Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa
File: 3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: yAG48A3qCmbcpA84LRs+y92bQXw7vMPru33HTaFybfw=
Subject key identifier: 88:EC:1E:E3:68:9B:EC:10:AE:90:64:BD:E6:28:D2:54:13:5F:C1:9A
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4A182FF7D6D8910139CD682FCEF80632D5640131
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 136787
IP address blocks: 194.59.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:18:2f:f7:d6:d8:91:01:39:cd:68:2f:ce:f8:06:32:d5:64:01:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=88EC1EE3689BEC10AE9064BDE628D254135FC19A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:fa:19:33:3b:dc:84:e2:b9:19:c1:54:2c:
2d:f7:27:79:a7:45:98:37:cc:b7:e7:95:ee:34:7e:
74:d5:cf:01:a3:59:69:6c:1b:42:ca:bc:67:0e:88:
c9:8e:42:65:39:9b:1d:13:9d:6e:a8:c3:ed:80:d5:
1b:a5:06:07:6f:ed:a0:5d:74:96:c4:50:52:fb:a8:
99:9d:5c:47:3c:0f:f7:6d:2b:f9:31:9c:0e:cf:cc:
4f:d7:f6:d2:d5:c3:b6:96:7b:98:d7:90:70:38:89:
67:3e:1c:da:a3:9d:6b:08:6c:68:38:b0:86:9a:ec:
8f:04:55:8c:b1:5a:19:8a:44:d9:ab:1d:9e:5c:14:
52:d2:de:a1:e5:e5:d4:51:49:4e:39:e8:dc:a4:30:
47:34:d6:e4:df:4a:5b:d1:6d:f1:f1:eb:07:05:d9:
83:77:98:ed:cb:ef:6a:30:40:b6:59:86:d9:44:05:
dc:66:a3:5c:f2:43:56:79:fc:35:b7:a9:8c:27:15:
5f:17:1f:40:02:8a:ec:28:f9:b4:fa:21:3b:61:37:
32:79:ff:f6:9f:a0:3e:12:e7:6c:7d:60:73:46:0d:
c8:94:e1:a3:50:f7:dd:c4:54:c6:c0:25:58:01:88:
34:dc:32:eb:15:a5:73:94:9c:aa:56:b1:62:97:0f:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:1E:E3:68:9B:EC:10:AE:90:64:BD:E6:28:D2:54:13:5F:C1:9A
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e35392e3235342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:84:98:7c:f6:ce:4b:53:ad:8b:3e:39:92:4f:e7:91:3f:45:
ad:59:94:25:1c:e4:41:44:fa:d9:82:b1:a3:1c:96:21:16:88:
0b:08:77:33:c8:27:9d:40:1f:d1:54:c1:c5:1a:f2:1d:25:47:
0c:32:6b:50:b1:a8:be:bc:f5:85:e5:08:5f:31:39:54:35:5a:
33:67:bd:6d:e8:a7:66:e1:a0:c4:ef:b1:50:5c:c1:95:b3:a5:
4e:ea:1b:e4:38:fa:72:57:04:99:e7:51:93:0d:5e:ad:ef:3c:
6e:20:4d:8d:ce:db:06:71:85:8b:c4:77:e5:87:fa:05:73:2a:
b8:09:d2:ad:fc:17:fa:0b:cd:40:7d:a4:25:96:39:f6:6a:4c:
79:35:5e:a5:00:bf:86:9a:cc:b9:f8:74:1a:34:67:dc:b5:22:
4e:74:c7:6e:c8:2e:e8:e1:69:22:98:73:1f:15:68:1c:52:de:
43:b2:63:53:a2:68:24:9c:40:1e:08:b9:bb:8c:91:67:1a:9e:
36:03:45:81:60:b0:f5:a5:7f:e3:b1:54:2f:20:d5:58:89:38:
20:2a:d3:e5:d7:68:29:2b:03:8a:c5:57:df:9e:6d:65:79:4c:
5f:13:da:22:7a:ad:d4:12:46:0f:ae:27:33:91:69:70:e2:1e:
55:f0:4c:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 15:54:44 2025 by rpki-client