Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa
File: 3231332e3233322e38342e302f32342d3332203d3e2039303039.roa (raw, json)
Hash identifier: Lp6vHbk1+Foozjk5QSPZANtScO41YCTv68Dnoj7TjZ8=
Subject key identifier: 91:4D:EA:F9:A6:BF:EB:BF:ED:87:4C:C3:BA:59:41:59:EA:B2:DE:65
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4D627AA41C25F6632C3832BF1480A9D06DC5C41E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa
Signing time: Fri 27 Dec 2024 11:47:47 +0000
ROA not before: Fri 27 Dec 2024 11:42:47 +0000
ROA not after: Fri 26 Dec 2025 11:47:47 +0000
asID: 9009
IP address blocks: 213.232.84.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:62:7a:a4:1c:25:f6:63:2c:38:32:bf:14:80:a9:d0:6d:c5:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:47 2024 GMT
Not After : Dec 26 11:47:47 2025 GMT
Subject: CN=914DEAF9A6BFEBBFED874CC3BA594159EAB2DE65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:cc:10:e0:bf:d6:a2:d5:b1:5a:ee:32:31:
2b:af:b3:82:dc:b9:46:d1:3d:54:9a:41:e5:ff:7f:
05:bc:45:1f:ae:14:7d:9b:b6:4c:c0:bf:17:2c:92:
b1:04:43:1f:52:21:c8:88:f6:dd:45:4e:c3:66:4f:
d9:8e:9d:d2:f8:27:24:99:fe:af:8d:68:48:0e:bb:
15:d6:0e:dc:69:79:aa:31:45:74:b4:bc:c4:5c:f7:
1c:0a:ed:fe:34:82:a1:14:d4:54:a9:20:d8:54:d0:
a0:1e:c5:88:27:f7:1d:6e:88:da:b7:e2:8d:8c:61:
fc:ed:cb:fb:d6:18:35:6f:54:60:22:68:ae:06:3f:
ad:6a:d2:1b:ec:5d:f0:9c:9a:29:9c:6c:f3:85:f1:
b8:c7:ec:81:a0:25:74:16:8a:72:4a:e7:35:e7:b6:
d6:5f:9c:8e:d0:5e:27:04:da:06:9c:4d:c3:de:b1:
7a:53:a6:07:b7:27:03:c5:27:3e:ff:21:d1:a3:54:
df:ad:f1:e7:d8:d7:ca:19:6a:db:91:75:73:f8:9a:
82:96:ce:16:70:03:1d:3f:14:c2:ca:28:00:e6:cd:
49:d7:c3:d0:0c:53:77:16:fb:cd:87:df:56:e5:b9:
be:3e:f1:69:13:b7:2f:51:b4:f1:16:59:f7:7f:54:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4D:EA:F9:A6:BF:EB:BF:ED:87:4C:C3:BA:59:41:59:EA:B2:DE:65
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3231332e3233322e38342e302f32342d3332203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:19:2b:d5:b5:9b:a5:66:6a:79:d6:78:a0:1b:5c:8a:8b:8a:
46:4a:86:82:29:8d:ce:62:b8:2e:b6:d8:89:5c:03:79:1f:f5:
ca:8d:bf:61:69:22:29:ca:84:8d:68:e8:81:fe:39:df:84:0e:
54:a1:53:73:fc:98:0d:2f:5f:ec:fa:dd:da:10:d8:cd:bc:af:
00:f5:0c:7d:12:3d:05:80:3a:10:42:42:df:61:8b:90:01:36:
15:29:1d:c0:4f:d4:f5:f6:8d:37:36:14:d7:01:79:9a:fc:52:
f4:43:69:14:a3:08:25:f5:63:4a:a2:12:b8:fe:e0:06:d8:31:
ad:d5:d2:fd:f1:17:4c:a5:ab:66:29:29:11:ec:f0:e1:fc:8f:
ec:49:53:59:bf:a6:26:8b:ad:92:4d:64:8a:f8:9b:0f:cd:1c:
01:a1:f6:da:f4:dc:35:19:5c:29:e0:a3:9a:38:a5:9c:c5:ae:
d8:65:e0:a4:60:6b:75:51:ff:96:14:72:ad:a7:18:22:ac:d8:
98:b5:fa:0b:e7:d9:f1:63:fe:12:a3:57:8c:8a:b9:26:26:6f:
4b:94:fd:3b:a1:5e:44:12:0e:39:99:30:22:35:ce:c0:41:f3:
b5:0f:44:49:fb:ae:31:86:d0:78:ce:00:98:a6:19:15:95:eb:
53:e3:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:41 2025 by rpki-client