Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37332e302f32342d3234203d3e203632323430.roa
File: 322e35382e37332e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: pGBOPuJDveAlv6cb/MgTrb3tOo9V1WrQHYynK5uYBxU=
Subject key identifier: C5:B3:28:95:90:90:7E:0B:13:42:39:22:E5:57:5D:6B:6E:FE:44:BB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 057042EE26757BB8C7F816BD37CB804D30A297F1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37332e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:32 +0000
ROA not before: Fri 27 Dec 2024 11:42:32 +0000
ROA not after: Fri 26 Dec 2025 11:47:32 +0000
asID: 62240
IP address blocks: 2.58.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:70:42:ee:26:75:7b:b8:c7:f8:16:bd:37:cb:80:4d:30:a2:97:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:32 2024 GMT
Not After : Dec 26 11:47:32 2025 GMT
Subject: CN=C5B3289590907E0B13423922E5575D6B6EFE44BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:21:55:c4:89:7e:9f:b4:ea:3b:a7:19:f1:9c:
a2:03:e3:63:7f:ed:b3:9c:a5:b1:a9:20:b5:04:9f:
b3:d2:0f:25:6f:22:a6:60:a8:c3:c8:0e:de:a4:fc:
96:f3:35:6c:a5:e6:82:fa:a6:4f:f4:7c:e0:aa:8a:
81:58:da:99:8c:27:bb:82:c8:46:33:dc:58:58:52:
18:76:57:42:7f:8a:60:79:32:0c:6a:62:a4:c6:da:
10:b1:e1:ba:91:c0:dc:cb:4f:76:d0:a3:d7:d1:89:
96:e5:55:4d:03:6c:fc:6e:c5:73:f3:fb:c3:2e:fb:
0f:f7:44:d8:e8:13:95:96:f0:5d:0b:be:c0:e6:58:
45:be:c7:82:80:9e:cc:5b:58:31:ff:fe:8a:f5:e1:
a5:91:d0:7c:24:65:b1:75:c7:e1:a3:4e:79:a5:00:
fa:c8:fe:3c:c7:7f:f2:6a:22:3b:a3:9d:48:c0:e2:
6c:be:d5:46:5d:c5:48:3c:c1:52:7d:1a:a0:e7:cf:
46:40:41:49:67:c1:ab:e9:ee:8b:43:dc:6e:58:ce:
b1:66:5f:ec:e9:87:dd:71:41:cf:8f:49:92:bd:14:
09:62:53:3d:20:34:55:a3:8e:3e:37:8b:4c:97:62:
cf:ad:67:d2:f7:0d:26:37:70:5c:13:42:2a:c6:93:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:28:95:90:90:7E:0B:13:42:39:22:E5:57:5D:6B:6E:FE:44:BB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37332e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.73.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4a:ee:8d:2c:3f:a5:18:86:c3:c4:f6:40:0c:9e:5d:67:0c:
cd:eb:bd:e7:40:45:a3:38:3c:2e:a9:b7:ec:c5:93:ad:a8:a1:
ae:e8:2e:87:16:53:59:21:4a:ec:71:0b:5a:8e:b3:e7:8e:9c:
87:8f:cd:e6:1f:76:c0:68:21:46:c0:29:c3:3a:dd:87:63:fd:
43:ac:b1:55:2f:01:57:78:86:fd:a4:a0:21:2d:d3:ed:ec:8e:
3e:ba:82:1d:9a:bc:6b:29:e3:3d:0f:fd:2b:15:8d:9b:f2:24:
e4:7f:fe:7a:9b:98:6c:04:4c:e8:a0:85:65:06:ce:b6:e7:c1:
b3:f2:38:79:fc:cc:ce:6d:d9:2f:df:6b:3c:65:34:e2:88:90:
4f:f0:e0:d3:4a:c0:af:8b:c2:28:56:6b:bb:a2:49:f9:c6:bf:
42:00:91:22:e8:5c:01:da:f4:5e:f1:67:e5:9e:69:26:de:f0:
87:fa:2b:a5:ff:ca:7c:a4:cc:15:e6:2a:d4:36:53:2f:94:e2:
c3:64:56:2c:f6:e8:5e:97:28:5d:80:a9:5a:c7:85:e9:cd:8a:
0d:b9:e4:83:35:82:fb:75:21:93:c5:b1:dc:4d:2d:91:c1:6b:
51:4d:f6:35:a2:55:df:4c:27:e5:b3:60:6a:d9:89:28:d2:b5:
15:c5:4a:74
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBXBC7iZ1e7jH+Ba9N8uATTCil/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzJaFw0yNTEyMjYxMTQ3MzJaMDMxMTAvBgNV
BAMTKEM1QjMyODk1OTA5MDdFMEIxMzQyMzkyMkU1NTc1RDZCNkVGRTQ0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIVXEiX6ftOo7pxnxnKID42N/
7bOcpbGpILUEn7PSDyVvIqZgqMPIDt6k/JbzNWyl5oL6pk/0fOCqioFY2pmMJ7uC
yEYz3FhYUhh2V0J/imB5MgxqYqTG2hCx4bqRwNzLT3bQo9fRiZblVU0DbPxuxXPz
+8Mu+w/3RNjoE5WW8F0LvsDmWEW+x4KAnsxbWDH//or14aWR0HwkZbF1x+GjTnml
APrI/jzHf/JqIjujnUjA4my+1UZdxUg8wVJ9GqDnz0ZAQUlnwavp7otD3G5YzrFm
X+zph91xQc+PSZK9FAliUz0gNFWjjj43i0yXYs+tZ9L3DSY3cFwTQirGk3pFAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUxbMolZCQfgsTQjki5Vdda27+RLswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzcz
MzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAC
OkkwDQYJKoZIhvcNAQELBQADggEBACRK7o0sP6UYhsPE9kAMnl1nDM3rvedARaM4
PC6pt+zFk62ooa7oLocWU1khSuxxC1qOs+eOnIePzeYfdsBoIUbAKcM63Ydj/UOs
sVUvAVd4hv2koCEt0+3sjj66gh2avGsp4z0P/SsVjZvyJOR//nqbmGwETOighWUG
zrbnwbPyOHn8zM5t2S/fazxlNOKIkE/w4NNKwK+LwihWa7uiSfnGv0IAkSLoXAHa
9F7xZ+WeaSbe8If6K6X/ynykzBXmKtQ2Uy+U4sNkViz26F6XKF2AqVrHhenNig25
5IM1gvt1IZPFsdxNLZHBa1FN9jWiVd9MJ+WzYGrZiSjStRXFSnQ=
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:09 2025 by rpki-client