Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37362e302f32342d3234203d3e20313331313939.roa
File: 352e3130342e37362e302f32342d3234203d3e20313331313939.roa (raw, json)
Hash identifier: 5Nj3j9Bo+z+m780Mp7yYWvNlq8fDlWJQptayW7H0TRg=
Subject key identifier: 7B:20:A2:17:8F:9B:98:84:EC:23:06:76:3E:4A:BE:FD:7D:6D:B2:D4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4A75B5FB5031AFCB06A9CBC0DF43C3ACD6234244
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37362e302f32342d3234203d3e20313331313939.roa
Signing time: Fri 27 Dec 2024 11:47:43 +0000
ROA not before: Fri 27 Dec 2024 11:42:43 +0000
ROA not after: Fri 26 Dec 2025 11:47:43 +0000
asID: 131199
IP address blocks: 5.104.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:75:b5:fb:50:31:af:cb:06:a9:cb:c0:df:43:c3:ac:d6:23:42:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:43 2024 GMT
Not After : Dec 26 11:47:43 2025 GMT
Subject: CN=7B20A2178F9B9884EC2306763E4ABEFD7D6DB2D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:45:d6:9f:71:3d:7f:bc:c8:70:b3:d6:f5:
72:45:11:d5:d3:e0:5e:fb:30:9e:72:e7:2a:46:9e:
9d:7c:c8:d6:83:40:fa:df:1b:de:87:98:2e:51:0f:
35:b0:cd:ac:1f:a5:4a:88:19:c5:6a:d9:d2:44:ef:
25:94:86:ce:e7:60:dd:70:98:ba:66:99:b8:fc:38:
25:7f:0a:27:d5:91:f5:8a:6d:fe:86:92:42:71:2c:
70:ce:1f:b0:e0:8b:dc:ea:a9:f0:99:9f:6e:9e:0c:
cf:5a:43:82:58:55:a8:8b:69:fb:aa:d5:57:2b:2e:
40:4c:c6:42:12:31:8b:1e:86:9c:a0:15:17:a5:d2:
05:ae:44:0d:a2:5b:52:45:ab:dc:10:29:ad:d8:3c:
8f:0e:85:10:18:b0:1f:cb:7a:33:6c:a1:c9:b2:27:
4e:07:a0:55:ee:45:23:7b:f8:42:71:d9:d5:ba:69:
ce:66:d8:61:a6:bf:10:5d:cc:0d:a8:34:68:a2:43:
35:7d:6c:3a:48:9a:af:54:f2:92:3b:65:0f:0c:e1:
2f:c7:1f:91:aa:cf:e5:a7:69:63:a4:67:f7:6a:44:
71:62:e9:14:5d:1c:09:43:97:6c:c1:06:27:07:d2:
91:ec:94:31:5b:5c:e2:f6:30:41:10:0a:c1:91:bc:
47:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:20:A2:17:8F:9B:98:84:EC:23:06:76:3E:4A:BE:FD:7D:6D:B2:D4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37362e302f32342d3234203d3e20313331313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.76.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5d:15:cd:1f:bd:84:ae:0f:aa:b1:1b:76:dd:93:04:ad:91:
2c:c0:9c:73:ef:db:bb:0e:08:eb:53:21:b1:95:9f:d9:35:39:
ad:e4:85:85:82:cf:a0:85:7e:30:d6:ed:59:31:52:bf:dc:28:
1b:5b:d8:05:50:c4:db:3b:42:05:a1:62:7f:d7:6a:b1:1d:93:
33:f7:f5:d5:98:99:f7:f8:81:9e:39:cf:3a:2a:3c:68:73:f9:
1d:53:5d:8d:0c:6f:8c:a4:9b:1d:33:cb:88:60:9b:75:c4:d3:
55:fc:89:0a:13:5a:0a:6c:d6:c8:08:cb:1d:90:5d:d8:e0:e6:
79:1c:56:33:08:55:9a:da:c1:52:20:74:85:76:2d:68:b0:79:
89:61:6c:a0:8f:a7:15:11:b2:9f:45:33:5e:bc:27:b2:30:0f:
50:18:f8:e5:21:7b:77:52:99:99:ca:3b:24:f7:e1:49:cd:44:
cc:51:10:ed:2e:3d:c4:76:f5:5a:53:82:78:b4:27:0a:74:ce:
30:df:d8:de:c7:4a:ab:db:1d:dd:18:4d:47:7a:96:b2:da:f3:
69:83:e6:fc:4a:71:aa:8a:41:cc:b2:2a:cd:a6:43:df:15:4a:
0f:9b:40:98:cd:80:27:b7:cb:d4:05:79:73:a5:a5:b8:eb:1c:
a5:0b:c2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:37 2025 by rpki-client