Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3134382e302f32332d3332203d3e203531313637.roa
File: 352e3138302e3134382e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: jCCGO4m+pUnVXHl2rGUNKqe+ionVGmILjx92f1vg6x4=
Subject key identifier: 3F:18:D2:E6:AA:3D:3C:F2:A9:CA:DC:8A:C7:D7:4B:0E:4D:47:7F:D7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 10656495027CCCD43C88B31D7D1EEE19D37B82A1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3134382e302f32332d3332203d3e203531313637.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 51167
IP address blocks: 5.180.148.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:65:64:95:02:7c:cc:d4:3c:88:b3:1d:7d:1e:ee:19:d3:7b:82:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=3F18D2E6AA3D3CF2A9CADC8AC7D74B0E4D477FD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:c0:fd:77:f8:8f:25:64:ab:c5:fb:59:57:
0f:80:c9:fc:39:4c:10:fd:49:ad:1f:5b:b6:c2:18:
92:b5:c6:7f:28:8e:f9:da:21:9f:13:a7:ff:4a:ab:
56:ef:e5:ab:f1:a6:fa:14:13:88:98:a2:3e:b1:ac:
f7:e9:6f:db:d6:61:53:ef:96:7d:94:9b:4e:f3:1c:
ae:32:d7:2e:be:8a:fd:fb:e4:21:3f:06:77:76:24:
14:f5:6a:b8:de:f1:2e:77:6c:97:9a:9e:eb:e8:e5:
fd:30:fe:75:af:4b:7f:5a:6d:b2:2f:e7:71:8f:ac:
fd:15:51:0b:94:d0:63:58:58:da:9e:2c:bd:d9:c9:
46:f6:f0:61:69:be:c4:bf:ec:84:c9:8f:52:4b:0f:
84:e9:ad:19:01:4c:6e:0f:6b:cc:87:18:98:26:e1:
76:fe:f6:06:e4:b5:7a:45:f1:66:d3:d7:9a:06:a2:
30:11:e6:a4:a2:7b:fc:57:61:1e:87:c3:28:91:1f:
19:30:dc:45:3c:23:c0:72:23:7d:0f:57:1b:55:61:
33:ac:ea:62:cc:a5:a7:6c:28:11:50:21:26:09:48:
cc:0f:11:d3:33:08:76:50:fe:cd:a5:34:52:fb:98:
45:c2:f7:e4:a3:b0:de:95:81:8b:e5:8d:b3:6e:12:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:18:D2:E6:AA:3D:3C:F2:A9:CA:DC:8A:C7:D7:4B:0E:4D:47:7F:D7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3134382e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.148.0/23
Signature Algorithm: sha256WithRSAEncryption
80:5a:dd:57:64:09:5e:cb:44:de:46:70:65:97:a5:b6:9b:50:
9b:0e:d8:b3:8a:11:63:d7:d0:e0:f1:01:08:68:86:8b:cd:4b:
c7:f4:36:9c:f1:27:17:55:cb:98:ac:c3:3b:ad:2e:3b:7a:a7:
80:4e:94:fa:f5:e3:10:f4:6c:7a:7d:a4:3b:c3:a6:d6:57:d6:
a6:ba:d6:54:37:ef:62:62:fe:ef:6d:17:18:42:64:10:bc:70:
92:38:5a:05:5f:20:72:de:3f:31:bc:d8:16:e2:0a:ee:12:ae:
8c:ac:42:dd:ff:fc:ea:cf:76:5b:95:6f:b1:aa:59:99:48:27:
af:69:b4:96:3f:c1:9b:dc:13:56:54:79:4d:49:bc:e1:5c:f2:
84:dc:81:d3:35:d2:4c:3d:73:86:a9:5b:9a:80:d6:7a:0e:57:
1a:61:28:05:07:2b:f9:16:fb:95:4f:10:6d:51:00:81:f2:5a:
4c:70:f6:8a:65:6e:98:1e:25:26:25:03:d2:77:6d:71:56:92:
62:1b:bd:39:fe:a1:49:e7:7d:69:f7:40:59:98:24:eb:23:83:
85:ed:bd:9a:84:e7:30:93:84:ee:8f:db:df:d0:47:c0:83:95:
cb:d7:8d:e5:03:de:5f:d6:dd:d4:9d:a4:e7:8b:74:0f:7f:a7:
ba:e9:fe:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:18:29 2025 by rpki-client