Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa
File: 38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa (raw, json)
Hash identifier: aMQjf4bAP7EkZQNrrgrkC0CtfE1ZgKCyiU5GD2tCdmA=
Subject key identifier: C8:44:C0:B1:BF:C4:5F:3D:7B:F3:7B:65:54:18:EB:30:6A:43:38:B0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 286AFAF8678181F0E0092F7D8F839BC124E01E24
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa
Signing time: Fri 27 Dec 2024 11:47:23 +0000
ROA not before: Fri 27 Dec 2024 11:42:23 +0000
ROA not after: Fri 26 Dec 2025 11:47:23 +0000
asID: 203061
IP address blocks: 83.171.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6a:fa:f8:67:81:81:f0:e0:09:2f:7d:8f:83:9b:c1:24:e0:1e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:23 2024 GMT
Not After : Dec 26 11:47:23 2025 GMT
Subject: CN=C844C0B1BFC45F3D7BF37B655418EB306A4338B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:a2:91:48:44:e0:90:a6:48:0a:f6:aa:41:
47:08:3a:ca:2f:04:79:fe:9b:3d:42:85:70:01:77:
75:a9:5f:98:59:53:6b:41:19:ba:f1:2f:dc:27:8e:
8c:62:85:29:8c:29:2d:32:f3:18:90:78:14:e3:66:
35:0d:3e:75:74:ec:ad:c9:5e:5f:92:50:c3:0b:21:
07:73:af:51:60:34:d0:fe:2a:99:60:09:b3:58:48:
4c:f3:79:51:83:8c:e7:43:bd:0c:87:98:ef:27:fb:
55:e8:ba:94:c7:57:a2:63:63:56:a3:d4:25:96:3b:
b8:7e:84:89:7a:48:e0:9a:35:72:e2:3f:a5:c2:d2:
2b:4a:78:9b:22:77:58:14:b4:7a:06:fa:72:e1:53:
c5:09:22:37:86:7a:88:5d:0d:61:4c:50:f4:39:29:
9b:d0:8a:99:74:92:44:8b:87:52:b2:d5:43:e4:f6:
14:ec:ed:fd:18:a9:e6:d4:8c:b8:b6:ad:39:68:d1:
10:63:ea:9a:c7:cf:bd:68:7b:cc:d5:8d:5f:72:3a:
ce:b0:73:42:7e:44:23:43:33:55:d3:16:bf:93:c0:
8b:ec:33:bb:8e:a3:e9:9c:46:b1:a5:ad:45:d5:bd:
08:60:00:a5:86:ed:26:01:bf:78:63:1c:34:40:9c:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:C0:B1:BF:C4:5F:3D:7B:F3:7B:65:54:18:EB:30:6A:43:38:B0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e3137312e3230332e302f32342d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8d:4c:cc:6d:7f:c4:a9:32:39:93:72:f7:36:1e:2f:a4:98:
2f:c7:68:04:61:18:ab:52:11:22:df:5c:7d:53:e0:6c:5b:11:
75:f0:5e:96:56:ff:e4:bb:cd:71:f7:31:88:2b:da:3d:75:f8:
d3:fa:f9:e6:19:ae:24:63:7c:a6:43:c3:96:a8:89:4f:79:a9:
a3:e4:ad:e8:69:a7:c7:90:38:30:bb:62:39:c1:71:71:56:44:
8f:c9:67:ac:67:ee:03:0a:46:c8:00:16:44:71:2b:65:23:ee:
fb:6e:1f:52:a7:54:aa:c4:74:7e:65:2f:90:83:d7:4d:a0:14:
8d:0a:48:75:ec:51:02:94:3b:31:8f:b5:9b:73:89:61:b7:f4:
c6:91:0e:9c:0c:3e:ba:e7:51:14:c9:96:0f:78:2c:bc:f6:0f:
4f:ae:6f:d5:ee:64:d1:9b:5f:ab:63:61:59:2d:14:d5:8a:71:
da:20:7c:45:1f:0f:c5:58:c6:27:0f:7a:4f:a1:cd:0b:31:1e:
e8:e3:66:96:01:21:16:17:6f:e9:e7:4f:12:9c:60:cd:16:f6:
45:b5:fb:b5:ed:b2:fb:ad:aa:e3:49:2a:54:56:43:d4:e2:9d:
e6:85:89:52:66:09:7f:b4:3c:cd:cd:bb:ee:5a:37:73:a5:b6:
32:96:76:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:56:43 2025 by rpki-client