Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39322e302f32332d3234203d3e203437353833.roa
File: 38352e3230392e39322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 24WhvEAGD1DT720C0lgJXXJPQQ5ZFbrd3Vvw+P1e0Po=
Subject key identifier: A2:62:C2:7B:81:49:E1:DE:5F:9B:AD:38:D0:52:07:C0:84:58:CC:21
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2E113872B3AEADCC98366C7281641EDE88177725
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39322e302f32332d3234203d3e203437353833.roa
Signing time: Fri 27 Dec 2024 11:47:47 +0000
ROA not before: Fri 27 Dec 2024 11:42:47 +0000
ROA not after: Fri 26 Dec 2025 11:47:47 +0000
asID: 47583
IP address blocks: 85.209.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:11:38:72:b3:ae:ad:cc:98:36:6c:72:81:64:1e:de:88:17:77:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:47 2024 GMT
Not After : Dec 26 11:47:47 2025 GMT
Subject: CN=A262C27B8149E1DE5F9BAD38D05207C08458CC21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:d1:35:8f:9d:12:04:82:c7:e7:82:47:d3:
c6:58:d7:3c:b7:a4:93:bc:bf:12:6e:99:df:39:e2:
3a:d3:94:c6:94:3e:08:42:59:d5:46:c1:d7:37:ee:
88:43:83:2d:52:45:38:30:89:ff:92:8c:6d:c6:9b:
99:8b:ff:9d:73:ee:5b:7d:4e:38:10:53:b9:17:a3:
b7:da:6b:69:14:31:25:f9:85:89:8f:30:97:49:28:
14:e4:ec:36:fb:e4:b7:fe:50:a0:28:c8:3f:2d:7d:
27:f0:59:78:82:e1:a4:09:9c:f7:a5:cc:b7:76:0b:
1b:4e:2c:87:31:26:7c:0a:5c:56:02:d5:6e:33:5b:
7f:66:6d:bb:91:e8:6e:22:0f:b5:de:bd:fe:d4:c7:
f4:bd:12:41:69:cc:af:e6:f1:22:6e:37:68:73:4a:
cf:af:79:da:79:ca:6f:1c:75:c3:8a:c3:93:47:03:
78:6b:c0:9a:32:90:b0:47:13:62:10:fb:43:15:02:
a6:f8:79:17:4e:f9:d1:71:cb:69:c1:cf:f6:71:a6:
f2:b9:8e:cc:6e:1b:a1:db:fc:a3:28:99:cc:cb:52:
50:40:2e:f0:20:2e:b9:aa:e8:ff:e9:7c:ba:92:04:
f8:62:86:76:f2:9b:ba:ed:72:42:7c:a0:7a:da:6b:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:C2:7B:81:49:E1:DE:5F:9B:AD:38:D0:52:07:C0:84:58:CC:21
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/38352e3230392e39322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.92.0/23
Signature Algorithm: sha256WithRSAEncryption
44:4d:c6:80:4e:3d:a0:75:b2:c5:11:09:58:c2:e7:0e:d5:90:
34:bf:db:4c:69:3f:d2:e7:ec:09:58:c2:2c:e9:5a:52:39:09:
06:4e:5a:19:21:72:32:dd:ed:46:16:9f:7d:14:85:9d:49:60:
15:98:40:c7:3e:37:c2:66:f9:b9:32:6a:a2:71:82:f0:9f:97:
04:f3:3d:70:e9:e7:aa:4e:cc:ca:3e:5d:47:6b:0a:90:0b:22:
80:60:c3:0b:47:46:14:fe:6d:7e:3b:26:d7:7a:6c:c3:7f:55:
0e:f8:3e:71:82:6e:1b:f0:db:b9:1c:31:00:52:18:d8:95:d6:
97:c5:09:7e:4a:72:ae:64:3f:85:75:0f:20:5d:d3:5d:af:b7:
fe:90:3c:af:05:fb:f1:5a:0a:c3:5b:fd:1e:12:4a:17:35:ae:
8b:38:60:02:44:2a:a5:4f:2d:f4:24:dd:12:81:6a:cb:1a:4d:
5b:ef:9a:6e:54:63:d4:8a:01:5c:89:b4:01:dc:ca:4c:5f:1b:
66:c0:2c:a3:41:6b:9a:63:44:d6:98:12:55:9e:26:09:12:1b:
2d:ab:f7:2c:bc:3e:20:e6:8c:52:0a:c8:17:d8:af:fb:c7:f3:
d7:35:c8:0c:66:d8:9b:bc:06:9c:76:04:89:7e:bb:8f:54:ca:
c3:01:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:36 2025 by rpki-client