Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203430303231.roa
File: 3139342e36302e38362e302f32342d3234203d3e203430303231.roa (raw, json)
Hash identifier: u4ysxL6t6NrjDQoAu1g1lhx4gisQ9utm4JkN95dKKCY=
Subject key identifier: F6:B7:90:50:21:BE:DB:C5:AE:56:03:0E:C8:21:40:79:04:91:EA:EE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7D07F753A4383BDA7476017AAF1293E21BE8E4A5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203430303231.roa
Signing time: Mon 24 Feb 2025 10:34:18 +0000
ROA not before: Mon 24 Feb 2025 10:29:18 +0000
ROA not after: Mon 23 Feb 2026 10:34:18 +0000
asID: 40021
IP address blocks: 194.60.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:07:f7:53:a4:38:3b:da:74:76:01:7a:af:12:93:e2:1b:e8:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Feb 24 10:29:18 2025 GMT
Not After : Feb 23 10:34:18 2026 GMT
Subject: CN=F6B7905021BEDBC5AE56030EC82140790491EAEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:db:3f:37:7b:6c:9a:44:c1:d4:0d:5e:f8:
d7:e2:12:48:1e:70:0a:4a:66:48:c2:3d:8b:e1:a6:
5e:1e:74:ca:49:50:e9:31:d6:9b:ce:45:cf:61:7b:
5c:fe:38:ab:50:18:b1:62:d6:8d:c5:47:44:69:a0:
bc:d5:fc:cc:5c:8c:cf:f0:2d:6d:43:21:46:b2:25:
77:2a:84:cb:b5:34:43:68:ca:11:dd:65:9b:7b:72:
ce:84:74:0b:fd:4d:a2:9a:97:09:24:ce:e7:04:be:
60:98:ea:d4:de:0c:d7:c3:2f:e3:0e:6c:c4:bb:b7:
82:05:97:1e:3a:2e:46:07:e8:c0:80:35:52:90:93:
28:e0:06:74:01:03:0b:f5:73:79:a3:a5:f8:4c:d4:
9e:35:b4:d0:89:27:05:19:f3:2e:0e:1c:bd:7c:69:
bd:ae:dc:51:95:a3:e1:7b:cf:44:2a:ea:7b:2f:f2:
d8:30:6e:24:5f:e4:41:c8:a7:40:ae:c7:83:08:8a:
32:19:58:fb:e7:ce:1a:ba:9e:80:b0:90:88:10:61:
80:f4:80:c8:66:4b:62:0c:6d:4a:a5:82:b8:89:bd:
5a:14:c6:13:f3:ba:2a:7f:ed:93:11:7d:0a:98:33:
0d:1f:73:e0:ab:0c:11:fb:3e:b9:dc:2b:ef:11:c3:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B7:90:50:21:BE:DB:C5:AE:56:03:0E:C8:21:40:79:04:91:EA:EE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38362e302f32342d3234203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.86.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d2:05:f2:e3:83:03:30:36:09:a9:2b:30:3e:22:58:51:b9:
16:d1:7e:db:58:34:cc:bb:58:c4:06:05:e4:7c:da:96:14:30:
18:cd:c3:b2:b0:72:91:22:53:05:d6:10:79:b7:6d:09:2c:3c:
75:54:d0:9f:62:ac:43:93:04:5b:e9:b4:da:a6:cc:5b:bc:04:
54:fd:a8:72:04:dd:6a:1a:2a:a3:8d:5c:43:9b:f9:86:c5:70:
7e:ba:1b:97:ea:80:66:8e:89:c2:72:91:9a:87:ab:5f:1f:da:
c1:b8:66:05:fb:14:a5:92:fc:0f:64:ef:9a:23:6f:58:5c:ed:
3b:77:eb:5f:b3:4a:0a:e2:d0:b9:f0:4f:6e:fb:d2:51:50:09:
bc:d8:64:2a:dd:27:8d:16:3a:05:de:20:c3:3a:30:22:e5:5a:
69:25:3a:4c:15:97:56:fb:fb:5b:80:7d:83:ec:73:6e:31:7a:
c7:8a:78:e1:fe:a2:9a:eb:6c:72:7d:60:69:a2:a3:9a:9b:5c:
a5:6b:3b:20:66:c5:5b:41:f3:0a:76:97:1d:f6:8f:15:e1:bb:
3a:c9:ff:58:54:ed:57:30:48:bb:b2:0f:2d:8d:33:26:a5:d7:
8b:ee:4d:83:ca:e9:9c:94:99:d9:97:75:32:1c:9d:3b:1b:b6:
d0:3f:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:55 2025 by rpki-client