Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131372e302f32342d3234203d3e20313336373837.roa
File: 352e3133332e3131372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: qNPR255jgf2NSZmDR2VZXO/jHW+XPUdR7V5MMN0aSgM=
Subject key identifier: B0:CE:7F:D6:E9:92:37:16:D0:0C:E0:13:99:11:47:C1:4E:90:A7:50
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6EA4EE35091BDD6876E14262C19221C2E91D6E7D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:15 +0000
ROA not before: Fri 27 Dec 2024 11:42:15 +0000
ROA not after: Fri 26 Dec 2025 11:47:15 +0000
asID: 136787
IP address blocks: 5.133.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a4:ee:35:09:1b:dd:68:76:e1:42:62:c1:92:21:c2:e9:1d:6e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:15 2024 GMT
Not After : Dec 26 11:47:15 2025 GMT
Subject: CN=B0CE7FD6E9923716D00CE013991147C14E90A750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:42:01:3b:f2:0c:ee:04:2f:ea:5c:17:8d:
22:8a:be:d3:cf:0a:b5:fb:44:13:e0:90:4d:a3:0f:
9d:53:02:d5:4e:d0:ea:b2:86:b9:8f:0b:ff:6a:54:
a4:3b:fa:54:54:34:aa:83:c8:59:a5:49:d2:ef:44:
0a:aa:0a:0a:1d:32:c9:ce:4b:dd:a9:f9:c7:c0:d2:
a0:4f:41:60:f9:49:cb:7a:94:f9:08:9c:9d:5d:24:
b7:87:1b:0e:59:56:be:8f:5e:63:e3:44:7f:8c:3b:
9d:bd:9c:76:1b:e7:a3:94:ff:73:00:cd:77:0e:60:
8c:cb:9f:2c:cd:52:a7:96:1c:ed:46:c0:84:bb:cc:
63:63:b7:a6:f9:14:3f:49:b1:b4:8d:c2:ac:e8:45:
d0:ec:fd:1b:fd:d3:b6:4d:c3:04:fe:50:7d:17:bf:
b4:b0:c0:a8:a8:92:b3:95:3e:92:a0:95:66:bd:82:
18:24:62:72:9f:d9:c9:90:f5:15:19:33:bb:c2:3b:
8b:27:c8:18:f1:40:05:2d:18:bf:7d:bc:81:83:1f:
d1:c3:62:5c:fe:3d:cc:e1:ce:af:56:f6:07:da:e4:
48:79:42:2d:b1:b6:81:42:b5:e7:ce:9e:85:4a:4f:
7a:63:40:ca:a0:6d:15:8e:3c:7a:0b:3a:ab:99:65:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CE:7F:D6:E9:92:37:16:D0:0C:E0:13:99:11:47:C1:4E:90:A7:50
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f8:be:da:8f:aa:2f:a5:f1:3e:eb:29:e1:8b:0e:df:f4:32:
6c:1f:6a:e2:a4:d2:ed:c7:7d:dc:0b:fc:b0:22:39:3b:c0:ef:
a3:2b:91:4d:e0:5e:f7:f1:3f:2a:c9:aa:ee:eb:09:2d:0c:3c:
03:3d:5c:67:e5:70:b6:d0:04:57:09:a8:45:29:66:f5:ce:61:
0e:af:e3:6a:c0:93:0a:ab:0b:f1:98:be:48:f2:7e:e1:f6:6c:
9f:09:ef:42:ae:f8:a0:e8:58:ee:78:3b:ee:7b:6e:83:9d:46:
75:9a:2b:55:80:c7:de:46:03:6e:ac:1c:b0:4a:6b:24:1b:3c:
ee:bc:d7:b3:01:3c:01:8f:27:6f:0d:af:9a:18:16:4d:1c:43:
6f:e1:ba:7c:1b:a8:3b:d1:d4:e9:fc:dd:4b:a2:9a:d2:3c:e4:
37:39:a4:dc:63:f6:85:fa:bc:94:97:9b:ab:26:be:7a:d5:ef:
53:25:7a:b7:d9:c8:18:d4:58:a9:cd:d8:c6:50:59:1a:0d:b7:
b7:f7:37:c5:9d:0a:b7:e2:98:6d:4d:86:61:98:3b:50:df:21:
70:a1:c9:ce:53:71:03:45:bc:73:32:53:c3:6e:53:96:3b:79:
86:3c:fb:2c:8b:8c:12:bd:f1:f3:5e:2d:ad:fa:b8:5d:5f:a3:
3f:ee:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:32 2025 by rpki-client