Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa
File: 38342e32312e3136392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: O8z9zEb+mE1mSM07oyOhcin2bT1iHYoGfCTCzf6isDw=
Subject key identifier: 5E:8B:F2:5C:E6:C6:EA:09:77:58:17:28:DF:32:C0:16:71:DB:9C:FC
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1E5C2FE70857C72DE40F781DBFB5A0C7D3503C18
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:27 +0000
ROA not before: Fri 20 Dec 2024 15:18:27 +0000
ROA not after: Fri 19 Dec 2025 15:23:27 +0000
asID: 136787
IP address blocks: 84.21.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:5c:2f:e7:08:57:c7:2d:e4:0f:78:1d:bf:b5:a0:c7:d3:50:3c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:27 2024 GMT
Not After : Dec 19 15:23:27 2025 GMT
Subject: CN=5E8BF25CE6C6EA0977581728DF32C01671DB9CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:96:a3:95:fe:ca:f0:32:4a:bb:32:7d:61:a7:
71:78:3c:e7:2f:dd:9d:27:00:f9:5f:ce:89:59:d1:
57:a4:da:f7:b3:b5:a5:c7:c5:00:9d:4a:04:a9:5b:
68:d5:e9:66:df:d3:9d:1b:ac:c2:ad:84:13:68:9c:
df:56:61:9e:57:49:9e:d0:57:20:6b:d0:12:9f:df:
8b:f3:f0:43:87:23:22:7d:f3:79:98:96:8a:fa:61:
e0:ec:d0:43:d5:50:aa:49:40:c4:f1:6a:c5:6f:39:
eb:18:83:d4:09:11:f6:dd:33:ea:de:2e:4f:38:b1:
01:95:0a:dc:76:f5:3e:b3:bf:b8:1b:08:c8:54:3b:
9d:5f:5b:e1:25:d1:a5:c8:f0:63:e7:d8:92:ca:5c:
6d:7c:e4:de:2b:4f:7e:b5:56:83:f3:9a:34:91:f3:
8d:ff:49:ca:7f:c3:ef:fe:71:d8:4f:87:2e:51:fe:
a4:cc:de:1c:9d:c7:d9:31:7e:f8:a8:cb:79:d1:d0:
dd:bb:02:88:a5:2e:a3:e6:a3:a9:eb:e5:ca:31:65:
0e:0c:41:bb:ca:39:00:13:22:6b:3b:b2:47:b2:1a:
e1:cd:1c:64:12:cf:d4:f2:6c:73:02:7d:55:dd:cf:
52:57:a9:45:e7:4d:b1:12:51:c1:87:41:ed:ff:1b:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:F2:5C:E6:C6:EA:09:77:58:17:28:DF:32:C0:16:71:DB:9C:FC
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3136392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.169.0/24
Signature Algorithm: sha256WithRSAEncryption
74:db:68:e2:9b:69:6a:26:f1:6c:6f:ed:04:41:6c:7e:55:49:
5b:15:ad:97:fd:bf:0d:46:41:17:37:ce:a1:2a:88:ed:d3:5f:
2a:64:f5:02:34:ba:60:87:0c:b9:f9:ba:c4:85:64:f3:fd:db:
7f:7e:fc:f2:b1:16:77:d4:ac:13:98:fc:12:d4:73:22:b4:35:
a9:4e:5c:ea:2d:11:1c:e8:18:d0:ac:87:d2:3c:44:c2:7f:fe:
0c:a8:a5:f6:a7:3a:e5:5e:92:4c:c1:f5:2b:b9:d4:6e:10:78:
7f:ed:af:9a:02:2d:ba:86:6b:c5:36:21:05:28:78:9e:83:c1:
96:f6:be:b1:8d:e7:ea:40:51:5b:39:01:e1:77:37:a4:d1:05:
96:b0:bb:42:40:2c:fd:29:33:60:59:66:c2:04:bc:b0:54:85:
ba:64:98:7c:c2:05:4e:e8:a8:74:2a:f5:ee:30:28:6c:de:73:
bd:9d:59:b0:b9:08:77:e7:da:92:26:d5:14:46:45:06:3d:1d:
3a:18:ad:54:c9:4c:60:5c:15:88:16:11:3e:24:0d:ce:c1:1c:
18:e8:8a:ce:29:be:4f:70:0e:9b:ab:9d:2f:48:22:f0:14:b4:
be:25:74:3f:92:07:80:83:e1:43:b8:e4:d7:1f:9d:e8:c0:8b:
3a:14:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:08:53 2025 by rpki-client