Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 2PUB+t5AxY/QzIeVan+aVbuYlYP77kzCQxHPCdBonMo=
Subject key identifier: FC:2E:6D:3C:92:4F:95:F0:9C:28:FD:00:1D:5A:96:4D:7D:BE:33:05
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2F4540D495417780C35AF0C9F557F67CF1441CAB
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:37 +0000
ROA not before: Fri 20 Dec 2024 15:18:37 +0000
ROA not after: Fri 19 Dec 2025 15:23:37 +0000
asID: 136787
IP address blocks: 95.214.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:45:40:d4:95:41:77:80:c3:5a:f0:c9:f5:57:f6:7c:f1:44:1c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:37 2024 GMT
Not After : Dec 19 15:23:37 2025 GMT
Subject: CN=FC2E6D3C924F95F09C28FD001D5A964D7DBE3305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bf:a3:38:23:58:5e:d0:63:fc:01:d2:58:3f:
9d:8b:d2:c3:d5:e6:4c:89:f0:bb:a6:d3:f3:c3:2c:
fa:cd:94:0b:8a:a4:06:8b:0c:b4:8d:8b:a7:3e:c9:
5a:be:de:47:01:86:92:df:ad:59:69:f5:48:a4:85:
6d:53:7c:46:49:f0:cf:67:0e:fa:2a:b1:b4:c3:e3:
7d:6a:51:ff:cf:b9:4c:90:8e:be:d2:2f:d8:1e:c0:
9a:cc:05:ec:df:06:f3:da:1e:62:ae:22:3d:f8:f4:
b5:a9:da:33:26:6a:ff:2c:f3:e8:f1:94:a9:1e:71:
db:8a:a9:7f:80:98:2d:f8:03:39:74:a3:f3:5f:a8:
26:6d:7e:7b:4d:0c:52:66:95:fa:1a:4d:71:a1:7f:
8e:6d:80:4e:16:f7:1b:df:1d:b2:68:7f:43:dc:1f:
7f:ba:b7:06:0b:55:66:ca:3a:05:a3:eb:59:b7:e0:
bf:9d:24:d7:f6:83:ee:bf:07:c4:d7:ee:83:2c:22:
75:71:da:13:d1:05:f6:10:e4:53:76:80:a1:42:39:
f1:94:e4:02:70:90:64:8c:36:12:ed:52:98:5f:f7:
eb:a3:97:25:9e:c2:77:4d:86:5c:b2:9f:67:6e:93:
94:6b:a4:49:85:f1:cb:1b:57:29:cc:00:9a:fc:12:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2E:6D:3C:92:4F:95:F0:9C:28:FD:00:1D:5A:96:4D:7D:BE:33:05
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.216.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dc:7a:37:53:33:5b:46:41:a9:5d:6e:75:4e:f2:00:e8:d6:
62:b7:77:41:84:73:ca:bb:55:e3:03:79:d0:a1:8e:d6:f3:5e:
7b:56:08:aa:bb:1e:df:0f:7a:97:22:bc:b3:76:c2:c4:83:4f:
06:d8:b0:0b:72:71:53:3d:3d:ec:4e:23:32:70:3b:82:be:6c:
93:c3:98:fb:ec:2b:d9:c0:81:0a:64:8b:72:40:c0:7e:12:95:
87:f7:f0:0c:f1:02:00:34:60:cf:56:11:bd:f5:fd:5e:09:09:
eb:3e:81:7e:01:cb:0e:8a:5d:db:4c:ff:6e:69:ce:66:3c:b4:
a4:a9:95:6a:f1:18:96:0d:db:08:a5:7b:71:78:86:ee:0d:af:
72:51:fc:c6:b8:57:45:64:55:bc:4f:a6:15:3b:ea:c6:2f:7b:
11:6d:e2:f3:dc:d8:81:fd:f4:51:67:a6:25:8f:d2:27:1e:66:
39:3b:81:ab:7e:f7:a1:ff:2d:26:28:eb:da:35:65:1d:f1:3c:
0d:24:e8:19:18:02:41:87:2e:ef:8f:4d:64:27:f9:ef:a7:8b:
4c:85:6a:c7:ef:72:f6:e9:1d:c1:fc:de:7c:a4:ba:82:0c:97:
c6:6e:3f:5c:05:5b:d5:bf:62:3e:40:68:82:dc:bf:4b:af:93:
2a:ac:12:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:52 2025 by rpki-client