Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
File: 33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: mG+Vtgb3aBA4OT8trAn69HP7uyLCULwSHFhYcKJEj6k=
Subject key identifier: 4A:11:74:54:44:87:76:6E:8B:7E:72:11:06:17:1B:CD:0A:A8:39:8F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 37A2B2592A7F0E4FFE64A10ECAB3B4535022E658
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:34 +0000
ROA not before: Fri 27 Dec 2024 11:42:34 +0000
ROA not after: Fri 26 Dec 2025 11:47:34 +0000
asID: 209854
IP address blocks: 31.169.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:a2:b2:59:2a:7f:0e:4f:fe:64:a1:0e:ca:b3:b4:53:50:22:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:34 2024 GMT
Not After : Dec 26 11:47:34 2025 GMT
Subject: CN=4A1174544487766E8B7E721106171BCD0AA8398F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:7b:82:5a:ec:90:eb:47:24:b1:57:f1:0f:
b5:76:1a:81:65:2a:0a:f1:1e:5d:27:cc:49:91:82:
da:76:4e:41:06:1f:a0:80:a3:08:00:42:5e:a7:e1:
8e:19:cc:4e:19:21:e9:ac:1f:de:71:1d:f9:66:b1:
7b:16:ba:ed:b4:da:72:5c:72:a2:c9:06:a3:d2:46:
04:58:81:1d:75:8c:8a:51:3b:67:b3:c6:cf:17:25:
ae:4e:4c:83:d1:7e:db:08:37:c1:5d:01:46:26:53:
09:55:8f:0d:63:07:ac:fd:07:22:de:97:c3:83:df:
a3:4d:3d:9d:f6:8a:b4:47:68:ce:2a:46:9c:a1:09:
21:85:66:76:f4:df:24:c9:b3:05:55:74:06:64:e0:
0e:85:7f:32:8d:1d:8f:12:42:e7:30:18:96:31:0c:
59:52:bc:f0:af:bf:e3:2e:5d:1a:d2:1e:60:31:b3:
f0:ea:06:b5:cd:57:bb:de:06:28:bd:05:4e:64:cb:
f7:91:90:d0:03:32:55:12:e4:42:4b:e0:ca:71:07:
fc:e4:4e:e2:05:6b:99:5a:46:20:f9:5d:b4:0d:f6:
0e:01:fb:80:46:c9:28:82:81:be:6c:1a:5f:20:80:
f9:b0:a9:f2:5d:43:2f:02:21:78:7b:6f:3e:48:99:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:11:74:54:44:87:76:6E:8B:7E:72:11:06:17:1B:CD:0A:A8:39:8F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3136392e3132332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.123.0/24
Signature Algorithm: sha256WithRSAEncryption
83:77:2d:2b:71:af:7d:b3:b8:93:3b:f7:c2:5c:e7:a6:0d:d4:
bb:86:94:9a:93:f7:a3:c9:61:2d:d9:9d:13:c0:54:21:f3:c2:
3d:06:8c:1b:f9:f9:dd:17:c1:25:eb:43:52:c2:b4:65:9c:f1:
b0:af:c7:75:eb:a5:3e:53:ba:63:86:bc:0b:4b:41:ba:af:04:
b6:53:0c:aa:04:8c:74:f4:2b:af:68:cc:23:61:95:f3:0a:ae:
90:4a:3b:d7:9a:13:3b:69:8d:db:48:a6:98:47:34:4a:be:7a:
19:9f:3d:7d:5b:d7:06:4a:e7:39:39:bc:8c:1c:20:0a:b8:36:
7f:0d:95:b6:bd:e4:48:08:da:6c:1e:f9:34:92:de:22:15:53:
21:bd:76:96:9b:35:68:f2:68:b1:61:4a:ef:a0:09:aa:ac:7d:
7c:1d:da:ea:a2:f4:f4:c8:e2:a5:28:7c:b0:66:85:3e:9d:47:
f3:ea:51:a9:08:81:68:83:1f:0c:f4:a5:a0:fd:de:2b:f2:91:
1f:e7:97:22:ff:e1:f4:ab:58:a0:ae:c6:e8:1f:b3:d0:c1:ff:
3e:c4:94:4a:b9:2d:58:61:3b:af:ae:52:08:8a:f1:2f:02:24:
da:92:3d:de:ea:f1:c2:05:5d:ad:72:9b:23:a7:f0:8e:43:7e:
8d:8a:e0:18
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUN6KyWSp/Dk/+ZKEOyrO0U1Ai5lgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzRaFw0yNTEyMjYxMTQ3MzRaMDMxMTAvBgNV
BAMTKDRBMTE3NDU0NDQ4Nzc2NkU4QjdFNzIxMTA2MTcxQkNEMEFBODM5OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIXHuCWuyQ60cksVfxD7V2GoFl
KgrxHl0nzEmRgtp2TkEGH6CAowgAQl6n4Y4ZzE4ZIemsH95xHflmsXsWuu202nJc
cqLJBqPSRgRYgR11jIpRO2ezxs8XJa5OTIPRftsIN8FdAUYmUwlVjw1jB6z9ByLe
l8OD36NNPZ32irRHaM4qRpyhCSGFZnb03yTJswVVdAZk4A6FfzKNHY8SQucwGJYx
DFlSvPCvv+MuXRrSHmAxs/DqBrXNV7veBii9BU5ky/eRkNADMlUS5EJL4MpxB/zk
TuIFa5laRiD5XbQN9g4B+4BGySiCgb5sGl8ggPmwqfJdQy8CIXh7bz5ImeAvAgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUShF0VESHdm6LfnIRBhcbzQqoOY8wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMTM2Mzky
ZTMxMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAB+pezANBgkqhkiG9w0BAQsFAAOCAQEAg3ctK3GvfbO4kzv3wlznpg3U
u4aUmpP3o8lhLdmdE8BUIfPCPQaMG/n53RfBJetDUsK0ZZzxsK/HdeulPlO6Y4a8
C0tBuq8EtlMMqgSMdPQrr2jMI2GV8wqukEo715oTO2mN20immEc0Sr56GZ89fVvX
BkrnOTm8jBwgCrg2fw2Vtr3kSAjabB75NJLeIhVTIb12lps1aPJosWFK76AJqqx9
fB3a6qL09MjipSh8sGaFPp1H8+pRqQiBaIMfDPSloP3eK/KRH+eXIv/h9KtYoK7G
6B+z0MH/PsSUSrktWGE7r65SCIrxLwIk2pI93urxwgVdrXKbI6fwjkN+jYrgGA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:44:08 2025 by rpki-client