Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36302e302f32342d3234203d3e203632323430.roa
File: 39322e3131382e36302e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 2nfqYwxaqJukTsloe+dGtX8f53QVHMsHHKOOv1ImJ48=
Subject key identifier: BC:F9:29:B8:36:99:B3:64:E2:D7:42:8E:71:B2:70:79:F7:C8:9F:B0
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 1DA875FA58F4992F15B594E54C8D8E5AE2B4D1F2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36302e302f32342d3234203d3e203632323430.roa
Signing time: Fri 27 Dec 2024 11:47:35 +0000
ROA not before: Fri 27 Dec 2024 11:42:35 +0000
ROA not after: Fri 26 Dec 2025 11:47:35 +0000
asID: 62240
IP address blocks: 92.118.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a8:75:fa:58:f4:99:2f:15:b5:94:e5:4c:8d:8e:5a:e2:b4:d1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:35 2024 GMT
Not After : Dec 26 11:47:35 2025 GMT
Subject: CN=BCF929B83699B364E2D7428E71B27079F7C89FB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:a5:75:ce:4f:6f:aa:ff:81:d7:51:47:5c:
d2:ac:ce:2e:17:15:3c:6a:e3:2e:b0:f7:90:9c:39:
7d:c4:78:76:15:0a:5d:c8:96:5e:17:c6:77:38:1d:
5f:6f:6d:90:26:0f:7a:af:a0:bb:14:6a:47:df:6d:
1e:9e:62:d9:df:02:dc:41:79:c1:e0:ab:e6:9f:79:
01:57:bc:48:c2:2f:a5:2b:8a:2b:da:aa:33:f1:82:
5a:c4:2d:56:38:7b:66:62:3c:be:b9:fc:00:1d:74:
d1:66:de:ea:3c:e8:e3:c6:8f:46:c3:13:3e:1b:03:
29:af:ea:b9:16:a4:0b:23:0e:6e:62:5f:44:18:39:
5b:c7:28:8f:d9:f7:bd:b6:41:7c:ee:7f:52:8e:61:
e3:d1:1e:29:fd:99:5b:41:7c:68:d8:eb:cf:39:8a:
c3:4d:a3:a4:a8:db:61:bf:28:30:1b:a2:aa:18:ec:
05:1b:ea:2e:62:56:26:6d:1d:ca:40:a1:3e:ad:52:
9e:10:4b:64:0a:93:3f:9e:0c:ad:f1:4b:ee:3b:9e:
ef:ac:a8:9b:b3:c6:06:07:f3:59:3a:69:88:c0:6a:
cc:04:90:45:54:f1:5c:b0:1d:bd:20:a2:e8:d9:4c:
40:5b:f0:03:7e:62:9d:82:20:e7:40:47:fa:e8:79:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F9:29:B8:36:99:B3:64:E2:D7:42:8E:71:B2:70:79:F7:C8:9F:B0
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36302e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:28:14:43:cb:ca:26:a1:17:41:32:df:01:6a:67:3a:cd:7e:
c4:9f:b2:e7:71:86:7a:b4:76:86:cb:a6:8b:5c:69:d9:1a:f1:
e2:7d:d5:25:b7:89:96:85:cc:13:8f:94:9a:5d:d2:df:f9:9a:
be:7f:60:3b:fd:09:e6:e4:02:d7:61:d2:8a:21:92:7b:5a:01:
04:bc:ac:e5:ec:f0:e5:ae:37:c4:5b:6c:b8:36:de:3f:9f:c6:
80:ce:30:1f:57:1a:8a:59:dc:a7:5c:c6:b4:63:94:17:a5:24:
a7:8e:52:88:e6:a8:ad:c8:a5:0c:c3:5b:e8:26:c9:41:0f:39:
d8:3a:cb:1b:bc:aa:de:5a:8d:61:e2:e5:20:ce:06:21:dd:5c:
6c:79:bd:32:33:af:3e:f6:d8:e6:dd:94:84:18:be:ab:fd:22:
fb:c9:bd:82:29:26:4d:2c:8c:49:06:5e:1b:67:bc:89:fb:8b:
98:a9:ab:c4:74:d1:1e:d8:aa:e7:49:bb:30:c6:f7:21:05:8a:
ff:b5:a1:6b:bd:9f:d5:0f:41:aa:8c:1d:45:e9:6f:36:27:77:
7f:b6:fc:e4:11:f9:d0:69:3b:6b:0c:c4:ef:ab:e5:e9:84:a0:
f5:a7:27:54:1e:a8:99:68:91:79:2c:c9:e3:01:34:fe:b5:66:
ec:16:08:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:17:50 2025 by rpki-client