Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36332e302f32342d3234203d3e20313336373837.roa
File: 39322e3131382e36332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: UB0zGnrLkQRrc86dM2kznD9hw94vMW8I180x9rfmum4=
Subject key identifier: 21:4D:17:BE:E6:30:75:B2:80:F8:F1:FA:41:EE:78:BD:EA:A7:90:FE
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 5FDFD1583161C12B820125A69C38F52BE0744617
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:35 +0000
ROA not before: Fri 27 Dec 2024 11:42:35 +0000
ROA not after: Fri 26 Dec 2025 11:47:35 +0000
asID: 136787
IP address blocks: 92.118.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:df:d1:58:31:61:c1:2b:82:01:25:a6:9c:38:f5:2b:e0:74:46:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:35 2024 GMT
Not After : Dec 26 11:47:35 2025 GMT
Subject: CN=214D17BEE63075B280F8F1FA41EE78BDEAA790FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:28:2f:28:35:74:26:a8:09:c5:f8:8b:f7:
6e:5e:ed:38:05:e9:5d:a2:9c:fb:4f:21:a6:3a:4d:
99:74:a2:44:06:c3:71:d1:b9:80:09:0a:5b:28:a2:
0c:80:0b:90:ae:23:bc:fd:41:d9:24:65:20:e5:8d:
ac:1e:7f:32:a8:77:8e:c8:86:22:b2:06:a3:55:ef:
1c:ed:a5:a5:b3:27:60:e0:4e:9b:32:a1:3f:c6:ad:
61:21:24:29:4f:a2:e4:53:fe:b7:17:67:40:f9:a6:
b1:49:5d:8f:0d:9b:38:f3:b3:f8:8d:85:b4:5b:79:
98:31:ae:a0:73:84:fa:6a:91:b4:83:71:1a:f8:7f:
70:68:fc:8c:48:c9:c6:60:a5:19:51:f6:78:ed:62:
0c:b9:0f:63:a5:ea:ed:4f:57:6c:a5:26:b3:a9:8a:
c7:5e:77:cf:ad:fc:5c:aa:2f:39:86:54:65:5d:18:
9f:22:fb:ea:97:70:f9:3a:77:32:4d:ce:67:87:ac:
d8:ce:dc:e6:68:f8:a8:4e:d0:28:a1:23:6a:72:2c:
14:4d:b6:c6:dd:a9:1c:aa:86:2e:ee:03:70:7e:b7:
06:47:f8:13:6b:a4:d9:3b:b3:ac:11:c8:ad:41:0e:
5f:e3:7b:82:6b:d9:28:65:70:27:60:a2:de:2f:d6:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:17:BE:E6:30:75:B2:80:F8:F1:FA:41:EE:78:BD:EA:A7:90:FE
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:42:ae:95:e7:76:7c:47:b7:b2:f0:43:cc:1d:72:02:2e:cc:
6e:9b:db:99:03:d7:1b:9f:28:f0:15:0c:d2:e4:ce:f5:82:e6:
77:32:d5:c1:a3:be:bf:24:ab:b8:db:e4:1a:94:7c:82:67:a5:
0e:64:ee:1f:c0:a2:f5:f3:b1:15:ca:76:1e:28:d8:14:c5:b1:
9a:ba:d5:24:69:05:e6:90:8e:0a:71:5d:27:d0:13:c7:f9:22:
a0:7e:a5:65:dc:4c:b8:6f:de:4e:dd:37:20:ee:21:f2:ff:22:
42:c1:cd:b1:9e:c4:cd:2e:be:cb:df:b6:7e:dc:3c:6d:32:b6:
7a:c2:ac:da:13:12:af:90:6a:a4:f4:46:86:5f:89:50:b7:b6:
05:2e:1f:19:93:eb:cd:72:12:db:08:aa:8d:4a:d0:7a:d1:25:
0b:f3:1e:ef:4d:a3:36:79:e2:f1:06:77:87:a1:c0:8b:59:ce:
1c:e0:ba:2b:5a:26:7f:20:85:8b:1c:46:1a:4a:f6:c7:c8:0a:
78:ba:0d:3f:ff:24:e2:ea:b8:94:c1:e2:c6:6c:2b:c1:38:cc:
89:1e:f5:e2:5f:21:15:75:fa:99:4d:6a:9d:4f:ad:a5:d4:6f:
a9:45:a3:6a:35:46:ed:38:81:c8:e0:f6:08:e6:a2:5d:32:83:
b4:58:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:46:30 2025 by rpki-client