Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131362e302f32342d3234203d3e20313336373837.roa
File: 352e3133332e3131362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: JNq5BTRjPDfRmOy5Lq9F0G2JMqs8i1qJ9ECkO5T44DE=
Subject key identifier: 9B:EA:FB:AA:F9:92:66:2D:FD:2F:A9:02:D7:D4:C9:FF:B0:35:02:BF
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 7C6FAEB02FBB749F012E70A16A04226A2973D585
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:45 +0000
ROA not before: Fri 27 Dec 2024 11:42:45 +0000
ROA not after: Fri 26 Dec 2025 11:47:45 +0000
asID: 136787
IP address blocks: 5.133.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6f:ae:b0:2f:bb:74:9f:01:2e:70:a1:6a:04:22:6a:29:73:d5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:45 2024 GMT
Not After : Dec 26 11:47:45 2025 GMT
Subject: CN=9BEAFBAAF992662DFD2FA902D7D4C9FFB03502BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:47:3b:fd:a5:92:c1:30:ad:8b:cb:4b:1b:
79:61:f8:e7:ae:ff:fb:05:b4:81:51:21:60:e6:04:
97:70:a4:73:01:9e:a0:34:ab:25:c9:a5:1a:af:51:
1e:98:34:21:84:50:a1:3d:2c:1a:cd:c3:a1:0c:04:
38:c4:2f:23:67:aa:54:77:f1:55:28:9f:33:f7:de:
52:27:d6:36:5a:ca:09:b6:96:cb:e1:64:44:a1:05:
30:05:13:8c:c6:7c:b8:30:a0:0d:39:45:4f:cd:40:
d7:45:78:97:ad:61:66:d7:84:87:23:ca:7a:84:bb:
f5:00:fc:a5:bd:29:15:d7:c8:ae:75:cf:2f:5a:1b:
53:8d:f6:66:81:b5:af:a7:49:bf:ea:fe:20:0a:4c:
bc:b5:59:66:9c:98:25:5f:61:22:fb:62:27:d0:21:
5f:e0:7d:c3:60:08:ec:19:9f:23:4d:16:1f:fc:e3:
e7:d9:88:b6:a8:15:6f:ac:b2:49:c3:13:42:2c:ae:
4b:db:2d:27:39:1b:7e:5f:7d:c2:3c:3f:8f:30:68:
d9:a7:7a:83:03:8b:21:33:a6:b3:0b:9e:6f:0d:a6:
53:0b:83:dc:f7:46:c1:88:f1:aa:03:4b:c3:41:34:
46:1b:1a:c4:53:f2:74:5f:d6:ca:c5:23:d5:56:ef:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:FB:AA:F9:92:66:2D:FD:2F:A9:02:D7:D4:C9:FF:B0:35:02:BF
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.116.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f6:76:2b:5b:07:00:f3:12:72:04:02:bd:31:21:c5:a9:de:
cf:aa:bf:a0:67:61:80:a4:c5:97:61:a5:3e:34:53:9c:c4:d0:
18:fb:1e:6f:05:5a:f7:65:33:b3:d6:1f:f3:b6:36:e6:e9:6e:
22:0e:aa:e7:93:57:c4:cc:40:ea:cf:52:5c:b7:64:fb:5b:b6:
88:2e:69:42:99:8b:e2:d1:85:ca:f7:48:b2:2d:34:ba:c8:e0:
33:ef:64:a2:5c:07:61:ee:98:15:02:b9:f2:73:78:02:77:60:
4c:d4:f2:df:eb:a4:c2:7e:db:88:e3:7d:27:66:8d:9c:c1:a3:
3c:54:f3:2d:38:57:f5:a0:0f:20:bc:a0:0c:4e:9f:41:48:d8:
a5:7b:0c:85:fc:97:20:e0:2d:bb:a1:bb:92:bd:63:97:06:7d:
46:e8:0c:ed:b4:c8:1e:69:19:e0:10:f9:32:6a:3d:64:7c:9f:
c3:f1:fe:5d:f7:95:91:f7:6e:32:48:66:94:0a:60:68:dd:f4:
11:d4:e2:4f:e8:1d:68:b1:1a:07:af:09:34:bd:56:e5:cb:a9:
cc:ea:a3:2a:83:9b:ac:65:ca:05:ad:61:1e:db:79:a4:f1:02:
34:72:a6:80:19:62:e7:b4:28:dd:ba:49:7e:03:2b:9f:d8:e6:
fb:cc:5b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:31:37 2025 by rpki-client