Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
File: 33312e32342e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: nqtci5cCJL8fJZBouINW833uevwIvAsVtyG2kg3YBsQ=
Subject key identifier: 26:F3:8A:96:9C:E5:08:71:12:94:BB:BF:1E:AD:6C:5C:0D:67:8A:EF
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 39AB6D7F9558790B823BEF868C3D80094F04365E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 19 Dec 2024 15:11:13 +0000
ROA not before: Thu 19 Dec 2024 15:06:13 +0000
ROA not after: Thu 18 Dec 2025 15:11:13 +0000
asID: 136787
IP address blocks: 31.24.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ab:6d:7f:95:58:79:0b:82:3b:ef:86:8c:3d:80:09:4f:04:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 19 15:06:13 2024 GMT
Not After : Dec 18 15:11:13 2025 GMT
Subject: CN=26F38A969CE508711294BBBF1EAD6C5C0D678AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:8c:e0:9e:a1:8e:d8:6e:f4:c9:e7:b6:7d:
59:dc:0f:89:d8:80:ae:55:5c:c7:79:a5:c1:8b:c0:
14:3a:bf:07:16:21:d9:57:c4:36:c6:d7:c8:c5:c2:
2f:7d:96:f5:3b:be:31:b4:b0:5f:96:20:5c:fd:b0:
4d:e8:82:47:c9:3b:2d:a0:ee:74:c8:76:c7:24:2c:
7d:5f:70:c0:33:d0:ba:73:4c:cf:e4:6b:b6:9d:e4:
e3:14:ac:0c:db:6d:25:d6:2e:4c:fc:56:56:e3:88:
64:0a:1e:59:9b:0d:30:80:27:26:4b:b1:53:b3:cb:
5b:f4:65:2e:13:d6:da:95:42:8e:88:40:dd:b7:54:
d7:58:7b:fd:4d:91:57:96:6d:21:56:02:2b:1d:77:
49:db:4e:86:52:44:7f:e5:8b:35:83:8f:1e:77:0a:
79:cf:d0:1c:25:b3:29:ca:dc:bf:f7:ee:72:42:95:
fa:93:3a:3f:cc:ef:62:e7:e3:a8:36:cd:fd:40:3f:
a0:82:34:e0:a2:6a:12:33:ba:c3:a9:20:9c:3c:00:
e7:66:4e:6f:d8:41:67:aa:6f:30:39:80:ca:27:f2:
e4:c4:f0:13:3f:bb:f9:32:f4:15:70:d7:2d:4b:c8:
bc:2d:ca:c5:3a:61:07:5d:ed:dd:5a:c7:96:60:cc:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F3:8A:96:9C:E5:08:71:12:94:BB:BF:1E:AD:6C:5C:0D:67:8A:EF
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e32342e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.84.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d5:cb:46:31:21:bb:cc:18:26:16:fb:88:44:cc:b8:a7:18:
d9:a4:53:a6:e3:2f:b7:56:00:19:7e:99:f1:77:4d:1b:a5:6e:
20:63:6e:c6:ab:31:8a:31:ec:87:ad:c8:1a:ec:56:1c:5f:53:
cd:64:ca:f6:dd:c8:45:dd:a1:aa:b9:d0:94:ae:8a:5c:05:e0:
73:e5:f7:ba:a4:35:9c:4c:34:ab:6a:e6:6e:d6:18:9c:9a:37:
ec:9a:ff:f0:97:a3:4d:8e:fd:1f:81:34:74:23:23:41:e6:8f:
fb:3e:67:8c:db:6f:bf:b9:0c:df:d1:ef:e6:14:fb:ca:0f:a8:
bb:c1:61:a3:11:6e:47:9a:e4:b4:72:11:45:f2:76:2f:a5:d3:
9e:54:b6:08:f8:f3:2b:e8:78:15:db:6f:f4:9b:66:b7:b4:4a:
60:a7:a0:a8:47:a2:27:be:ed:58:29:5f:a6:a9:c9:8a:73:da:
6b:42:68:98:93:33:56:84:45:2b:5b:83:fa:b7:be:ca:8d:9a:
81:a8:5d:ac:45:32:25:68:35:3b:06:a4:5f:34:28:9c:22:ff:
ab:90:72:65:ed:08:e5:c5:2b:af:b9:8a:4e:b5:b4:76:a6:bb:
0a:2b:e9:1d:3a:fa:0c:05:5b:34:ad:9d:d0:3f:38:9c:e2:8c:
83:45:77:7c
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUOattf5VYeQuCO++GjD2ACU8ENl4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMTkxNTA2MTNaFw0yNTEyMTgxNTExMTNaMDMxMTAvBgNV
BAMTKDI2RjM4QTk2OUNFNTA4NzExMjk0QkJCRjFFQUQ2QzVDMEQ2NzhBRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p4zgnqGO2G70yee2fVncD4nY
gK5VXMd5pcGLwBQ6vwcWIdlXxDbG18jFwi99lvU7vjG0sF+WIFz9sE3ogkfJOy2g
7nTIdsckLH1fcMAz0LpzTM/ka7ad5OMUrAzbbSXWLkz8VlbjiGQKHlmbDTCAJyZL
sVOzy1v0ZS4T1tqVQo6IQN23VNdYe/1NkVeWbSFWAisdd0nbToZSRH/lizWDjx53
CnnP0BwlsynK3L/37nJClfqTOj/M72Ln46g2zf1AP6CCNOCiahIzusOpIJw8AOdm
Tm/YQWeqbzA5gMon8uTE8BM/u/ky9BVw1y1LyLwtysU6YQdd7d1ax5ZgzNdpAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUJvOKlpzlCHESlLu/Hq1sXA1niu8wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzMjM0MmUz
ODM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAHxhUMA0GCSqGSIb3DQEBCwUAA4IBAQB81ctGMSG7zBgmFvuIRMy4pxjZpFOm
4y+3VgAZfpnxd00bpW4gY27GqzGKMeyHrcga7FYcX1PNZMr23chF3aGqudCUropc
BeBz5fe6pDWcTDSrauZu1hicmjfsmv/wl6NNjv0fgTR0IyNB5o/7PmeM22+/uQzf
0e/mFPvKD6i7wWGjEW5HmuS0chFF8nYvpdOeVLYI+PMr6HgV22/0m2a3tEpgp6Co
R6Invu1YKV+mqcmKc9prQmiYkzNWhEUrW4P6t77KjZqBqF2sRTIlaDU7BqRfNCic
Iv+rkHJl7QjlxSuvuYpOtbR2prsKK+kdOvoMBVs0rZ3QPzic4oyDRXd8
-----END CERTIFICATE-----
Generated at Wed Apr 9 07:08:00 2025 by rpki-client