Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
File: 3139342e33352e3132302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: rC09Z/VHJTc8YXnU5evo8kGQxuT5ZkZj5TmMEO+xGo0=
Subject key identifier: 98:90:52:41:19:35:54:FB:F6:11:21:AF:10:E6:F0:1F:C7:29:10:0F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6D2C612A525DB9CCC05082EEDDC1185903B80771
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:08 +0000
ROA not before: Fri 27 Dec 2024 11:42:08 +0000
ROA not after: Fri 26 Dec 2025 11:47:08 +0000
asID: 51167
IP address blocks: 194.35.120.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:2c:61:2a:52:5d:b9:cc:c0:50:82:ee:dd:c1:18:59:03:b8:07:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:08 2024 GMT
Not After : Dec 26 11:47:08 2025 GMT
Subject: CN=98905241193554FBF61121AF10E6F01FC729100F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:c6:f7:75:24:e7:58:17:de:a3:77:9f:60:
a3:c9:06:19:95:41:65:fe:bd:76:45:91:74:bb:19:
4e:da:f7:82:67:73:27:6a:1c:cf:70:54:62:22:da:
ff:3c:f6:53:60:cc:06:7d:f3:2c:2e:92:ae:18:7e:
4c:95:10:29:ce:9a:4e:78:c4:16:b5:c8:77:74:a7:
c8:8a:1a:0b:bc:d1:70:af:5f:73:6b:de:49:0c:eb:
56:ea:9f:ed:c6:e9:68:28:15:88:d6:b9:d0:54:8f:
5d:46:e2:5f:c9:3f:6a:67:4b:60:ab:d1:47:a8:5e:
52:0d:cd:4d:f9:b5:c0:26:92:bd:6a:73:41:75:ed:
f0:aa:28:4b:34:fa:73:36:71:18:f4:44:22:72:a7:
ad:a8:f7:75:b7:b5:78:04:e8:42:78:fb:7e:08:8b:
70:08:6a:fd:c9:a9:b5:3b:52:d0:a9:59:12:0f:6d:
86:e9:a5:45:b1:cf:10:69:05:9e:f6:89:52:62:e5:
4c:09:70:94:63:20:34:88:64:ee:bb:59:f4:6f:55:
85:58:b3:9e:ed:a0:bd:4c:e7:0b:0b:31:77:2d:9b:
2d:da:3f:c6:2e:1a:6e:5b:37:82:36:41:d9:02:b7:
41:b5:3d:ac:36:d2:98:a9:6d:2a:07:fe:42:71:c5:
79:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:52:41:19:35:54:FB:F6:11:21:AF:10:E6:F0:1F:C7:29:10:0F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1c:6f:db:9d:ce:03:e8:aa:f4:27:49:7f:ff:56:7f:d8:41:
40:df:ad:83:a8:be:ad:3c:9d:a9:9d:c7:62:e6:60:ce:5d:0e:
c4:46:39:2a:15:6a:b8:b8:52:1e:11:bf:97:6d:34:54:12:39:
cf:b6:9f:8c:81:43:f9:df:d8:27:cf:30:c0:7c:13:5b:b3:10:
56:5a:9a:2a:9e:38:56:e9:2f:0b:cc:a1:3f:44:19:26:42:95:
e9:ce:96:87:f3:4a:39:c5:00:60:00:fc:a9:0b:fd:e1:45:ca:
ba:d9:a8:d6:d4:f2:c3:e7:f4:20:42:3f:7d:3e:99:7e:64:1a:
08:55:9c:37:28:a4:c0:08:ab:8b:10:57:6e:68:ab:62:e2:09:
28:c9:b9:8c:aa:a1:f9:f7:a1:b9:4b:e4:96:bc:77:bd:f9:7d:
d0:bd:42:cc:84:ee:3f:ac:a5:bf:4d:2b:fa:c3:d3:00:3a:cb:
7c:19:07:a8:ad:e8:db:17:2c:9d:6e:42:6e:1a:ea:c5:ec:a3:
a5:48:d0:87:7e:27:c3:1e:6a:06:ca:49:85:04:6c:6b:21:b9:
32:75:9d:27:15:af:e4:40:06:45:c1:8a:fc:04:9c:b0:26:ce:
0f:f9:02:b1:4b:12:ec:2b:f5:7e:c3:f5:f8:3b:a4:6e:b2:63:
27:a0:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:06:56 2025 by rpki-client