Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33362e302f32342d3234203d3e20313336373837.roa
File: 322e35382e33362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: NZSGfr7PKf1CWXIxC9YXRiKnXYajDfgJ9nhaIPL9DYI=
Subject key identifier: 04:8C:11:83:D8:C5:0C:C1:F4:94:EA:C3:D9:9F:08:7C:7D:93:1B:54
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 36516AA508BDF9B3C58B92A9AF21EF6D2496DFA5
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:33 +0000
ROA not before: Fri 27 Dec 2024 11:42:33 +0000
ROA not after: Fri 26 Dec 2025 11:47:33 +0000
asID: 136787
IP address blocks: 2.58.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:51:6a:a5:08:bd:f9:b3:c5:8b:92:a9:af:21:ef:6d:24:96:df:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:33 2024 GMT
Not After : Dec 26 11:47:33 2025 GMT
Subject: CN=048C1183D8C50CC1F494EAC3D99F087C7D931B54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:ce:75:44:b0:99:b0:71:29:e9:e6:ef:90:
66:70:ce:92:65:7f:fe:2d:a0:f1:89:ff:6f:7e:8c:
e0:92:df:db:d8:34:12:89:a2:d9:e0:01:7d:86:19:
8e:08:d2:53:4c:32:5c:61:cf:26:a5:5e:42:91:a1:
88:4d:72:d1:de:e3:5f:74:18:83:4b:a5:5a:49:72:
8b:7d:ff:58:5b:d7:7e:84:75:17:7d:7e:b3:b6:64:
9c:77:9f:b1:8b:38:ca:c8:a9:f5:f3:98:f1:bb:84:
f7:12:f0:c7:6f:28:81:f6:d1:71:b9:02:f8:18:3a:
f8:9c:d7:85:c6:35:c7:7e:9e:95:12:af:5a:ea:35:
6a:5e:84:e3:21:f3:3f:e1:67:39:1b:a9:3d:a4:4a:
f3:ad:cf:37:93:ed:56:f8:cf:46:f8:a2:2e:6d:0e:
c2:df:a8:0f:8c:03:50:bc:c6:a7:b0:70:f8:e6:45:
3b:a8:cf:a9:d9:64:81:95:bc:29:21:3e:5e:57:34:
cb:53:61:a3:58:70:ce:10:36:3d:3d:98:76:72:4b:
9a:7a:5a:e9:d8:3a:bd:b8:dc:a6:27:dd:9b:67:4c:
35:50:9d:2f:70:fd:5f:b0:de:fa:84:96:28:4d:97:
f3:8a:59:6a:60:be:48:43:a9:a3:1f:b5:0c:83:9f:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:11:83:D8:C5:0C:C1:F4:94:EA:C3:D9:9F:08:7C:7D:93:1B:54
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.36.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4b:7e:e0:f2:e1:b0:de:da:2b:ae:94:7b:73:1d:b2:31:79:
b8:45:45:2d:ec:80:58:7d:09:1e:75:80:0a:58:89:43:2b:7d:
62:66:0e:1b:d7:8d:f5:4a:83:03:e0:2a:e1:e2:5e:e7:7e:d4:
5e:4b:7d:e5:b8:87:d4:e5:e6:a8:2b:9b:dd:c8:0d:40:09:66:
65:e7:e3:f2:cb:fd:c9:ff:f5:c5:01:25:00:85:ce:c6:07:31:
15:eb:0c:e2:1f:8b:95:95:c7:40:08:05:cb:ad:7e:b4:cc:c0:
cf:76:74:b6:4f:ab:f2:78:f3:f2:44:b4:49:cd:6a:ae:a5:c7:
88:54:05:aa:82:c2:09:09:4f:d1:b9:fc:45:13:33:0c:77:8a:
7d:a9:6f:48:8d:ae:aa:19:bc:36:a9:ae:6f:d5:40:ae:88:cf:
67:7d:b6:c6:a3:3c:d1:da:35:60:f8:e8:5b:d2:a7:5c:bc:ab:
72:19:87:88:92:8f:4f:c7:9d:8f:5e:9b:0d:70:b8:7a:4b:83:
3f:15:36:c5:c1:26:4c:f1:eb:67:27:72:ea:06:62:c7:c0:4f:
12:c9:38:32:4d:78:e7:79:b6:bb:7a:be:79:85:96:9d:ec:50:
aa:ef:d1:8c:74:0e:98:79:1b:09:5e:75:2c:0c:b2:ac:29:15:
94:e0:ef:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:56:41 2025 by rpki-client