Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323039383534.roa
File: 38312e32322e33362e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: M75meWPxJxtIUXFbed5/YK89CUoxYdhMKP3IeFZ08Ws=
Subject key identifier: 0C:58:7A:EB:62:51:A6:55:D3:CC:65:A6:C0:BB:91:45:99:EF:CB:40
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0F10231C51592034B2EED3B0267A0E9010EF05EF
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 209854
IP address blocks: 81.22.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:10:23:1c:51:59:20:34:b2:ee:d3:b0:26:7a:0e:90:10:ef:05:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=0C587AEB6251A655D3CC65A6C0BB914599EFCB40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:0d:0a:94:5f:6f:bf:25:d1:30:7c:b7:f8:
0c:7c:84:f7:66:91:aa:76:e5:ec:b4:4f:d5:61:93:
38:09:30:1d:06:89:07:09:3f:4a:85:78:ee:f7:a5:
3b:0c:6c:8e:c1:74:33:4c:d6:8e:48:af:15:71:bd:
6c:ce:36:7e:63:33:3d:e5:b3:d8:4e:c7:cf:9a:77:
68:b3:d3:f9:86:3d:56:88:95:e7:01:b9:81:13:7c:
2d:8b:6d:58:04:32:74:ef:ce:52:2a:2d:0d:fb:34:
d4:d0:ee:12:be:84:d4:f0:08:58:17:eb:7c:98:a4:
5e:16:78:c8:19:ce:23:69:44:17:b3:d4:34:4c:e7:
57:29:f8:0a:3f:bf:71:25:5c:8d:ee:68:68:8d:07:
0b:a8:34:e6:fb:18:c0:66:69:a3:4b:f4:7f:77:20:
c7:ee:8e:c5:4e:64:86:48:10:e6:c7:da:f1:44:10:
3b:e9:35:e8:c8:18:f7:ac:64:91:01:4f:22:b9:50:
3c:31:fa:d3:64:93:43:91:2b:4f:82:55:9e:8b:e3:
aa:cb:41:ee:59:95:a5:50:eb:28:ac:90:85:d5:f9:
16:d4:61:46:dc:dd:71:21:c9:30:e7:f2:45:36:62:
cc:05:85:91:8d:5f:87:f2:1b:4e:0c:d4:90:8a:5a:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:58:7A:EB:62:51:A6:55:D3:CC:65:A6:C0:BB:91:45:99:EF:CB:40
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38312e32322e33362e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.36.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b5:f1:a5:d2:b1:ff:76:08:6b:3f:24:66:30:d9:be:6a:7e:
fc:ac:bb:07:54:c0:0a:82:7e:dd:a1:c3:dc:42:39:d0:eb:22:
c1:2c:be:7d:a1:bd:de:b4:41:0e:7f:b6:f9:3e:62:79:ae:9b:
e1:1d:65:bd:50:b6:43:0e:44:fe:e2:6c:fd:21:0e:cc:ea:53:
15:61:4b:12:4b:6a:f5:3f:e7:6d:ea:d6:19:75:33:9d:75:fc:
39:55:d0:f8:0f:cf:ef:7e:3d:98:7d:53:0a:18:ed:3b:15:7a:
4b:5b:5e:01:25:aa:5d:27:cf:79:2a:ea:42:58:88:31:b8:b1:
4f:f2:83:a4:44:60:4e:c5:67:b0:a7:25:30:16:0f:c7:70:f4:
7a:d5:19:ed:37:36:c2:4b:fb:52:b6:ed:43:ea:87:39:ff:89:
fc:fa:d8:a8:7a:14:2d:bd:70:e3:b3:c1:21:0c:95:b3:d7:37:
7e:07:fc:b1:b9:a5:99:32:41:13:2d:89:48:b3:70:6d:be:f4:
2a:42:ba:4b:b6:5e:e2:89:4e:5f:e4:b3:b5:93:47:6f:d1:11:
5c:2a:00:94:d4:fa:68:1c:06:65:76:bd:6a:1b:b9:8a:40:c3:
59:3d:2c:00:58:c2:ba:d1:32:61:cf:cf:cf:6a:be:75:f8:2c:
f6:9f:77:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:48 2025 by rpki-client