Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 10NTR27WnTHGTeQZOmMrIkR8cecVB2G0Vroj3wLPtF4=
Subject key identifier: 80:4A:63:C6:A5:EB:E3:4C:B7:41:53:19:0F:B5:17:A2:A4:90:F0:DD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 021FEC11CD350258C0312EC7354D37094D082AEC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:25 +0000
ROA not before: Fri 20 Dec 2024 15:18:25 +0000
ROA not after: Fri 19 Dec 2025 15:23:25 +0000
asID: 136787
IP address blocks: 194.53.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1f:ec:11:cd:35:02:58:c0:31:2e:c7:35:4d:37:09:4d:08:2a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:25 2024 GMT
Not After : Dec 19 15:23:25 2025 GMT
Subject: CN=804A63C6A5EBE34CB74153190FB517A2A490F0DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:10:06:fc:0c:ff:45:f0:d3:af:5a:c6:68:
40:72:49:d1:a1:e8:32:9c:53:94:21:00:c5:a1:35:
c3:a9:e4:e9:7e:dd:2d:9f:3c:dc:32:d2:d6:3e:c7:
3c:90:f6:48:06:36:2f:fd:b4:39:f4:8d:6d:05:23:
17:28:64:ae:b4:3d:ea:83:a4:61:b4:d3:a8:9f:78:
ce:6d:0a:14:89:49:74:78:f7:72:f6:c7:bb:8f:38:
9e:92:58:e6:1b:b8:6c:e0:58:f9:73:06:bf:70:8e:
14:95:79:a2:de:9a:99:80:22:1b:cc:a9:b5:1a:ce:
ee:75:ab:4c:c4:7c:bf:75:2f:b4:08:9e:3b:f4:54:
f5:1a:17:41:34:d0:2a:d1:07:cd:36:b7:99:4f:45:
36:a0:d9:3b:14:3a:f2:1f:56:2a:d3:12:34:0c:0e:
ad:9d:47:dd:de:3d:d0:12:76:22:b2:c2:91:18:e2:
71:a2:7f:29:c7:f4:d6:05:14:b5:1a:3c:15:9e:78:
6a:34:ea:b5:7d:2c:77:fe:5e:01:22:22:42:05:64:
d9:b4:d3:48:f9:8a:04:5e:08:8b:bc:e8:2b:52:61:
cb:9d:c2:05:72:32:06:9a:a0:0c:2d:cf:2e:bb:e3:
db:00:4e:a5:3a:a8:c9:bd:24:11:8e:70:76:36:cb:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4A:63:C6:A5:EB:E3:4C:B7:41:53:19:0F:B5:17:A2:A4:90:F0:DD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.108.0/24
Signature Algorithm: sha256WithRSAEncryption
97:38:13:22:0d:12:74:94:9c:ca:01:b3:e8:32:6e:01:ea:9b:
68:0a:48:47:52:56:21:e9:0c:a2:98:c6:7a:c1:5a:bf:d5:9b:
2d:79:3d:02:6f:24:c9:d1:16:69:87:39:a7:5a:6f:dd:e4:a0:
ad:73:34:b1:21:28:8d:72:07:e8:7c:ed:ac:de:27:62:06:9a:
43:fd:65:b9:bb:d7:60:84:eb:a0:ac:21:68:0e:68:b9:cb:0f:
cf:16:d2:29:80:fc:ce:cb:54:23:10:07:3c:43:bb:ed:01:db:
4c:3a:0c:08:ad:96:af:01:7d:9d:15:ff:af:0b:48:6c:76:40:
a3:cb:17:77:44:91:47:93:b3:24:b7:6a:3f:8e:34:6a:6d:35:
39:1b:93:18:46:07:c0:e8:6e:1f:b5:5d:ad:b9:d7:ff:86:b0:
61:04:3a:f3:32:7b:df:cd:64:e6:00:44:f0:29:83:b9:f6:21:
7d:8c:dc:e4:16:18:1e:6c:ce:59:98:e5:44:f0:cb:3f:49:1a:
3b:bd:f5:f0:24:dd:f3:fa:2f:4e:5e:7e:cf:0f:f7:4a:40:5b:
9b:9b:c6:5c:9a:25:82:b1:0e:cf:f4:95:7f:15:3a:b3:65:c1:
45:c1:36:30:c9:fb:17:d6:4f:1d:29:3a:ac:cf:b9:a7:09:66:
da:5a:67:83
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUAh/sEc01AljAMS7HNU03CU0IKuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjAxNTE4MjVaFw0yNTEyMTkxNTIzMjVaMDMxMTAvBgNV
BAMTKDgwNEE2M0M2QTVFQkUzNENCNzQxNTMxOTBGQjUxN0EyQTQ5MEYwREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7xAG/Az/RfDTr1rGaEBySdGh
6DKcU5QhAMWhNcOp5Ol+3S2fPNwy0tY+xzyQ9kgGNi/9tDn0jW0FIxcoZK60PeqD
pGG006ifeM5tChSJSXR493L2x7uPOJ6SWOYbuGzgWPlzBr9wjhSVeaLempmAIhvM
qbUazu51q0zEfL91L7QInjv0VPUaF0E00CrRB802t5lPRTag2TsUOvIfVirTEjQM
Dq2dR93ePdASdiKywpEY4nGifynH9NYFFLUaPBWeeGo06rV9LHf+XgEiIkIFZNm0
00j5igReCIu86CtSYcudwgVyMgaaoAwtzy6749sATqU6qMm9JBGOcHY2y30FAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUgEpjxqXr40y3QVMZD7UXoqSQ8N0wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzQyZTM1MzMy
ZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAMI1bDANBgkqhkiG9w0BAQsFAAOCAQEAlzgTIg0SdJScygGz6DJuAeqb
aApIR1JWIekMopjGesFav9WbLXk9Am8kydEWaYc5p1pv3eSgrXM0sSEojXIH6Hzt
rN4nYgaaQ/1lubvXYITroKwhaA5oucsPzxbSKYD8zstUIxAHPEO77QHbTDoMCK2W
rwF9nRX/rwtIbHZAo8sXd0SRR5OzJLdqP440am01ORuTGEYHwOhuH7VdrbnX/4aw
YQQ68zJ7381k5gBE8CmDufYhfYzc5BYYHmzOWZjlRPDLP0kaO7318CTd8/ovTl5+
zw/3SkBbm5vGXJolgrEOz/SVfxU6s2XBRcE2MMn7F9ZPHSk6rM+5pwlm2lpngw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:50 2025 by rpki-client