Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
File: 39312e3139362e3232302e302f32342d3332203d3e203632323430.roa (raw, json)
Hash identifier: gyFh4OBsGEybE2iDMRSsKci3gEi/hE3WOG0BOiBTjpo=
Subject key identifier: 31:B1:F7:90:70:EC:4C:47:25:3C:17:3F:B0:BF:06:A3:D7:0A:4F:D6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1461570FC2B322EF1903765E1140C2C5572E88E1
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:28 +0000
ROA not before: Fri 27 Dec 2024 11:42:28 +0000
ROA not after: Fri 26 Dec 2025 11:47:28 +0000
asID: 62240
IP address blocks: 91.196.220.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:61:57:0f:c2:b3:22:ef:19:03:76:5e:11:40:c2:c5:57:2e:88:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:28 2024 GMT
Not After : Dec 26 11:47:28 2025 GMT
Subject: CN=31B1F79070EC4C47253C173FB0BF06A3D70A4FD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:19:65:c5:79:2e:48:9b:da:75:17:1a:0c:
63:c3:75:0d:c1:77:27:0f:d3:3b:76:f0:88:e6:8e:
4f:03:1b:18:ff:d1:9a:da:53:6f:be:d7:3e:df:de:
e7:74:3e:ad:30:97:9b:06:52:6b:65:e9:7d:6e:22:
91:a2:57:bf:c8:bd:aa:3a:6e:12:1c:7a:fe:40:7c:
02:4d:ca:c8:07:58:ad:2b:3d:fe:58:80:76:13:1d:
70:63:4f:76:f2:95:dd:63:98:ce:8a:6e:7f:06:3e:
2e:e4:d0:9e:f9:b2:08:2e:71:3e:1e:11:a5:55:06:
b1:eb:0e:26:68:0b:fb:43:6f:c3:57:cf:d5:c8:21:
fd:bf:b2:b6:67:4d:fe:e6:87:75:60:c9:30:46:7d:
e3:57:29:5f:b0:47:cb:ab:1e:09:1a:c6:ee:5c:04:
df:73:06:dc:fd:1b:c3:aa:3f:af:68:34:2a:c7:4e:
0a:cb:6c:63:02:14:3c:fa:91:20:c9:12:fc:ab:a2:
f0:0a:f3:73:68:d4:9a:8f:1d:97:02:f0:35:61:04:
83:2e:a0:e6:45:e7:15:d7:30:72:79:a0:a8:81:00:
4d:b4:bf:32:d4:dc:0f:4e:0e:4a:03:8a:6f:7b:6e:
5e:4f:f4:77:b4:f2:9e:b6:f3:66:69:04:81:b6:db:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B1:F7:90:70:EC:4C:47:25:3C:17:3F:B0:BF:06:A3:D7:0A:4F:D6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:75:4e:91:55:36:98:ee:c3:20:c0:bd:2a:a5:2b:65:00:dd:
16:90:eb:4d:18:e2:9c:fd:a4:57:4c:d1:0e:f0:64:1c:4a:61:
ca:ca:ac:55:d3:25:35:06:76:71:ef:18:bc:71:70:0d:d0:c6:
e9:f1:00:3d:6a:61:cc:c7:9a:c6:29:0b:79:40:30:77:81:53:
ea:5b:d7:7f:d2:0d:03:d0:7c:8d:d8:a2:ff:7a:ba:31:64:99:
4b:37:a9:77:88:ba:e7:24:39:a9:65:6d:a1:82:bd:78:8d:2a:
c2:73:5e:71:19:9e:9d:b4:9e:79:f1:0c:5d:b9:16:99:84:f2:
e0:46:91:e5:85:2c:6f:c9:42:9a:01:6f:54:73:8d:c0:92:d9:
7d:0e:7f:95:c4:15:ed:2b:bb:eb:b9:95:90:43:89:2e:08:3c:
f8:26:f7:24:2c:14:f8:ab:ff:65:57:73:4a:f1:d4:df:5e:eb:
ef:a4:d0:b0:79:fa:51:d8:b4:29:23:09:64:4e:3d:66:e9:64:
32:ee:c4:65:28:1e:22:e3:fd:76:24:76:97:8c:8d:95:de:fe:
54:93:b8:92:30:36:31:72:42:3c:de:20:09:15:8f:40:5c:87:
f3:0e:84:f1:0e:b9:fc:e6:29:96:bc:30:7d:d4:29:7d:16:c0:
3f:76:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:08 2025 by rpki-client