Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131332e302f32342d3234203d3e20323039383534.roa
File: 38332e39372e3131332e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: O8nKVmn1hhnEl6MgTnp03T/M8vuev3MBte5fiCQhGt4=
Subject key identifier: F9:45:9B:A4:79:C3:D6:1C:CD:1D:2A:67:38:35:4C:35:38:DD:26:3D
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 408253792746F1842DE05AB0F6AE180DDCE5F746
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131332e302f32342d3234203d3e20323039383534.roa
Signing time: Fri 27 Dec 2024 11:47:42 +0000
ROA not before: Fri 27 Dec 2024 11:42:42 +0000
ROA not after: Fri 26 Dec 2025 11:47:42 +0000
asID: 209854
IP address blocks: 83.97.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:82:53:79:27:46:f1:84:2d:e0:5a:b0:f6:ae:18:0d:dc:e5:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:42 2024 GMT
Not After : Dec 26 11:47:42 2025 GMT
Subject: CN=F9459BA479C3D61CCD1D2A6738354C3538DD263D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:72:cc:38:34:aa:88:e5:cc:8f:14:83:38:
2d:07:69:18:9e:55:58:91:e0:5d:bb:22:fa:93:5d:
a3:2e:13:bb:c2:45:41:b7:ee:21:2b:bd:e0:8f:42:
6f:c1:7f:3c:e5:39:c5:27:83:80:2a:68:0c:f1:85:
52:d0:63:df:af:25:59:8e:5e:80:f4:6d:3c:04:b0:
ba:49:59:d5:b2:a5:d9:e0:af:ba:f0:7a:3d:88:f8:
d4:f9:0a:6f:56:66:01:c6:0b:a8:26:e3:b9:a9:8a:
8e:fc:a2:a5:1e:89:e4:f1:41:ed:88:30:a8:4e:9a:
33:73:88:4e:19:c1:c3:40:c5:db:70:2c:18:04:e2:
69:d6:7e:4b:0b:8c:ae:54:99:f9:b3:08:3d:50:57:
d6:1e:e6:aa:6a:a3:b3:43:7b:d6:6e:a6:66:bc:7c:
9e:69:25:88:82:98:f8:ea:3c:47:a0:4d:39:e8:8b:
ec:06:b2:68:3d:6d:56:90:dc:3e:66:01:17:6a:2d:
3d:cc:3b:5b:d3:1c:31:e6:0e:85:ea:cf:e4:8d:b9:
b5:3c:59:92:53:ca:17:cb:1a:a4:9b:35:d8:4b:2e:
7a:f4:5a:a3:20:69:0a:35:69:2d:f4:55:fd:a3:6c:
d5:f9:a1:62:e6:d5:da:f7:ba:c9:f2:33:b4:7f:ae:
c2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:45:9B:A4:79:C3:D6:1C:CD:1D:2A:67:38:35:4C:35:38:DD:26:3D
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38332e39372e3131332e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.113.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4e:5a:e4:2b:35:44:87:fe:c3:79:ac:e1:06:20:56:da:90:
38:0a:d2:88:64:54:64:88:7a:59:c0:96:91:f3:2b:20:99:56:
d2:71:05:f9:9f:e2:b5:7e:ba:5b:77:2b:4f:96:3f:95:69:80:
e8:f1:57:50:8a:54:bf:1d:2a:ff:57:a2:20:08:7b:88:e6:58:
4b:c6:c6:a0:d8:1a:c5:02:0c:d7:aa:d8:14:f2:52:11:94:a3:
82:69:3b:b6:ec:eb:fa:89:66:4d:62:87:c9:63:a8:c1:37:9d:
44:3c:58:20:63:d1:70:3a:f1:bc:9b:3c:a1:35:18:b5:9b:98:
08:0b:5b:b4:7f:73:9f:65:82:73:7b:76:ff:76:30:d4:fc:1d:
40:b5:25:67:83:80:f9:b9:2c:e0:05:a6:dc:ee:e3:f8:02:03:
99:76:b7:61:74:ff:0e:21:3e:73:e9:59:6e:ab:ef:81:22:2a:
61:10:c9:c3:be:a8:15:58:a1:58:5f:2f:a4:20:4e:2e:af:69:
7f:a0:21:45:68:a6:dd:50:01:41:f6:e5:90:02:c5:bc:19:1e:
5e:b5:42:3c:37:42:1b:3a:f7:b4:23:d2:94:b2:b3:2a:0a:46:
ab:7b:c5:d1:5d:33:e7:f0:7e:d7:d5:6e:16:82:d4:08:7d:83:
42:d4:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:41 2025 by rpki-client