Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230382e302f32342d3332203d3e20313431393935.roa
File: 38302e36352e3230382e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: m6eGkeCwXRSlX7NCImOJGf+ke1+tSWOmSbrg4tNwJ3I=
Subject key identifier: B8:72:07:31:7D:F7:90:06:A0:72:88:4A:9E:46:32:A1:7E:EA:0B:ED
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4551E302BBCC3598474FC91D4E865FE26FB072B0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230382e302f32342d3332203d3e20313431393935.roa
Signing time: Fri 20 Dec 2024 15:23:29 +0000
ROA not before: Fri 20 Dec 2024 15:18:29 +0000
ROA not after: Fri 19 Dec 2025 15:23:29 +0000
asID: 141995
IP address blocks: 80.65.208.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Mar 2025 13:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:51:e3:02:bb:cc:35:98:47:4f:c9:1d:4e:86:5f:e2:6f:b0:72:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:29 2024 GMT
Not After : Dec 19 15:23:29 2025 GMT
Subject: CN=B87207317DF79006A072884A9E4632A17EEA0BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:c6:ec:32:5a:95:23:48:bf:82:cd:04:ac:
a0:3b:23:aa:6f:56:9b:30:d5:02:9f:e1:d7:61:8a:
cc:80:03:0a:4c:bb:3e:db:f9:60:63:07:9c:a1:47:
33:37:06:5c:e4:a7:15:78:3a:fe:c5:2b:b9:7e:f7:
1f:06:62:e8:80:4b:45:f2:96:13:07:40:3e:61:85:
f4:d3:ba:d3:eb:69:83:6c:a3:99:ac:02:4e:0f:9a:
22:b0:c2:7d:71:58:2d:1e:e8:27:59:60:45:be:b9:
0f:20:f0:a1:bb:ae:ae:de:ef:cf:5c:a1:d4:11:f0:
a9:c7:d2:19:20:21:3b:57:cd:c0:87:40:c1:5a:f6:
49:4f:cc:9d:e8:6a:45:47:d6:53:c4:87:63:98:d1:
d4:04:26:47:b9:c3:73:27:43:54:cb:8d:07:aa:5d:
e4:f9:13:80:ed:cc:1d:c8:4a:78:7e:9c:d4:9f:bd:
39:62:f1:39:6e:53:61:dc:f7:00:f5:26:71:69:f4:
7d:0e:93:64:eb:10:9a:d2:e6:64:e3:29:5d:98:60:
6a:da:5a:e7:e6:0e:d2:fb:26:e8:e8:98:6e:1b:88:
ee:a9:d9:51:98:98:db:91:43:56:da:f6:2f:02:8a:
ec:75:cc:76:50:e7:09:42:09:23:0d:d1:44:35:58:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:07:31:7D:F7:90:06:A0:72:88:4A:9E:46:32:A1:7E:EA:0B:ED
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38302e36352e3230382e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.208.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:05:c1:46:f3:9a:5b:eb:03:28:bf:97:a5:c2:7e:1c:2e:69:
46:7d:c9:e9:c6:c8:48:6e:4d:f9:b2:d2:9d:5f:c8:1a:18:4b:
54:b4:89:c9:e0:2e:70:62:49:2f:6f:e2:27:d3:97:d2:4d:ec:
09:bd:6b:af:66:f6:f1:84:4c:6e:f7:69:1b:cf:89:68:41:57:
b8:83:16:0b:38:73:ec:25:a1:2f:37:a6:de:22:1a:b7:c2:ba:
e4:79:36:bd:81:0b:44:52:5d:50:0d:d6:ea:9e:0b:33:9d:81:
43:6e:68:7d:2f:b9:83:81:75:36:50:5e:18:46:49:29:af:40:
17:eb:3f:ec:da:e8:ad:24:9a:0c:38:47:43:9f:d2:d5:71:65:
9e:a8:07:dd:0b:06:68:17:c5:9e:cc:25:e2:06:0f:53:1b:ab:
95:f2:29:c2:9c:17:d4:e9:41:6d:aa:22:e1:46:4a:9a:54:30:
97:c6:6d:93:1b:24:ba:d9:32:c1:a6:3b:45:a4:3d:f8:78:a1:
3b:e9:11:63:93:af:50:96:48:fa:e9:a9:8e:31:6b:b0:60:ef:
06:82:26:c5:52:59:4b:7f:1e:90:28:ec:eb:62:37:b9:a1:ac:
7e:e3:75:90:6d:29:8d:70:bb:b4:5a:79:a9:5f:26:c7:36:82:
07:7f:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 02:44:23 2025 by rpki-client