Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa
File: 352e3138332e33332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 9mQDIwamIuaSjhVVS46bC/3kgG/q5VMaP5ayItMbqWE=
Subject key identifier: E9:3F:B0:36:84:80:D2:16:F5:74:48:1B:D6:C1:A6:E1:C5:B2:02:57
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3C5DFBFBB922B5DA20B96ED53E2194EA3E5F03AF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:33 +0000
ROA not before: Fri 20 Dec 2024 15:18:33 +0000
ROA not after: Fri 19 Dec 2025 15:23:33 +0000
asID: 136787
IP address blocks: 5.183.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5d:fb:fb:b9:22:b5:da:20:b9:6e:d5:3e:21:94:ea:3e:5f:03:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:33 2024 GMT
Not After : Dec 19 15:23:33 2025 GMT
Subject: CN=E93FB0368480D216F574481BD6C1A6E1C5B20257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f2:b7:63:69:04:7c:04:83:6f:59:d5:bb:9b:
75:af:72:6b:36:3a:af:c2:1e:65:bf:f5:2e:b0:89:
ba:2f:af:7c:dc:bd:6b:9f:d9:c9:53:ce:84:ee:9d:
a3:6e:5b:89:65:20:02:3e:45:f0:d9:fe:be:c4:ab:
4d:79:e9:02:e2:98:b7:95:22:ba:41:2b:77:52:b2:
aa:60:bb:8d:0a:cf:7a:bd:b5:9f:d3:8f:da:da:c6:
8d:88:f7:a4:b0:a7:fe:e5:c4:6e:d9:eb:a3:09:eb:
8c:4e:97:20:a9:1c:42:81:f4:d1:27:54:cd:b2:3d:
9b:c7:53:41:ce:bf:9e:21:98:f8:e5:2c:b0:ce:7e:
5f:7d:7b:db:be:cb:97:92:cb:fe:60:03:29:a1:f6:
1f:3a:a8:cd:df:f2:68:13:5d:e2:3c:52:aa:8d:8b:
7e:74:60:ee:71:53:48:a1:59:37:49:25:71:b1:f6:
dd:be:5f:16:3e:55:d8:14:13:ec:7d:91:6b:f8:00:
b6:5e:0e:06:e3:f2:6f:a4:32:0f:63:2f:67:53:79:
39:b0:eb:df:5f:9e:f0:b5:59:49:53:e5:07:b7:ad:
3d:57:49:57:e0:e7:19:6e:51:6c:b1:3c:7f:47:b9:
47:ca:a3:cc:0d:9b:d6:32:5e:ae:de:94:60:a2:f5:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3F:B0:36:84:80:D2:16:F5:74:48:1B:D6:C1:A6:E1:C5:B2:02:57
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b3:b4:25:e1:1f:9e:74:10:18:94:29:88:85:63:85:43:41:
68:49:8b:72:89:47:cb:bf:ba:9d:a5:a2:d9:11:b8:03:3b:ce:
51:94:08:83:b7:b1:28:c1:72:df:2e:e6:56:d2:3f:70:e0:0d:
f5:7c:71:f4:17:9b:fe:11:9d:a5:98:fb:d1:4a:58:ae:de:8f:
6c:30:7f:b0:15:82:bd:25:9a:7c:88:21:0b:56:7d:3a:4b:6e:
4a:16:ac:46:2f:9b:3d:73:c8:88:bd:61:84:04:f7:52:3b:1d:
3a:9b:7c:7c:d7:34:b6:3d:f4:a2:67:9d:de:f7:2f:55:3a:b0:
9a:2e:91:a3:16:f1:c2:fa:0b:d1:4e:02:23:b9:ff:5d:c4:e0:
d1:7b:80:6d:33:c6:0a:a4:28:78:b7:6a:bb:23:2d:b9:51:59:
3c:34:b5:28:26:9d:0f:a0:13:43:93:29:9c:be:b0:a9:0f:6c:
f9:95:04:b9:4e:8d:20:cd:bf:01:4c:c1:75:1d:0e:56:67:1b:
e4:50:67:b3:9b:5f:bf:f9:98:9d:72:ca:96:76:6f:36:7b:c4:
8b:55:d3:69:8f:80:b1:cc:6f:e0:74:af:d4:d6:7c:0d:1a:c9:
1b:5f:7a:6b:db:4b:0f:bc:f9:95:78:78:6d:02:8d:64:9f:91:
a3:d6:a7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:50:54 2025 by rpki-client