Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
File: 39312e3231342e36352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: qgUw9TBpjT9Iyz4QO1U4hgic/42hsMf/432l4Kiqw1w=
Subject key identifier: 48:B1:CC:D0:BA:3F:2C:A7:56:8D:8E:18:BE:70:B3:0D:F7:A3:B8:F5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 31DA361708E54DBE8CDDAB4B6828415C25FF1891
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 27 Dec 2024 11:47:19 +0000
ROA not before: Fri 27 Dec 2024 11:42:19 +0000
ROA not after: Fri 26 Dec 2025 11:47:19 +0000
asID: 212238
IP address blocks: 91.214.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:da:36:17:08:e5:4d:be:8c:dd:ab:4b:68:28:41:5c:25:ff:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:19 2024 GMT
Not After : Dec 26 11:47:19 2025 GMT
Subject: CN=48B1CCD0BA3F2CA7568D8E18BE70B30DF7A3B8F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:66:ae:38:c7:8f:d5:dc:ac:92:b1:b9:6c:
53:bd:e0:44:2d:d8:9d:51:e6:1c:0c:b3:70:ca:34:
d0:68:18:2f:7f:51:dd:53:de:88:e3:bd:e5:94:19:
75:c1:d6:24:ba:5b:33:0a:46:c3:4a:e3:49:02:91:
f1:c9:63:28:19:1d:3a:f4:4b:dc:ae:5e:12:95:78:
3f:d3:29:3f:03:d4:72:6b:e9:23:fd:e7:a7:b6:09:
f2:61:58:f4:87:40:84:fa:4d:40:b0:d3:f5:4c:18:
67:ec:7b:45:65:16:d7:4b:05:76:cc:dd:33:19:74:
2a:42:07:2f:65:fc:b4:ac:89:53:62:f1:17:7b:cf:
3e:ae:3a:d8:ef:9e:d5:5d:c9:15:80:e0:6e:d3:5b:
80:ab:7e:bd:b0:18:a3:58:92:a9:de:b2:42:21:40:
ee:4e:c0:40:60:42:a3:17:f6:b0:d7:bc:35:e4:56:
9a:bd:89:21:f7:8d:43:39:fc:0d:64:fa:92:c4:8c:
19:9f:9c:08:fd:50:7b:a3:c5:b7:a3:a6:03:6e:fe:
81:f4:d8:32:19:1f:75:e3:24:98:54:98:7e:95:0e:
f1:f9:b1:d9:9d:72:55:1c:0d:a5:0f:a5:0b:a9:2e:
98:cd:ee:4a:6d:54:89:26:00:fd:29:31:7b:a1:a0:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B1:CC:D0:BA:3F:2C:A7:56:8D:8E:18:BE:70:B3:0D:F7:A3:B8:F5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.65.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:77:78:be:ee:8e:b1:4d:78:0e:7d:02:54:6e:30:5f:0e:7b:
34:c2:28:46:4c:c7:cb:7f:80:de:e9:be:70:e7:a6:6d:4a:7f:
ba:c2:7a:a4:55:90:34:a9:54:95:64:83:ca:33:24:cc:5c:74:
18:07:aa:c8:3b:a7:d5:b8:ba:60:9a:86:3b:b8:03:2d:06:b5:
77:d3:72:9e:12:95:7e:27:b4:13:e5:bd:4e:4e:4a:08:0c:72:
ba:fb:22:9b:02:cf:34:f0:4b:32:2e:b6:5d:c5:cc:c0:af:22:
94:22:25:20:ed:d2:be:d9:02:3e:e9:b9:2b:09:b5:05:11:5e:
b2:9a:f0:81:11:55:bc:4b:2c:d6:14:67:d0:f4:4a:7a:0f:3f:
23:ea:c0:dc:1b:01:42:0d:8f:f1:f8:18:fb:84:27:6a:f4:3e:
43:ea:7c:f9:ca:9e:a2:11:02:72:79:4e:0b:8f:a9:ca:be:d5:
c6:0a:ee:8f:8a:3f:67:44:a0:cd:5b:59:ff:11:a8:3f:13:9b:
62:1f:8b:2a:22:2e:45:9d:d7:fa:d1:eb:d6:6e:f5:6d:0c:5a:
09:51:0a:93:7c:17:f4:4e:b4:69:a9:2f:a9:f6:b8:4b:04:54:
09:89:31:9f:29:bf:0d:6f:cc:e5:4b:92:98:99:ef:31:05:b5:
8a:29:0e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:50:56 2025 by rpki-client