Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa
File: 3139342e36302e3230312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: esZ5LgkXYafug9103mAYzE/PIPCJJxiPzBm0agYa5FY=
Subject key identifier: 6A:AB:9B:9E:7F:1F:6A:F5:1B:62:66:70:F3:61:6F:BA:F5:D9:91:BD
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 78082F5A9AEC9300CABA2FDDF52FFFF69870B43F
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:08 +0000
ROA not before: Fri 27 Dec 2024 11:42:08 +0000
ROA not after: Fri 26 Dec 2025 11:47:08 +0000
asID: 51167
IP address blocks: 194.60.201.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:08:2f:5a:9a:ec:93:00:ca:ba:2f:dd:f5:2f:ff:f6:98:70:b4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:08 2024 GMT
Not After : Dec 26 11:47:08 2025 GMT
Subject: CN=6AAB9B9E7F1F6AF51B626670F3616FBAF5D991BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:c0:f4:d4:42:c5:73:f5:a1:29:b5:ab:b4:
34:73:39:43:ff:59:1b:c6:51:e8:bf:8f:47:f4:f7:
3c:74:24:c9:53:d6:99:40:7c:f6:dc:a1:f3:f4:71:
76:8c:48:7f:a7:6a:9d:ec:fd:fc:37:59:29:28:7f:
5f:c2:10:e4:7f:e8:2a:81:81:a3:02:9f:4d:d5:79:
a2:a9:54:27:19:97:b1:ac:cd:96:a4:0f:dd:27:93:
9a:84:81:d8:a5:d6:84:09:4f:5b:e4:bc:8e:6b:ae:
6d:92:2f:35:48:d2:b8:f9:41:4e:9d:32:55:f2:21:
e7:28:ad:a1:01:dc:f6:59:df:36:71:42:9f:1d:4d:
15:bb:dc:17:73:65:56:ab:be:fd:a1:67:a4:4b:14:
36:a2:68:16:73:4e:70:e9:b9:bf:03:d5:10:cf:ab:
ec:ed:e6:b0:42:60:9f:c5:5f:72:68:fb:83:01:0b:
c9:60:56:6e:3c:9c:fb:ad:95:7c:3c:53:ef:75:e4:
47:92:08:1d:6c:f8:b2:b4:5a:0e:9a:95:c5:c6:55:
31:0b:f4:52:fe:fb:17:77:72:ea:3f:62:ca:4a:01:
b1:c7:7e:66:03:e7:e3:eb:da:50:1d:60:d4:bf:fa:
2d:89:ba:93:bc:94:0e:c0:d0:51:1f:5f:f2:af:cf:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AB:9B:9E:7F:1F:6A:F5:1B:62:66:70:F3:61:6F:BA:F5:D9:91:BD
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e3230312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:23:c7:f5:f3:ee:2e:e9:62:16:79:cb:93:6b:86:51:13:8d:
30:31:59:13:15:7a:46:63:bb:dc:6c:8f:dd:09:8a:f6:e3:d5:
15:8d:59:a9:8f:c5:e4:c2:fb:0c:35:b3:18:25:c5:1f:bc:60:
da:10:cc:32:37:42:4f:07:12:24:d7:db:ca:c7:c9:8b:af:2e:
1d:ee:a6:5c:84:c2:0e:4c:75:2b:c9:82:e0:c9:93:fe:d5:35:
ab:69:9d:86:5a:c1:40:43:64:c0:ee:59:82:c5:04:8e:d6:e1:
5d:7b:31:17:c7:3a:a1:b8:89:41:11:f1:a8:18:5b:02:de:c5:
6a:01:2a:c4:9c:13:7b:45:fd:b5:cd:01:e9:36:2a:ca:36:43:
6d:2f:a8:ee:99:50:2f:4c:0e:3f:55:39:b1:97:47:57:12:11:
1e:01:12:47:30:d1:e4:bd:5e:57:ee:20:8c:f0:fa:07:df:b6:
b1:1d:39:9d:8f:ec:69:fe:e8:6d:5c:8a:eb:66:f6:ac:fa:25:
da:44:0d:23:24:40:72:42:b3:9d:e5:d5:56:e3:a2:ff:12:ed:
0d:28:ba:c7:94:3e:07:93:f3:92:36:24:f5:b0:37:2b:47:91:
e7:8e:e9:dd:e6:19:92:ea:11:80:93:29:52:24:5d:a0:e7:06:
e8:32:73:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:15:42 2025 by rpki-client