Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa
File: 33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: 8sl4mxXfGrQEkhGTy3ZlFNrifwsq4nD6QYfyX3vWTDI=
Subject key identifier: 65:BA:0D:CA:5F:AD:56:18:C4:30:3D:A5:A9:A2:6B:D3:E8:6F:EF:3B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 256E6D342225398D624FD3AD21C88CF3DF83EBAD
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:44 +0000
ROA not before: Fri 27 Dec 2024 11:42:44 +0000
ROA not after: Fri 26 Dec 2025 11:47:44 +0000
asID: 209854
IP address blocks: 31.169.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:6e:6d:34:22:25:39:8d:62:4f:d3:ad:21:c8:8c:f3:df:83:eb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:44 2024 GMT
Not After : Dec 26 11:47:44 2025 GMT
Subject: CN=65BA0DCA5FAD5618C4303DA5A9A26BD3E86FEF3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:25:11:de:57:ef:7f:c4:00:78:5f:73:4c:
25:60:40:3f:5c:c0:63:61:18:af:17:ac:7a:49:8b:
60:05:6f:07:ef:7e:60:b1:bd:51:39:ab:b0:a7:f0:
e8:73:09:85:89:a5:04:48:fa:a2:71:d8:0a:33:78:
45:85:af:5b:ff:28:21:02:1d:41:7b:b7:b7:dc:86:
09:a4:ff:da:bd:c1:75:29:67:1c:d4:c1:ea:08:12:
89:a2:fb:9b:d4:21:55:ad:69:d2:9a:59:1a:01:b8:
30:f8:e0:1e:60:42:f3:a5:2d:d9:48:68:9b:f5:85:
ec:51:88:4d:ae:d5:94:9f:c3:89:af:52:e8:2a:39:
65:f2:cb:56:4a:9c:6b:b1:3f:4e:3a:27:2e:02:90:
df:b1:19:fe:65:ce:9b:8a:39:62:67:5f:78:b5:43:
bb:d1:e0:93:0a:19:50:38:95:c5:7b:c9:5f:bb:a8:
92:37:0d:d6:7a:e5:19:57:5d:69:c4:74:0e:9c:4e:
42:48:d8:6e:2b:08:db:1e:28:3e:c4:da:a6:52:6d:
0e:39:5f:88:9a:88:fe:27:21:76:28:a1:52:6a:5d:
3a:39:8c:fb:1d:1d:69:9c:db:67:88:9e:9a:a4:f0:
a9:5f:3b:95:8d:5f:06:e7:2b:84:7c:2c:22:1a:ff:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:0D:CA:5F:AD:56:18:C4:30:3D:A5:A9:A2:6B:D3:E8:6F:EF:3B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132302e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0d:29:fe:2d:83:11:96:b9:bf:88:05:6a:97:77:d2:1e:8f:
2f:3a:97:f6:21:fd:2c:0f:9f:03:98:e0:a8:05:7d:d0:4b:90:
14:93:05:47:8c:c0:c7:a2:68:58:0f:c2:ec:09:87:36:5c:96:
a2:50:b5:aa:b1:8b:08:b8:96:27:e7:72:dd:fd:9e:6e:80:9e:
19:09:7f:77:c8:b4:cd:4b:c1:90:b5:3b:bb:88:08:9a:1f:45:
0e:4e:38:82:cc:80:69:5e:98:2c:0f:c9:c7:07:2d:b0:a1:61:
85:e3:2a:72:e6:1c:bd:83:af:02:2e:c4:3d:82:75:cb:31:c6:
d3:6c:1b:d0:28:26:cb:4f:e8:1f:7b:aa:f5:ce:43:20:ac:a5:
24:5c:b3:20:07:7a:10:55:e3:e9:ff:96:4b:c1:ab:2e:12:5f:
2c:5b:fb:85:cd:65:32:79:60:76:f6:39:2a:87:c2:b9:b4:bc:
49:bb:31:7e:55:3b:44:79:09:77:25:68:50:12:a5:2a:8b:b2:
1c:b8:b1:53:01:68:10:69:d0:ba:e0:ae:34:ce:07:35:b3:02:
e6:76:14:ac:eb:e2:df:fb:d0:96:00:7e:41:ec:73:cc:02:57:
29:06:23:91:23:14:7a:e2:52:2f:f4:22:ad:7f:7f:2a:c2:d6:
5a:1d:4a:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:32:58 2025 by rpki-client