Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa
File: 38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: w/+VENml5f6qhqmc1TRXM0H/0lDToHOLBLicq1QIOmw=
Subject key identifier: C5:F4:1F:83:9E:5B:D8:F3:EE:AA:2D:BD:A7:A8:39:9C:3D:4F:48:04
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 48D16E70ADD42DBD8FB07462F8498DB95D8C5D68
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa
Signing time: Fri 27 Dec 2024 11:47:47 +0000
ROA not before: Fri 27 Dec 2024 11:42:47 +0000
ROA not after: Fri 26 Dec 2025 11:47:47 +0000
asID: 203061
IP address blocks: 83.171.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d1:6e:70:ad:d4:2d:bd:8f:b0:74:62:f8:49:8d:b9:5d:8c:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:47 2024 GMT
Not After : Dec 26 11:47:47 2025 GMT
Subject: CN=C5F41F839E5BD8F3EEAA2DBDA7A8399C3D4F4804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:0f:3b:16:89:9b:16:95:ee:04:2f:56:64:
93:31:1c:f5:a9:3e:17:17:86:39:38:0d:2e:69:f2:
5e:54:be:1a:43:ca:d4:b3:33:23:87:b8:f8:40:ff:
7d:37:4f:ff:d3:08:54:2d:3b:53:b4:aa:c5:93:7f:
6b:71:12:a8:c3:33:7b:49:fd:ab:36:f3:28:c9:30:
45:4a:36:4e:d8:0f:b0:cf:9e:f9:2b:46:25:71:65:
33:0d:ce:90:fb:55:9a:4a:5e:44:cb:fd:f6:ea:bd:
fa:5c:33:55:53:20:d4:43:df:3c:97:b0:01:00:37:
69:f4:70:98:d1:36:f6:b6:fd:32:52:b0:9e:41:b2:
33:2a:dc:31:3a:9b:02:8d:71:2d:0e:3c:5a:be:6b:
6c:f5:17:1e:5b:b9:c1:8e:11:c3:f4:74:fd:7e:d7:
e7:77:b8:0a:d8:15:dd:c7:13:5c:e3:26:6c:62:46:
1b:8d:c0:38:59:02:98:82:3b:e0:c5:d5:fc:28:ec:
b3:d1:0d:16:02:16:51:41:7b:f2:11:55:f3:4e:73:
13:5c:c7:fb:31:eb:5e:5f:40:99:2a:1a:7f:25:1b:
23:63:de:28:5d:20:60:85:9f:8a:be:0f:c4:80:65:
54:0c:39:e1:7b:39:5d:6e:69:d4:e1:04:41:91:96:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F4:1F:83:9E:5B:D8:F3:EE:AA:2D:BD:A7:A8:39:9C:3D:4F:48:04
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230322e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.202.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b2:74:2f:a5:a3:13:ad:1d:ee:5c:5e:ba:f5:2e:c9:1e:df:
c2:8c:d7:d8:ad:e9:e0:bd:2e:9e:fa:4b:24:cc:ed:f3:85:63:
9b:c8:ee:3c:72:95:fd:93:1b:ba:92:7b:29:fb:a2:ac:7c:1d:
5e:60:af:dd:fe:8e:34:6f:0c:d3:b5:11:08:c2:c5:48:0a:1f:
9c:85:46:68:10:7d:f9:3e:bf:2e:56:64:ae:28:ad:ee:65:77:
3a:73:45:e8:1d:3a:4b:79:4a:62:b5:c1:ed:a2:09:b2:f4:bc:
3e:ca:36:f5:df:a0:ca:ac:eb:28:c7:6d:96:66:31:05:62:6b:
8f:5c:95:c2:88:26:e6:a6:1e:97:ae:60:22:c7:6c:f0:32:71:
84:20:5e:da:27:5b:0e:cd:59:83:d4:91:16:c5:b5:76:89:5f:
02:c9:53:6f:89:7a:3b:3d:19:70:b4:ba:3c:01:9f:1f:55:12:
2a:bd:aa:db:fe:b9:91:f5:5c:11:3f:96:3d:39:a9:c9:15:f6:
ca:9c:ce:b6:46:f1:32:4b:6e:d6:d3:c9:2c:b6:b1:30:6b:f2:
95:78:d8:d1:5e:ab:fe:8a:9f:cb:4e:d5:1d:f4:c3:b6:fd:00:
3b:3e:ca:a2:07:cd:0a:2f:fa:88:5b:d5:db:ca:c8:05:5f:06:
c2:b1:50:76
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUSNFucK3ULb2PsHRi+EmNuV2MXWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyNDdaFw0yNTEyMjYxMTQ3NDdaMDMxMTAvBgNV
BAMTKEM1RjQxRjgzOUU1QkQ4RjNFRUFBMkRCREE3QTgzOTlDM0Q0RjQ4MDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl2Q87FombFpXuBC9WZJMxHPWp
PhcXhjk4DS5p8l5UvhpDytSzMyOHuPhA/303T//TCFQtO1O0qsWTf2txEqjDM3tJ
/as28yjJMEVKNk7YD7DPnvkrRiVxZTMNzpD7VZpKXkTL/fbqvfpcM1VTINRD3zyX
sAEAN2n0cJjRNva2/TJSsJ5BsjMq3DE6mwKNcS0OPFq+a2z1Fx5bucGOEcP0dP1+
1+d3uArYFd3HE1zjJmxiRhuNwDhZApiCO+DF1fwo7LPRDRYCFlFBe/IRVfNOcxNc
x/sx615fQJkqGn8lGyNj3ihdIGCFn4q+D8SAZVQMOeF7OV1uadThBEGRlsD/AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUxfQfg55b2PPuqi29p6g5nD1PSAQwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zODMzMmUzMTM3MzEy
ZTMyMzAzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAFOryjANBgkqhkiG9w0BAQsFAAOCAQEAEbJ0L6WjE60d7lxeuvUuyR7f
wozX2K3p4L0unvpLJMzt84Vjm8juPHKV/ZMbupJ7KfuirHwdXmCv3f6ONG8M07UR
CMLFSAofnIVGaBB9+T6/LlZkriit7mV3OnNF6B06S3lKYrXB7aIJsvS8Pso29d+g
yqzrKMdtlmYxBWJrj1yVwogm5qYel65gIsds8DJxhCBe2idbDs1Zg9SRFsW1dolf
AslTb4l6Oz0ZcLS6PAGfH1USKr2q2/65kfVcET+WPTmpyRX2ypzOtkbxMktu1tPJ
LLaxMGvylXjY0V6r/oqfy07VHfTDtv0AOz7KogfNCi/6iFvV28rIBV8GwrFQdg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:16 2025 by rpki-client