Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa
File: 352e3235332e3233352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 9ZMUZ1mhuiPxCXV+nyPiGdfH+wzgvzioiAWPVkqVcWs=
Subject key identifier: 12:81:26:9B:85:83:DB:7F:4A:70:AB:F6:48:F1:92:77:66:90:C2:61
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 67FB2AC7398B5CB65024A2CF7068EC75A51D4FF4
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:29 +0000
ROA not before: Fri 27 Dec 2024 11:42:29 +0000
ROA not after: Fri 26 Dec 2025 11:47:29 +0000
asID: 136787
IP address blocks: 5.253.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:fb:2a:c7:39:8b:5c:b6:50:24:a2:cf:70:68:ec:75:a5:1d:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:29 2024 GMT
Not After : Dec 26 11:47:29 2025 GMT
Subject: CN=1281269B8583DB7F4A70ABF648F192776690C261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:b0:a9:98:f8:3a:55:5f:0a:69:e6:f5:b9:
db:41:84:bc:3b:a2:29:31:f4:88:19:5b:be:6f:dd:
19:15:44:dd:2c:aa:e5:a0:ed:44:ad:1a:b8:4d:c1:
fa:5a:e6:25:ea:d7:a6:78:0e:30:93:17:c9:11:8e:
2c:05:45:ce:bd:64:8f:ef:fa:38:37:71:01:08:26:
61:b3:1e:b5:d6:45:4b:22:79:0e:3f:49:8f:ae:1d:
f0:fa:ef:bd:5d:b6:b6:ea:ec:fa:fe:bf:a3:59:1c:
ac:d4:5d:09:f1:a6:f4:8d:df:2c:fd:8c:42:64:6e:
33:5f:10:26:e0:de:bc:b7:f8:b0:e4:47:a4:ec:cc:
99:79:27:50:25:ab:70:2f:dc:5a:31:8f:02:fc:9f:
cf:75:f0:b2:9c:ea:1e:3d:33:77:c7:8b:fc:d1:8b:
b1:a0:d1:e8:43:0a:dc:c7:91:4a:e0:89:bd:02:2b:
17:42:47:06:d9:b1:37:8f:34:01:10:af:65:b5:dc:
3f:68:5c:a6:ba:7c:a5:ff:03:a7:e8:4b:94:2d:4c:
73:6d:6e:b7:fb:5a:a6:42:e9:7d:63:0d:5d:51:25:
2f:eb:5b:d0:ce:4f:bf:e4:29:2f:a4:74:37:f2:01:
0c:e6:7f:31:fc:47:1b:fd:2d:e6:71:81:2c:4f:03:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:26:9B:85:83:DB:7F:4A:70:AB:F6:48:F1:92:77:66:90:C2:61
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
56:25:6d:e8:8e:bb:bd:90:ee:e9:8a:46:25:59:d3:75:47:c3:
7d:53:23:39:10:c5:14:81:5c:a7:43:15:60:26:67:f1:a4:d3:
75:1f:39:f1:1c:79:7b:39:27:cc:72:7b:8f:49:d8:5a:bf:17:
86:5b:a5:fc:62:b0:b9:a4:29:73:4e:dd:00:34:6a:98:f8:6a:
57:bb:7e:00:07:c9:9f:a5:11:a4:a7:ad:1a:54:c6:53:71:ca:
77:c4:66:b5:97:fc:4a:5f:d0:03:09:91:4a:29:fc:11:74:14:
ee:13:c0:9f:d3:44:99:7e:f2:99:85:9d:5b:f0:7e:7f:ba:0f:
d2:71:e6:bc:13:28:d9:93:5c:59:db:65:27:29:21:99:76:66:
30:01:c2:dd:9d:34:c0:ac:53:37:96:27:83:52:5f:4a:09:c6:
ff:ee:aa:8c:46:d7:53:44:6a:84:da:e1:b9:8a:16:ad:47:15:
7a:99:d1:f3:71:c2:0d:ed:dd:08:56:73:bf:c4:15:4e:36:cd:
ca:5b:6f:a6:f7:06:24:3e:37:9d:1d:51:31:04:25:21:07:00:
1c:00:a5:d4:f4:30:06:ed:82:6b:6a:bb:cf:b8:06:83:1f:ef:
f5:42:47:a0:55:fe:e4:80:da:f0:86:5f:2b:fd:a1:cb:ac:65:
67:58:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:49 2025 by rpki-client