Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137312e302f32342d3332203d3e203531313637.roa
File: 38342e32312e3137312e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: OmFBIP++upXbmFKQfwlshQOz9MEgeKYliYN5fRBH3ac=
Subject key identifier: A0:99:01:0C:93:5B:73:0C:71:4B:60:0D:9D:BB:7B:CA:27:68:C7:07
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5DF5153B24452D2C3F0D91FDD9E2611E19AFCC12
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137312e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Dec 2024 15:23:39 +0000
ROA not before: Fri 20 Dec 2024 15:18:39 +0000
ROA not after: Fri 19 Dec 2025 15:23:39 +0000
asID: 51167
IP address blocks: 84.21.171.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 14:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f5:15:3b:24:45:2d:2c:3f:0d:91:fd:d9:e2:61:1e:19:af:cc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:39 2024 GMT
Not After : Dec 19 15:23:39 2025 GMT
Subject: CN=A099010C935B730C714B600D9DBB7BCA2768C707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:53:a9:a0:2c:ff:a4:31:ad:a8:54:ad:01:
6f:6d:76:5a:b0:ea:2f:64:d7:25:75:24:19:22:4e:
97:1a:2d:4c:17:6a:11:bc:83:63:57:b2:2f:43:b9:
6f:1c:1b:32:b8:15:a4:84:20:bd:f7:ad:08:a4:eb:
df:54:de:21:fe:9a:aa:0b:ab:15:1f:c5:01:c8:e8:
32:a0:b8:52:9a:4e:ea:3f:a8:d7:ea:fa:68:38:35:
75:fa:a8:f0:82:26:cb:bd:ac:0a:74:50:47:db:c3:
81:11:18:8c:99:41:1f:95:c0:75:45:f8:00:da:01:
d1:a5:e3:7f:8d:38:2f:bf:a3:29:7d:a5:78:69:76:
dc:b5:1f:e7:38:2e:4c:44:1c:c0:ee:7d:cf:8b:28:
f8:7b:69:05:0f:05:60:02:aa:f4:f2:35:f1:4d:36:
25:1a:53:53:c0:3b:d8:1c:bd:5a:71:e6:38:69:37:
e3:0e:f3:f0:f0:b3:9e:95:ec:d1:8c:4d:c3:78:3a:
99:f6:de:86:0d:69:df:a4:ce:73:bb:c1:68:d1:c5:
84:9c:2a:3e:4d:17:dd:86:e8:17:4e:4f:f1:99:cf:
d2:88:33:03:9b:7f:50:57:f1:89:f5:24:ad:31:f0:
55:85:4c:6f:39:cd:72:a7:4d:8a:7c:c5:d4:a3:27:
7e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:99:01:0C:93:5B:73:0C:71:4B:60:0D:9D:BB:7B:CA:27:68:C7:07
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38342e32312e3137312e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.171.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ee:45:15:24:43:ba:4e:d4:10:16:74:ad:58:6e:16:c3:68:
8d:61:f4:1f:98:b1:43:15:e6:df:60:d6:20:78:b1:80:8b:d3:
70:46:02:0d:40:60:3e:a4:aa:79:85:ba:6b:8b:b2:01:ee:c8:
9d:94:7d:59:fc:20:47:6c:5b:43:60:ba:68:03:98:39:8e:02:
15:df:bf:ce:b6:d2:1b:d0:1c:ba:fd:3b:ed:b2:de:a1:ca:2a:
be:9f:ae:c1:d5:7d:0c:e9:8d:b8:24:d1:4a:2f:3a:59:c0:02:
5d:20:b0:b8:a0:9d:ad:54:3b:0a:73:45:a6:86:55:a0:85:92:
28:1a:9c:d4:46:71:56:ca:fb:3e:d8:34:bf:76:1e:2f:29:46:
4a:94:51:fa:40:c4:c2:3f:84:31:e1:37:7c:39:6f:f3:44:d3:
a3:26:73:fd:77:52:80:0e:59:c2:c8:12:08:f2:3f:98:47:e9:
d9:5e:db:cf:c4:08:40:d6:ed:24:91:3b:5f:a6:e5:63:eb:86:
9f:1e:36:a3:95:9f:3d:f0:36:51:69:04:74:33:58:8a:0b:a8:
84:63:b9:1a:63:53:be:5e:d7:79:98:f3:81:e5:96:68:32:61:
a0:b6:e0:c1:18:79:d5:3b:57:51:40:b5:b1:5d:c4:c4:94:42:
57:b3:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 05:01:51 2025 by rpki-client