Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa
File: 39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: uWJZBs3rIYZrAg7xzdX7pioIqGjizvEtdkeZkYPRUGY=
Subject key identifier: C2:1D:92:32:1A:A3:09:0C:AF:4A:C1:11:EF:AE:70:66:50:50:7E:90
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 3EFEB1FE9FF54BA8F075E2BFE67DACB43DEF95BB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:06 +0000
ROA not before: Fri 27 Dec 2024 11:42:06 +0000
ROA not after: Fri 26 Dec 2025 11:47:06 +0000
asID: 136787
IP address blocks: 91.196.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:fe:b1:fe:9f:f5:4b:a8:f0:75:e2:bf:e6:7d:ac:b4:3d:ef:95:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:06 2024 GMT
Not After : Dec 26 11:47:06 2025 GMT
Subject: CN=C21D92321AA3090CAF4AC111EFAE706650507E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:d2:02:88:fe:58:62:01:f9:02:07:22:9c:
24:88:dc:45:ea:fc:e5:79:71:a7:87:82:97:14:ad:
a5:90:60:f4:4b:3f:13:4e:cc:48:1f:22:d5:f6:51:
4d:e6:54:6d:55:aa:b4:b9:1b:d9:3a:02:e7:ed:21:
76:a7:3a:ac:b8:3c:89:91:8a:3c:02:2b:22:47:d1:
25:1d:09:9a:77:bb:0d:8a:ee:98:3b:27:e8:4c:f6:
8f:f0:33:7e:92:fe:4b:b0:2d:fa:22:57:f2:ec:0e:
3b:47:fb:60:3b:bd:24:ce:64:01:c9:30:09:fc:b5:
eb:02:e7:0d:83:60:d0:48:b8:21:86:ab:25:b2:22:
07:f4:e6:3b:c9:c1:02:f1:bb:38:d5:fc:d9:66:a9:
25:19:86:70:47:83:3d:44:e6:3b:36:6f:8e:6d:c8:
0d:b8:a3:85:dc:b6:e8:7d:48:d3:30:14:a9:d2:23:
c9:12:ba:d5:10:55:9e:48:a3:84:92:41:fe:8e:51:
2d:64:62:7d:00:1b:44:6f:f8:48:ca:64:a6:08:71:
10:41:7a:ee:9c:95:d2:7e:6e:b5:7d:f0:3c:72:2a:
25:7d:86:cc:9c:f1:39:ac:21:fd:89:5b:1d:58:99:
fa:44:1c:e0:4c:87:28:4e:69:d8:d8:58:d0:a6:e9:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:92:32:1A:A3:09:0C:AF:4A:C1:11:EF:AE:70:66:50:50:7E:90
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.222.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6d:2f:60:cd:dd:7b:6b:97:05:68:8d:77:b2:d6:ed:81:96:
c5:b5:6a:f0:13:9e:b2:dc:28:97:84:3f:c2:6f:fc:ab:98:ed:
18:4b:43:ce:18:ca:84:21:00:45:2a:46:49:e1:c8:e8:07:aa:
ec:0d:5a:3f:1f:ef:17:b6:d3:3c:38:3c:0f:55:4b:e3:78:aa:
9f:9b:24:ac:f6:11:5c:fc:cf:a5:87:71:38:03:d2:b5:8b:86:
36:e9:83:e4:69:b5:7a:f8:41:60:cc:1f:7c:8e:e3:8a:77:c7:
8a:b0:08:8a:48:38:ff:8d:25:4c:1a:38:61:8f:a7:2a:f9:2b:
0e:5a:0c:b0:d1:cc:d5:c3:7d:66:5c:05:a7:37:7e:35:b8:0c:
fe:9f:11:3b:2e:8f:59:d5:81:53:18:12:cb:e3:2b:37:81:19:
0f:5d:ef:cd:01:23:57:4f:ef:3c:d0:33:fc:36:d0:d1:3e:19:
8d:5d:b4:ce:e9:95:ea:fd:eb:f4:bc:15:b9:0a:42:99:e0:0e:
64:9a:d7:be:eb:00:bf:b1:bb:40:7d:63:95:32:7d:21:15:5f:
6f:fa:de:1c:87:97:e2:16:fd:77:d2:d3:c3:db:12:ef:71:ed:
65:52:86:b6:31:96:c6:54:2d:2a:35:e5:f0:bf:7c:9b:cb:3e:
eb:99:58:d0
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgIUPv6x/p/1S6jwdeK/5n2stD3vlbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMDZaFw0yNTEyMjYxMTQ3MDZaMDMxMTAvBgNV
BAMTKEMyMUQ5MjMyMUFBMzA5MENBRjRBQzExMUVGQUU3MDY2NTA1MDdFOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8tICiP5YYgH5AgcinCSI3EXq
/OV5caeHgpcUraWQYPRLPxNOzEgfItX2UU3mVG1VqrS5G9k6AuftIXanOqy4PImR
ijwCKyJH0SUdCZp3uw2K7pg7J+hM9o/wM36S/kuwLfoiV/LsDjtH+2A7vSTOZAHJ
MAn8tesC5w2DYNBIuCGGqyWyIgf05jvJwQLxuzjV/NlmqSUZhnBHgz1E5js2b45t
yA24o4Xctuh9SNMwFKnSI8kSutUQVZ5Io4SSQf6OUS1kYn0AG0Rv+EjKZKYIcRBB
eu6cldJ+brV98DxyKiV9hsyc8TmsIf2JWx1YmfpEHOBMhyhOadjYWNCm6Qf1AgMB
AAGjggJEMIICQDAdBgNVHQ4EFgQUwh2SMhqjCQyvSsER765wZlBQfpAwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5MzYy
ZTMyMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAFvE3jANBgkqhkiG9w0BAQsFAAOCAQEAJW0vYM3de2uXBWiNd7LW7YGW
xbVq8BOestwol4Q/wm/8q5jtGEtDzhjKhCEARSpGSeHI6Aeq7A1aPx/vF7bTPDg8
D1VL43iqn5skrPYRXPzPpYdxOAPStYuGNumD5Gm1evhBYMwffI7jinfHirAIikg4
/40lTBo4YY+nKvkrDloMsNHM1cN9ZlwFpzd+NbgM/p8ROy6PWdWBUxgSy+MrN4EZ
D13vzQEjV0/vPNAz/DbQ0T4ZjV20zumV6v3r9LwVuQpCmeAOZJrXvusAv7G7QH1j
lTJ9IRVfb/reHIeX4hb9d9LTw9sS73HtZVKGtjGWxlQtKjXl8L98m8s+65lY0A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:45 2025 by rpki-client