Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VnwsTAOHzH0Mcya52iSrZ8F8/uB0pPfIu/4AEElmiCw=
Subject key identifier: 1C:50:FE:28:CA:B5:C2:A9:45:17:25:2E:61:49:3F:A4:68:5F:19:50
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 12E33C6D0AB7A509430460D1A7EAB753A6B3C2A2
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:39 +0000
ROA not before: Fri 20 Dec 2024 15:18:39 +0000
ROA not after: Fri 19 Dec 2025 15:23:39 +0000
asID: 136787
IP address blocks: 95.214.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 16:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e3:3c:6d:0a:b7:a5:09:43:04:60:d1:a7:ea:b7:53:a6:b3:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:39 2024 GMT
Not After : Dec 19 15:23:39 2025 GMT
Subject: CN=1C50FE28CAB5C2A94517252E61493FA4685F1950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:99:8f:83:1e:03:55:64:76:87:c6:5c:2c:
49:24:47:ae:7b:13:67:6e:8f:7a:35:a6:17:a8:77:
c4:d3:31:44:f8:58:7e:da:8e:53:d4:9d:62:ac:b7:
ba:86:c3:14:f9:5c:e9:80:03:5b:fc:45:81:43:ff:
a1:de:6d:cf:52:b2:59:d6:5c:59:cb:6d:46:1b:fe:
7e:6f:99:b2:d5:90:a2:6e:8a:38:e0:6e:b5:2b:bb:
dd:67:79:6d:a1:4d:0e:d1:61:8e:ca:0a:6d:9b:17:
bb:cd:67:2b:77:1c:b5:28:cd:d6:64:e3:14:00:3b:
ed:db:96:33:31:2a:59:cb:0c:ad:cf:e6:24:bb:05:
48:ac:56:1f:10:ca:a1:0d:e3:d7:6c:22:d0:16:55:
d5:77:8e:7e:21:a8:32:ff:20:b3:f2:f5:4e:86:51:
80:ab:79:20:ab:9f:68:6e:be:0f:c6:55:c6:40:7d:
8a:ee:64:71:30:f1:d5:fa:66:c1:c7:a3:a3:56:72:
56:e0:aa:59:14:32:10:5f:4c:8b:94:ae:17:2c:9a:
d5:6a:0c:cf:d1:f4:8d:5f:d6:46:75:4e:6e:c3:2d:
7b:fa:ad:27:b1:08:5b:9b:4a:c1:02:c2:c5:37:2e:
e6:ee:5c:7b:10:76:86:1f:bd:a3:62:39:10:14:7f:
3f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:50:FE:28:CA:B5:C2:A9:45:17:25:2E:61:49:3F:A4:68:5F:19:50
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c4:d0:b7:36:86:b4:a9:fc:b3:ca:14:98:f1:71:f8:37:8e:
24:af:61:8b:5b:5f:79:10:ba:c3:2d:6a:e1:84:50:1a:f8:ad:
f2:b1:f3:4a:03:30:13:75:e8:a6:7c:0a:0a:26:6e:2a:87:25:
14:bf:2a:b1:28:d0:03:1e:e9:d8:f7:b3:b9:19:a5:fe:be:7e:
8a:39:60:64:61:d3:46:23:40:2e:c5:e6:a2:23:15:5e:7a:ec:
1a:99:3a:ce:49:39:3a:4a:d7:ef:00:28:b8:9e:df:cf:26:a2:
96:4a:85:7c:e5:77:dc:f8:01:a7:4b:6a:0f:52:f6:8b:63:bf:
19:b5:80:47:41:75:62:b5:e3:7f:ed:44:c7:93:d9:25:ac:be:
d5:73:27:25:f3:95:95:91:2d:d5:46:ef:2e:b6:ea:dc:8f:6c:
13:4b:cd:b7:9b:6c:69:e0:b2:5b:51:cb:a9:a1:be:f0:eb:86:
3e:45:75:32:76:fe:03:05:a1:6f:80:60:42:53:64:b4:75:cd:
2d:a3:f3:f2:dc:39:fc:bf:95:40:3a:e4:30:0d:80:57:cf:7f:
b7:7f:9a:d1:24:cd:52:59:25:c2:96:3c:ee:7c:dd:4c:ac:6b:
33:71:03:8a:22:ff:dd:4a:ea:e7:b7:a2:49:8f:39:f1:f4:24:
6f:c4:31:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:43:28 2025 by rpki-client