP address blocks: 194.242.56.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:78:4e:33:78:d9:dc:ed:99:4c:1f:a2:45:3b:2f:79:a3:14:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:30 2024 GMT
Not After : Dec 26 11:47:30 2025 GMT
Subject: CN=2F1752DD33BDED34E25F66C5305F72F99A237E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:84:f6:4c:7f:89:b1:04:a8:fb:7e:e6:d5:
69:15:60:c7:8b:f3:dd:15:27:90:a7:30:6a:95:bc:
da:25:4c:9e:f7:74:8f:aa:1f:58:81:81:76:27:90:
44:41:bc:14:74:a7:10:5b:2c:20:ad:b5:43:3d:6a:
06:d9:98:ee:dc:32:c2:e9:54:a3:0e:ce:f3:5b:7e:
0e:13:67:a8:9b:a2:26:59:d4:ed:76:00:bf:84:88:
65:67:5d:e3:b5:ed:99:21:f5:62:97:be:fb:0d:f2:
19:cb:67:91:bb:14:9f:a9:6f:5e:8d:6f:50:5a:01:
d2:5e:a7:5f:ee:d1:bf:7f:1d:27:0c:d5:ef:05:d2:
86:a1:90:5f:f5:a6:db:d5:85:58:01:0c:b7:10:ed:
48:96:ed:e8:50:ef:0d:0a:9f:01:6d:87:9e:34:a7:
96:ba:23:fb:a2:d3:68:67:dd:75:ae:a7:84:35:14:
f7:6b:46:f9:2f:89:82:f1:a6:bc:40:8d:33:91:79:
84:a5:8e:a0:95:03:2b:3a:b1:f7:4c:63:b9:aa:1c:
52:06:3a:19:66:f1:37:5f:1b:74:bc:77:14:f8:d6:
93:75:97:fc:93:c8:88:18:4f:9b:4a:ca:2e:84:7e:
97:77:b7:78:73:18:65:b0:ba:50:7a:0b:b4:73:16:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:17:52:DD:33:BD:ED:34:E2:5F:66:C5:30:5F:72:F9:9A:23:7E:0A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3234322e35362e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.56.0/24
Signature Algorithm: sha256WithRSAEncryption
36:10:75:ba:f6:c3:c5:bc:24:d1:14:10:5b:49:43:37:3d:cd:
74:f1:e5:78:32:43:db:76:f4:13:78:c0:45:33:5b:a4:2e:74:
c1:c8:cc:84:67:08:50:51:f2:76:27:5f:8a:7a:dd:0f:11:8c:
7f:3a:48:aa:f2:e6:20:93:20:57:1d:4b:51:a2:27:c5:bc:52:
35:18:0e:be:02:67:96:b4:c9:1d:0f:a9:4e:57:38:df:cf:0f:
b4:e5:44:51:6b:9f:2e:c5:38:c2:96:fa:61:ad:e6:b1:1e:37:
f5:5f:4a:7e:3a:52:23:22:75:b3:1f:c1:0d:d5:9f:61:8a:9d:
1a:96:8f:85:ea:90:e2:07:18:95:2f:7a:2d:9d:8f:b7:a1:bb:
a8:84:ad:ff:5c:69:f0:c2:ba:6f:6d:04:9b:b1:03:74:01:54:
bb:e3:d5:ef:5a:82:cf:bd:c2:95:98:84:36:e7:ad:f3:60:58:
f1:b8:57:62:27:a7:31:5e:7d:c0:76:79:27:7e:c5:e3:37:bb:
50:94:fc:b4:65:a0:73:90:76:a0:a6:4e:cc:3e:5c:ad:07:2f:
53:e3:21:e7:2c:d2:5b:cc:46:07:57:f7:9c:13:2b:9d:4d:a8:
95:c6:2a:ee:5e:79:7a:5b:dc:64:17:36:8a:8c:d3:52:31:b7:
bf:55:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:13:56 2025 by rpki-client