Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231332e302f32342d3234203d3e20313336373837.roa
File: 33312e34302e3231332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: KQqa1g5rsVgb3aRn13Qd8MJARht7iHmEERCUcBemerI=
Subject key identifier: 84:F8:84:54:C6:66:1A:C9:76:96:F3:B4:EB:5E:90:FC:69:F4:BE:3F
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5C82401C020956EB863CD7D0AB75E12CC19C5019
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:22 +0000
ROA not before: Fri 27 Dec 2024 11:42:22 +0000
ROA not after: Fri 26 Dec 2025 11:47:22 +0000
asID: 136787
IP address blocks: 31.40.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:82:40:1c:02:09:56:eb:86:3c:d7:d0:ab:75:e1:2c:c1:9c:50:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:22 2024 GMT
Not After : Dec 26 11:47:22 2025 GMT
Subject: CN=84F88454C6661AC97696F3B4EB5E90FC69F4BE3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:fd:9b:50:f2:38:7c:da:ff:46:e4:05:42:
8d:5a:47:f3:73:91:e2:70:e6:1f:14:a4:04:20:81:
74:7e:9a:81:16:ab:83:d2:48:6b:ee:ea:bd:ee:5d:
0f:48:17:ce:9d:0e:62:63:0a:af:88:06:4a:0f:92:
30:0d:c4:35:29:55:74:47:a3:23:34:4c:6c:20:d3:
d2:7a:af:18:c9:1a:24:d8:5d:74:2b:d9:ed:df:e3:
0f:3c:6e:4e:7e:a8:e6:79:31:f4:93:86:f8:a2:51:
93:6c:7f:9b:9d:7b:a2:97:9c:a1:7d:10:6e:d9:9e:
de:00:d7:9d:3f:cf:b1:79:c7:2b:b4:2d:36:b0:79:
fb:37:33:a2:f2:7d:17:fc:5e:d0:fb:3c:93:85:9a:
26:78:28:4e:74:3b:1d:5b:45:e6:73:6f:ca:98:e3:
87:f5:01:e4:6f:7f:19:c9:4b:dc:47:e1:14:f4:69:
90:5f:27:ab:1e:69:b7:b8:e0:f7:86:9d:fb:9f:26:
99:b4:80:c2:99:2e:4e:b2:ba:a6:02:33:b3:5c:0c:
d2:9f:42:fb:35:1e:ec:d2:d0:6e:14:84:16:9a:1b:
18:9b:1e:0a:db:f8:d1:d9:c0:46:f0:55:be:9f:07:
9b:df:c6:69:a7:58:b4:b5:09:c5:2d:a9:50:e7:12:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:84:54:C6:66:1A:C9:76:96:F3:B4:EB:5E:90:FC:69:F4:BE:3F
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/33312e34302e3231332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:17:c6:cb:12:5a:a1:bd:9c:91:91:65:61:26:53:b9:b8:26:
e8:d1:20:a9:cc:ca:d3:1f:c4:1e:a2:73:66:c5:e4:56:ba:b6:
aa:4f:34:4c:82:a6:ca:32:c6:f4:6d:08:99:c4:12:45:f8:c3:
7d:fe:53:f1:aa:cf:71:de:44:31:3e:74:c0:fa:f8:b4:33:59:
9c:6f:48:f1:0c:2e:b8:f7:78:44:d2:0b:a3:bb:ba:c2:21:4a:
b6:5d:bb:96:d1:66:55:51:5f:ff:09:bf:23:48:08:2b:44:2e:
55:48:04:6d:b7:cb:5b:a1:5b:e5:64:cc:46:b3:50:b3:06:fd:
d4:c4:43:8c:83:e3:31:35:66:ae:e5:5e:75:11:56:c1:c3:11:
ab:c1:27:ac:26:2c:dd:7c:56:2b:7f:aa:b9:2e:53:58:8e:3e:
ba:f0:7b:ee:8d:3d:c0:89:e2:3f:d4:c0:31:f5:f9:a8:99:0b:
69:c0:cf:17:73:cc:66:d6:44:df:81:de:8e:ba:e2:5e:f1:b4:
95:1c:e7:36:4e:19:e8:73:7b:f1:55:56:3b:7f:94:d9:25:54:
84:d6:db:08:ee:16:bd:dd:ad:da:62:db:33:53:3f:15:49:54:
20:b1:c0:d9:b3:e2:11:31:b1:a2:49:90:d3:06:03:e9:f0:aa:
e1:11:b0:38
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUXIJAHAIJVuuGPNfQq3XhLMGcUBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMjJaFw0yNTEyMjYxMTQ3MjJaMDMxMTAvBgNV
BAMTKDg0Rjg4NDU0QzY2NjFBQzk3Njk2RjNCNEVCNUU5MEZDNjlGNEJFM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3/2bUPI4fNr/RuQFQo1aR/Nz
keJw5h8UpAQggXR+moEWq4PSSGvu6r3uXQ9IF86dDmJjCq+IBkoPkjANxDUpVXRH
oyM0TGwg09J6rxjJGiTYXXQr2e3f4w88bk5+qOZ5MfSThviiUZNsf5ude6KXnKF9
EG7Znt4A150/z7F5xyu0LTawefs3M6LyfRf8XtD7PJOFmiZ4KE50Ox1bReZzb8qY
44f1AeRvfxnJS9xH4RT0aZBfJ6seabe44PeGnfufJpm0gMKZLk6yuqYCM7NcDNKf
Qvs1HuzS0G4UhBaaGxibHgrb+NHZwEbwVb6fB5vfxmmnWLS1CcUtqVDnEqivAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUhPiEVMZmGsl2lvO0616Q/Gn0vj8wHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMzMxMmUzNDMwMmUz
MjMxMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAfKNUwDQYJKoZIhvcNAQELBQADggEBAKUXxssSWqG9nJGRZWEmU7m4JujR
IKnMytMfxB6ic2bF5Fa6tqpPNEyCpsoyxvRtCJnEEkX4w33+U/Gqz3HeRDE+dMD6
+LQzWZxvSPEMLrj3eETSC6O7usIhSrZdu5bRZlVRX/8JvyNICCtELlVIBG23y1uh
W+VkzEazULMG/dTEQ4yD4zE1Zq7lXnURVsHDEavBJ6wmLN18Vit/qrkuU1iOPrrw
e+6NPcCJ4j/UwDH1+aiZC2nAzxdzzGbWRN+B3o664l7xtJUc5zZOGehze/FVVjt/
lNklVITW2wjuFr3drdpi2zNTPxVJVCCxwNmz4hExsaJJkNMGA+nwquERsDg=
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:36:00 2025 by rpki-client