Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e203631333137.roa
File: 3139342e36302e38372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: M80Imxc5ToNWur03lezkVZzbghc5IyPAzTxpuM6zDNk=
Subject key identifier: E3:9A:6B:EF:6A:FB:39:9D:C7:5C:1C:D0:D3:FF:C7:46:93:1F:51:2F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 315A676F09AFD0788A8CC88CE9FA77E7F90F8A6A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e203631333137.roa
Signing time: Fri 27 Dec 2024 11:47:25 +0000
ROA not before: Fri 27 Dec 2024 11:42:25 +0000
ROA not after: Fri 26 Dec 2025 11:47:25 +0000
asID: 61317
IP address blocks: 194.60.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5a:67:6f:09:af:d0:78:8a:8c:c8:8c:e9:fa:77:e7:f9:0f:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:25 2024 GMT
Not After : Dec 26 11:47:25 2025 GMT
Subject: CN=E39A6BEF6AFB399DC75C1CD0D3FFC746931F512F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:59:b1:55:24:d8:1c:3e:95:37:26:18:f0:53:
57:23:0c:5f:e9:4d:d9:c5:9d:36:c3:e5:c9:29:a1:
e3:12:48:90:eb:ea:d6:f0:5c:ca:91:ac:ff:99:fd:
08:4a:86:11:59:6e:83:c8:6d:4d:ba:1e:8f:c0:15:
b5:46:31:1b:67:b2:74:9c:02:c0:25:56:3c:bb:5d:
ec:68:77:1a:ad:19:50:ac:0e:57:89:1f:e4:44:06:
cd:5c:f8:92:1e:dc:1b:86:76:36:e3:34:0b:a5:08:
60:b5:57:68:d2:4e:d4:3d:6a:eb:93:b1:3e:3d:c2:
fa:36:68:ef:15:3b:fc:d6:68:e6:e5:9d:2c:da:46:
7a:9c:0f:af:ba:9a:72:ca:45:d1:1a:df:4b:31:6a:
c6:94:00:2e:e5:93:0f:d4:6e:a4:45:33:4f:d9:0b:
3a:cd:74:26:77:94:6c:9d:64:76:db:14:a5:dc:8c:
34:84:31:a6:7e:b7:e6:bc:72:62:94:82:d7:c9:4c:
b6:fe:05:94:9d:c5:5e:80:d8:2f:96:dd:e9:2f:94:
6d:91:92:95:a8:f2:b3:fd:d9:2f:12:3f:74:f3:11:
16:f3:73:91:2e:f5:5e:57:f3:8e:9e:4a:44:2f:4b:
91:c3:d4:c8:7e:2b:58:fb:79:64:ad:6e:f3:31:39:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:6B:EF:6A:FB:39:9D:C7:5C:1C:D0:D3:FF:C7:46:93:1F:51:2F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e36302e38372e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.87.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d5:6c:1f:6f:40:8a:76:04:18:11:6e:d6:67:e4:87:57:53:
7b:90:cd:dc:0c:65:58:fa:b4:81:8d:80:62:b4:1f:a6:3a:7b:
d3:b2:b1:1d:ed:bb:99:02:2c:d6:6b:ea:6a:e7:8c:f4:cb:6e:
f4:3d:5d:02:6f:cb:82:95:73:f8:05:da:da:d7:e1:2a:92:d1:
64:e1:fd:96:53:34:ad:58:5b:f9:30:8e:19:51:79:d6:a2:ae:
a6:4d:3c:87:2a:6a:c1:bd:54:09:97:78:18:3a:d1:3c:fb:cf:
a9:1b:70:4e:d8:68:8a:a1:1d:54:ee:e5:1e:7f:26:58:16:8c:
17:3c:f3:40:21:75:98:79:2f:09:eb:7c:aa:3b:16:91:59:aa:
e5:f1:9c:f0:e8:ca:8a:82:e4:49:9d:3a:9d:41:dc:e7:de:ea:
b2:33:86:67:ee:81:cb:e2:55:dc:7f:0b:e8:c3:cf:0f:8e:23:
8b:69:51:d7:0d:53:c4:31:0d:3e:2a:6f:e1:64:c8:1f:8b:09:
ff:1e:9a:25:c7:9a:cc:0b:e3:4a:43:4a:72:7f:39:4c:f1:49:
27:92:06:85:73:ab:61:fd:70:54:bb:54:a9:08:b2:9d:3b:b6:
f6:62:80:0e:7d:c7:3e:62:ac:61:6c:5e:ac:4a:cc:7b:6c:ef:
1a:f2:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:01 2025 by rpki-client