Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
File: 3231332e3139302e362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: 94EwFg7r/B8gK25MR7/1ntngmvxtSK4qtCBehRotrMk=
Subject key identifier: D5:03:60:54:C7:0C:7D:BB:65:55:29:6B:48:50:DE:0E:DC:E7:3D:B2
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2FB5AA00220367EB445D92E0011FD45468C3AC07
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:40 +0000
ROA not before: Fri 20 Dec 2024 15:18:40 +0000
ROA not after: Fri 19 Dec 2025 15:23:40 +0000
asID: 47583
IP address blocks: 213.190.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b5:aa:00:22:03:67:eb:44:5d:92:e0:01:1f:d4:54:68:c3:ac:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:40 2024 GMT
Not After : Dec 19 15:23:40 2025 GMT
Subject: CN=D5036054C70C7DBB6555296B4850DE0EDCE73DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:48:1e:50:c2:a0:2a:0b:b4:c8:ea:87:15:
56:88:28:14:1a:ec:d2:ed:54:10:7b:34:ad:3b:d7:
53:f2:f7:06:10:f1:9d:5a:07:cf:ad:91:74:e8:03:
f2:bb:67:ff:40:51:db:2c:ae:61:08:b0:bd:4c:34:
40:c8:b7:38:55:3a:ef:b6:d7:93:b9:3a:f2:d2:7e:
30:73:64:ce:7d:66:0e:1a:72:ec:ba:fc:64:b4:76:
c0:46:69:c2:cc:d7:b7:4f:79:45:d1:fd:53:5a:04:
8c:02:0f:c7:78:93:62:4e:e1:db:be:2a:3c:55:48:
ff:96:32:76:3a:a5:a3:fc:83:e2:7f:36:3f:1c:92:
ec:f4:4a:0a:f4:99:19:7c:f7:97:52:76:3b:d6:3f:
0f:cf:9a:74:42:3b:0f:88:54:b8:d8:34:14:1b:e8:
5a:f8:28:b3:a4:b3:1c:95:43:25:cf:3f:1b:db:11:
40:78:a8:0a:90:0e:ac:79:a7:2c:9d:08:71:75:a8:
2a:91:a5:a5:2e:ed:27:48:39:a7:a1:15:4d:36:90:
ca:22:2e:79:7e:23:3f:46:a1:26:15:c0:f4:c0:37:
79:3a:60:55:a4:25:76:e8:b2:04:51:62:48:38:9c:
5f:8b:4d:8e:7a:c6:af:4a:44:45:a7:00:35:a8:76:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:60:54:C7:0C:7D:BB:65:55:29:6B:48:50:DE:0E:DC:E7:3D:B2
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.6.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6d:57:e4:64:63:17:e1:49:f2:c2:e6:53:f2:f0:66:43:61:
28:4e:47:1a:51:f6:44:ce:90:5b:ff:5b:c1:2f:44:7f:b5:02:
c7:5e:8f:99:33:05:8b:75:ba:0a:7d:bf:67:0c:58:f6:7e:60:
7e:3f:17:3f:30:a7:7d:bd:a7:45:07:3a:cc:27:37:83:c3:a2:
fe:12:f8:0a:4d:8c:6d:76:58:05:ee:9c:d3:c7:1a:81:73:88:
3b:ba:77:a2:8b:7a:86:92:eb:49:af:ca:ad:7a:d6:30:24:3c:
57:a9:da:1b:45:26:a8:71:42:81:ca:29:d2:f9:17:4e:1f:14:
6a:0a:4e:6a:e0:dc:25:95:a6:69:2f:9f:84:56:85:0e:01:0b:
01:bd:90:49:ae:b7:d3:61:22:2a:96:00:c6:b4:57:14:1d:32:
04:19:77:d3:88:bd:16:01:09:72:f1:8d:a8:08:53:b1:17:5f:
e5:22:23:eb:77:bf:20:2b:eb:fb:28:d8:d3:af:a5:50:5a:c4:
cf:1d:33:b4:c1:37:37:f3:16:e2:64:56:43:c0:6a:65:a3:63:
d8:97:31:91:8e:1d:35:dc:35:fd:7e:c4:b3:77:27:78:fb:06:
94:b3:07:4d:15:72:67:d5:c7:bc:9c:1d:66:3f:c9:37:b2:30:
b5:70:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:13:59 2025 by rpki-client