Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e302e302f32342d3234203d3e20313336373837.roa
File: 39312e3133322e302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: gkCzHMg5Zp6K0jzk0GkgUUqK3ZWiMBnvW6U34bw0RA8=
Subject key identifier: DE:74:09:F0:4B:72:9C:2D:12:7E:CB:D4:68:6F:98:2C:21:0E:02:54
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4824C0DFF99DAF58A74DE5D35A66A299F9D0D845
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:24 +0000
ROA not before: Fri 27 Dec 2024 11:42:24 +0000
ROA not after: Fri 26 Dec 2025 11:47:24 +0000
asID: 136787
IP address blocks: 91.132.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:24:c0:df:f9:9d:af:58:a7:4d:e5:d3:5a:66:a2:99:f9:d0:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:24 2024 GMT
Not After : Dec 26 11:47:24 2025 GMT
Subject: CN=DE7409F04B729C2D127ECBD4686F982C210E0254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:f6:ab:45:a2:37:ae:35:41:32:a3:b0:da:
6b:6a:cd:b7:72:0f:e6:b5:dd:c0:b4:bb:71:67:85:
85:85:e6:d8:19:b9:c6:7f:a8:04:6c:2a:f1:c9:1d:
99:40:74:61:16:39:4c:46:8e:0b:22:a2:3b:3b:43:
c7:8e:6e:88:d8:93:6e:b3:0d:c9:2d:17:bf:59:80:
c3:f9:f2:60:30:45:19:1b:77:a2:aa:1e:0a:de:fd:
89:45:79:57:d9:46:91:24:86:e2:4b:bd:fe:ca:c3:
43:5a:5e:4e:3d:d9:02:27:7a:88:cc:3c:85:63:93:
d6:04:80:42:5d:57:16:23:b8:bd:54:23:06:72:b3:
5c:fd:52:23:32:39:f0:ed:09:7c:d8:33:9d:9e:88:
78:db:ab:f3:b7:05:0e:43:23:2d:62:a3:51:51:32:
1e:a1:bb:d2:86:4d:7d:5b:f6:8e:40:ac:51:fb:38:
0e:79:c0:ae:a2:2c:9a:78:66:de:d7:82:51:4e:27:
d8:68:2b:20:45:65:11:f6:69:b3:07:96:31:22:f6:
64:19:7c:5c:a2:d4:70:c3:bb:9c:f9:4f:9e:a9:cb:
3b:8b:fa:5c:ca:da:ae:f7:f2:cf:7e:df:61:b9:58:
b5:15:9b:b3:08:64:63:d3:08:c5:e8:62:16:0c:3c:
e5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:09:F0:4B:72:9C:2D:12:7E:CB:D4:68:6F:98:2C:21:0E:02:54
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:62:71:42:bc:be:29:78:d3:a8:ea:c8:f9:63:e7:ee:33:2c:
7b:f3:4a:de:5d:ff:0f:30:88:e2:85:37:65:e1:1a:5a:09:ff:
b3:6c:62:6f:07:27:e9:ad:9a:c0:d3:1e:da:a7:b6:e4:e7:63:
a1:b1:29:a8:3e:24:28:9a:d1:a9:90:4c:62:1f:91:74:bf:2d:
44:6c:de:14:ab:bb:b6:97:68:c9:f2:e8:18:8c:0b:fc:7d:ac:
3d:1a:71:e9:90:9d:75:ac:b2:42:fd:47:83:ed:c9:91:2f:bb:
d3:f0:2a:70:d8:96:48:1a:eb:b4:59:3f:26:27:3a:e6:e6:93:
d2:1e:9f:7e:4f:21:74:4c:c1:b8:ef:cf:42:51:b6:84:30:ff:
e8:10:15:7e:a3:48:0d:99:b6:3e:1e:17:8e:1e:46:9b:50:e9:
72:63:a3:ec:81:73:50:83:50:e2:3c:8d:5f:f9:51:74:e0:8e:
00:33:e0:64:35:1d:d5:8c:0a:c6:18:f4:ac:8e:07:9e:6e:45:
8d:47:e4:61:1d:47:c7:6a:d5:79:b1:42:c1:7c:e8:73:a2:9b:
b5:88:36:88:27:b8:24:34:f3:26:70:56:52:87:83:53:31:37:
b1:3a:a3:92:88:a6:25:d7:cb:05:ec:90:e5:4c:c9:55:dd:99:
2e:b5:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:07:56 2025 by rpki-client