Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa
File: 33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 6sa8EOnZaiOulWo6pWv4gREIc2HigQ5+eGZFWvL1Bik=
Subject key identifier: 2E:7E:4F:F0:46:08:8A:11:77:80:DC:10:06:DF:FC:87:89:9C:08:8E
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2214C67E89665786F6D5ADF03A774B52CA59CB07
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa
Signing time: Fri 20 Dec 2024 15:23:29 +0000
ROA not before: Fri 20 Dec 2024 15:18:29 +0000
ROA not after: Fri 19 Dec 2025 15:23:29 +0000
asID: 147049
IP address blocks: 31.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:14:c6:7e:89:66:57:86:f6:d5:ad:f0:3a:77:4b:52:ca:59:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:29 2024 GMT
Not After : Dec 19 15:23:29 2025 GMT
Subject: CN=2E7E4FF046088A117780DC1006DFFC87899C088E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:e3:6f:eb:fb:22:f0:0e:e0:7a:b3:c4:36:
78:f3:98:39:5d:c7:15:76:e2:86:17:20:9d:c6:b7:
23:87:00:94:d5:01:24:f1:21:bb:e1:de:40:e3:b4:
9d:a5:21:b5:ed:c8:25:2d:ef:5c:a2:60:d2:54:27:
dd:8b:db:9a:b7:29:0a:1f:e0:3d:ae:15:a6:86:2f:
e9:89:6f:65:14:3a:0a:94:95:0a:72:0b:e9:54:92:
8f:09:d1:3b:c4:26:7d:4b:09:fe:88:72:e7:1f:34:
a7:ba:47:06:d9:4d:64:4a:d2:1a:c4:9d:2b:c6:32:
1c:9d:e7:ec:c6:3f:d1:9a:9b:b5:5c:28:94:a2:e3:
d4:70:dd:5c:ad:22:65:21:0f:9e:1f:1c:f8:b7:9d:
49:8e:f7:f8:ba:b4:d4:10:8a:9a:24:fc:de:e7:f6:
42:75:b5:bb:b2:f4:33:99:0d:9b:4a:7c:f3:9e:a5:
0e:f0:5d:1d:8e:13:bf:fe:64:63:2f:d1:c9:14:f5:
18:6e:95:8a:fb:36:7b:35:b4:0e:72:0f:3f:f7:59:
1f:f3:58:b1:5a:51:6f:8e:5a:04:b4:ee:35:4b:ec:
e9:75:99:69:80:8f:d7:03:e9:a3:d9:5f:de:72:da:
95:89:4e:3b:59:09:de:41:de:44:6f:e3:56:ec:1b:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7E:4F:F0:46:08:8A:11:77:80:DC:10:06:DF:FC:87:89:9C:08:8E
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e3232322e3235342e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b5:67:9b:96:81:76:d6:89:21:66:1f:09:2a:d2:4e:ae:34:
c3:7b:61:66:ce:f7:cb:3f:1b:08:99:20:70:a7:4a:a1:41:ed:
7d:21:24:ed:e1:71:8b:bf:9e:5e:d7:18:9b:06:1e:7e:01:10:
eb:dc:f6:ea:09:74:18:85:ba:22:9b:a6:a7:05:69:fe:6e:05:
a5:a5:70:56:bf:13:dd:01:35:dc:fc:5f:75:bf:c7:75:4f:6d:
e4:0e:2b:07:3f:c5:55:27:5e:48:6b:6a:15:b1:37:4b:da:80:
32:36:de:bf:72:4f:93:93:7c:32:71:c3:bd:a4:9b:62:a3:37:
a4:46:ac:65:01:44:fa:a8:cf:bf:97:1f:2d:17:9e:9a:f8:00:
55:1b:5d:ad:64:fe:aa:47:56:3b:25:83:61:5f:2c:b9:05:90:
0c:32:98:2d:24:c9:a2:95:b7:1c:2d:79:08:5c:ad:4e:f8:75:
bc:74:fb:14:5c:59:a0:66:34:5d:71:26:89:e0:97:87:1e:54:
3e:c1:f2:1e:73:2a:b7:5a:0a:8f:14:d7:22:d4:1a:10:5c:54:
d3:1d:ec:aa:20:ef:a8:4a:6d:c5:d9:97:78:83:ad:61:ed:cc:
86:4f:9e:7f:65:06:2f:2c:a0:e8:88:89:8e:2b:0f:09:e0:34:
32:59:23:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:35:38 2025 by rpki-client