Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa
File: 38332e3133362e3231362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: f9g4PnUreB62wOKPmNJbsHniDWkbMGOV7VzuOmBHiM0=
Subject key identifier: 2C:D3:5B:9D:C9:79:A6:A3:B6:62:07:82:42:58:66:C9:65:88:CA:B7
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5F7FC9F47FF88DDE21DB12E25086258A6155D402
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa
Signing time: Fri 20 Dec 2024 15:23:27 +0000
ROA not before: Fri 20 Dec 2024 15:18:27 +0000
ROA not after: Fri 19 Dec 2025 15:23:27 +0000
asID: 47583
IP address blocks: 83.136.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7f:c9:f4:7f:f8:8d:de:21:db:12:e2:50:86:25:8a:61:55:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:27 2024 GMT
Not After : Dec 19 15:23:27 2025 GMT
Subject: CN=2CD35B9DC979A6A3B6620782425866C96588CAB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:df:74:34:e3:16:04:82:59:f4:ee:3e:ee:
a2:00:47:00:d7:b3:a6:a0:5d:48:47:fb:66:02:a5:
98:2c:11:e4:10:c4:6f:2a:05:7e:0c:c2:e9:26:34:
e5:1e:52:35:c3:07:64:58:63:b2:a2:cd:45:68:a8:
cc:2e:2c:83:19:5b:13:2b:a1:8f:a7:1b:f6:e1:64:
22:ab:65:4f:da:9d:72:55:f6:c6:30:51:f3:ae:a8:
8e:b7:1c:a4:79:4e:6c:7f:86:41:e9:25:19:0a:fa:
ef:5c:79:e3:76:3e:d4:45:3f:49:c1:45:91:9e:4e:
94:21:70:65:fd:0f:1a:7d:c2:41:ea:32:7b:75:1b:
23:d5:08:51:01:8f:66:5c:28:cb:08:5a:20:75:fb:
67:09:d8:3a:8a:c4:51:04:28:e0:7b:4e:49:90:dd:
57:87:ed:2b:7b:ff:64:c5:e6:35:70:cf:05:36:59:
dc:95:f5:8f:60:52:83:95:da:f5:87:98:19:e3:fb:
c5:50:cf:ec:c7:64:7a:96:5c:e0:9b:a8:14:6a:5b:
a4:1a:e6:e9:00:4b:5e:90:8b:fc:c4:60:0c:0e:3b:
ef:50:02:46:00:1d:e5:c6:11:bc:b7:7b:26:57:c9:
88:78:e5:3c:49:27:c2:d0:b1:11:b4:e6:44:c5:b8:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:5B:9D:C9:79:A6:A3:B6:62:07:82:42:58:66:C9:65:88:CA:B7
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.216.0/23
Signature Algorithm: sha256WithRSAEncryption
76:61:c9:c4:15:b6:f6:3a:3a:95:a5:ff:3a:f0:0f:27:2a:6b:
88:00:52:20:72:32:85:b5:03:54:e4:e4:7b:31:60:75:44:ec:
eb:8d:d3:09:2e:e2:1c:5c:20:a2:cc:c6:8e:82:04:aa:b8:0e:
2b:8b:dd:bc:36:96:90:bb:99:27:41:5f:97:51:32:67:60:ff:
b1:e4:69:a7:a1:e9:f2:88:ab:9d:7d:03:81:7e:8a:58:b6:2c:
ad:51:0e:72:e5:69:e9:67:0b:28:21:c0:63:81:cb:ca:16:76:
f9:2a:fb:ea:ec:74:f6:5e:2a:61:d1:b0:01:ea:9e:5d:fd:70:
dc:84:3f:cd:f9:97:f3:06:e6:8e:00:c7:b0:b7:1e:77:09:f0:
4b:8d:6d:36:98:d6:fc:b0:f6:23:13:db:9e:96:6a:fd:cd:19:
42:87:57:d9:35:26:b7:e7:e2:63:a3:33:cb:e2:56:6a:b0:93:
6f:10:e9:14:a7:6b:ef:91:ba:f8:4b:0d:62:91:a3:7e:cd:0d:
a9:ac:95:a6:53:f6:cb:5d:8d:ac:ae:33:ff:ef:64:0f:7b:4d:
a8:e5:48:1d:44:cc:5e:9a:b2:e6:a5:58:c0:66:0d:2b:b3:3c:
85:cc:ff:50:9f:d6:f5:d7:ab:18:7e:34:e0:6e:39:a4:25:0b:
05:2b:19:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:15 2025 by rpki-client