Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203430303231.roa
File: 352e3138302e3135312e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: z6yTkFiWht1kZVoojAKpjF8+aLkI+WiEyuu2MTscg9M=
Subject key identifier: 70:72:11:81:6C:81:11:A4:56:23:59:8F:B8:04:05:83:FB:D3:D0:15
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 31890A2B41F1098ED91A06EACFC7F71A3C66605C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203430303231.roa
Signing time: Fri 27 Dec 2024 11:47:42 +0000
ROA not before: Fri 27 Dec 2024 11:42:42 +0000
ROA not after: Fri 26 Dec 2025 11:47:42 +0000
asID: 40021
IP address blocks: 5.180.151.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:89:0a:2b:41:f1:09:8e:d9:1a:06:ea:cf:c7:f7:1a:3c:66:60:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:42 2024 GMT
Not After : Dec 26 11:47:42 2025 GMT
Subject: CN=707211816C8111A45623598FB8040583FBD3D015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:09:3a:5f:c5:82:dc:1f:75:3d:4d:b6:c0:0a:
87:69:89:57:78:d9:36:cf:a5:aa:9b:ec:fa:8b:e8:
61:4a:8e:7e:72:f0:1a:7b:5e:80:06:8c:5d:b6:c3:
0e:e1:86:87:c8:85:1e:e4:ce:a1:38:cc:8c:0c:cd:
24:be:ab:65:60:f6:1f:66:ee:d8:85:b3:64:f8:3a:
97:f2:9c:ea:57:14:4b:59:eb:e3:60:f4:5f:9f:ae:
94:2c:a7:73:1a:25:0f:bd:74:97:c1:a7:19:8a:b5:
ce:b3:6a:14:03:5c:64:a4:19:2b:2a:ed:75:b6:52:
6a:e5:49:f4:b2:62:fc:f1:7d:39:39:dc:b0:2d:28:
ac:bc:a4:97:34:50:b3:7f:4f:85:2d:44:02:a3:17:
79:bf:8c:89:db:cc:af:43:3c:e2:c2:f1:61:e4:99:
40:e2:85:96:91:21:8e:5b:9c:59:fc:af:f6:f6:76:
c1:85:6d:53:23:17:a3:43:e6:34:55:1a:db:b6:ab:
f4:42:da:bd:4d:d7:d4:06:f6:78:76:76:27:56:02:
0b:44:28:8a:47:f5:73:cb:7c:7a:86:09:92:04:b4:
a2:ab:43:a1:a6:62:e1:76:06:ed:6b:ef:c9:34:dc:
1e:da:59:cf:55:3b:ec:3f:ab:0c:9b:1a:c2:20:eb:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:72:11:81:6C:81:11:A4:56:23:59:8F:B8:04:05:83:FB:D3:D0:15
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e2:88:af:25:b3:eb:40:b9:84:38:08:7c:e8:6f:cf:a5:c2:
d0:69:aa:ae:14:8d:8b:24:bd:df:f6:1d:22:4a:c7:9b:37:4b:
d6:6d:1c:b9:f5:24:5d:7a:75:2b:7f:63:b2:71:82:98:a7:d9:
9f:e9:53:2a:a9:5d:3c:a5:86:93:43:6d:fe:ea:70:3b:99:51:
64:68:9e:bd:0e:09:3f:22:41:eb:78:90:32:4a:d2:a1:62:05:
72:c1:51:3f:b4:22:34:05:1c:32:c1:70:79:05:60:8f:e6:b8:
4b:e1:fd:b5:19:30:99:cf:03:b5:77:c4:03:fe:f8:e6:59:05:
8b:0e:cd:1e:e0:0b:89:40:9a:2b:6c:df:20:16:29:65:61:d8:
03:cd:20:65:64:16:2f:23:fc:e7:fc:73:bf:29:73:08:97:b2:
3a:bf:b6:02:cd:42:82:69:85:44:f1:d4:c6:e4:6a:b0:4f:c7:
4f:a6:fa:03:b7:f8:20:1a:c0:03:77:e2:a0:2a:e5:f9:9c:bb:
9c:2a:c0:48:ab:0c:59:99:3e:ae:58:64:fd:dd:fc:0e:0a:61:
f2:7c:67:53:c7:b9:bf:dd:ee:e3:e8:be:91:d1:cc:d9:75:79:
e0:9f:84:33:b0:a0:78:69:87:a8:5d:af:3e:14:fe:0b:e9:f5:
ec:eb:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:06 2025 by rpki-client