Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
File: 39332e3137372e39362e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: iErqOOeIwBIt2T3jfhnzKeuxxIaR78+LMzztQmTN+iw=
Subject key identifier: A0:05:74:65:56:42:05:3F:DD:F2:28:48:F7:88:D7:21:88:A2:30:26
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 439E88BFB5918443D42F7535E711A78CB146A26C
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 204170
IP address blocks: 93.177.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9e:88:bf:b5:91:84:43:d4:2f:75:35:e7:11:a7:8c:b1:46:a2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=A00574655642053FDDF22848F788D72188A23026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:6c:e9:b8:ff:b8:2e:69:84:b9:b3:04:90:
2e:e0:24:f8:75:1c:ef:1a:d3:77:cd:b7:df:17:e9:
fa:f3:a4:ef:1e:92:00:ed:f4:1d:a3:bf:39:0d:93:
93:1a:12:83:de:8c:1d:f8:95:31:17:7d:6c:95:97:
21:f5:fc:c0:8d:ef:72:6f:0b:37:8f:4d:b4:3c:63:
04:65:d8:37:da:c3:4f:20:53:78:a6:de:04:ba:2e:
75:69:b2:6a:f8:37:39:79:91:8a:68:88:9f:80:71:
b2:db:e0:51:2c:fa:14:43:ee:21:6e:e1:6b:22:e3:
fb:c9:38:67:72:a1:c1:37:4a:13:4c:1b:4b:82:fe:
7e:0e:33:c1:28:f1:dd:c0:6b:ea:5d:80:08:93:f8:
92:af:0a:4d:96:12:93:66:bb:09:19:86:71:d1:34:
d3:e9:f4:5e:e3:a2:9a:79:5c:ef:11:6e:13:34:97:
00:81:9a:22:0c:e5:75:0e:6c:3c:01:c9:5f:bf:2e:
57:f5:bc:87:7f:7a:54:d8:2d:10:43:2b:dc:af:ac:
29:02:3c:e9:04:32:3a:a2:64:79:c5:ce:d9:f6:1b:
ec:b2:8c:b8:ef:f7:21:73:5b:2f:46:4d:99:88:f7:
45:82:7a:5f:ee:ac:30:a6:4f:ca:71:cd:0f:3c:3f:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:74:65:56:42:05:3F:DD:F2:28:48:F7:88:D7:21:88:A2:30:26
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.96.0/22
Signature Algorithm: sha256WithRSAEncryption
43:5f:2b:83:31:e4:98:2a:39:50:cf:a0:7d:47:e9:26:56:bf:
c0:17:07:dc:0c:b8:9f:35:ed:ab:26:97:08:ab:85:79:21:a8:
2b:68:e9:18:61:30:f2:87:32:d6:42:05:b6:c5:a7:09:27:8e:
26:06:6e:af:8c:34:1a:72:0c:78:94:ac:77:89:97:dc:34:9d:
53:ed:0b:13:04:74:16:64:82:8e:26:6e:0f:d7:61:a7:e0:00:
4d:35:12:e6:3c:44:38:35:38:bf:58:d1:12:1e:61:65:2f:34:
7f:7c:90:64:58:26:25:50:a0:20:92:a3:f0:8d:c2:60:ab:0c:
2f:db:f5:e9:a9:1d:60:dc:ec:48:6a:a9:96:bd:1d:27:5a:74:
59:3e:93:c4:a3:2e:db:2d:e1:3f:d6:ab:d2:c5:6f:b9:26:31:
1a:85:b4:62:fe:f1:86:22:58:50:82:77:7b:cc:4c:91:a8:da:
36:8c:55:ec:92:27:66:19:cc:1f:00:95:41:de:3d:f5:e7:e6:
92:a0:01:69:4a:50:ca:70:01:95:52:2d:d8:f5:2b:5f:84:90:
ab:a0:d7:ac:ec:67:8d:84:c5:61:ab:62:e1:01:ce:35:b5:db:
2d:35:15:66:4a:7e:45:77:03:e6:bd:1b:d1:41:f6:d5:7e:5c:
89:4d:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:24 2025 by rpki-client