Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa
File: 39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: EKLRV+yroJXfB7Buci+Rrpmoavzz9o03ipzdH1+JALA=
Subject key identifier: E1:73:8C:8B:EE:96:A3:4A:7F:40:14:D5:7A:45:37:8A:76:A1:4E:A5
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 6645B40615A728D82A9E54BA104D4C047D2A57C0
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 20 Dec 2024 15:23:36 +0000
ROA not before: Fri 20 Dec 2024 15:18:36 +0000
ROA not after: Fri 19 Dec 2025 15:23:36 +0000
asID: 136787
IP address blocks: 95.214.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:45:b4:06:15:a7:28:d8:2a:9e:54:ba:10:4d:4c:04:7d:2a:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 20 15:18:36 2024 GMT
Not After : Dec 19 15:23:36 2025 GMT
Subject: CN=E1738C8BEE96A34A7F4014D57A45378A76A14EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:a0:75:11:47:80:10:56:92:99:9c:a7:92:
73:c5:ad:ec:a3:4e:69:f1:8b:3a:77:a9:ba:a0:a4:
bc:ea:d7:51:42:91:1f:8c:43:08:75:cb:e2:86:13:
73:77:34:71:91:e3:11:e6:5f:99:db:3c:9c:d2:76:
8a:e5:df:06:7e:bb:06:c2:e1:71:6d:9f:f3:f9:47:
91:23:68:0e:ce:68:61:eb:ed:d2:40:45:1e:0a:61:
43:51:4d:d2:85:e3:9c:d9:4c:4f:87:e0:6a:b0:af:
3f:b5:84:ad:00:d9:6e:0c:ed:3e:45:bc:92:a2:72:
f1:51:84:64:bc:17:1d:f1:5f:20:9f:61:79:2d:af:
7d:25:a0:6f:d7:3e:bd:e2:a6:25:3e:52:b6:ec:f6:
c2:f3:6e:58:f8:cc:dd:2b:a9:2c:f8:58:ad:83:74:
7e:00:50:49:41:4c:49:45:94:ed:c7:0c:93:42:b6:
5e:a2:e3:6f:7c:bc:e8:50:8d:e2:5b:04:56:9d:cb:
9d:58:31:91:74:92:e9:d6:fa:66:28:ac:e8:b6:c6:
1b:1c:d0:ad:0b:23:60:e5:af:0c:d3:bd:a9:e5:57:
6f:2d:ce:58:b4:db:b7:32:cc:8b:98:33:57:7e:1d:
2a:08:d2:3d:01:f0:a5:a4:35:67:27:05:55:69:38:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:8C:8B:EE:96:A3:4A:7F:40:14:D5:7A:45:37:8A:76:A1:4E:A5
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.218.0/24
Signature Algorithm: sha256WithRSAEncryption
54:78:6d:18:7e:8f:c8:c9:a4:92:94:5a:4b:3d:d2:c9:bd:64:
db:a7:38:1a:07:a5:b0:36:2f:ed:12:5d:76:ef:1b:d6:cf:5b:
aa:af:a1:16:8d:11:35:3d:2b:04:87:38:c1:a4:3d:02:32:52:
a1:22:24:15:7d:79:1e:42:87:34:4d:03:94:6d:c0:44:74:1a:
40:c0:dd:2a:c6:eb:e9:25:c4:48:00:64:79:a6:b4:57:dc:bd:
5a:ec:cc:f9:bf:bc:1e:c0:17:47:29:68:36:5c:eb:73:32:56:
b4:a4:70:4f:bb:f8:94:3d:db:33:40:56:97:87:34:79:31:82:
ef:01:e2:43:55:69:8a:18:c6:82:b6:18:86:62:19:9f:63:79:
b5:2f:40:31:ca:79:fd:64:02:0d:eb:08:03:0b:cf:3f:9c:40:
af:77:03:92:d5:57:1a:69:47:39:0e:15:06:89:e8:29:a1:03:
7a:6c:d6:8d:50:e6:05:8f:bf:7e:1f:c7:af:66:83:0b:7c:68:
e8:ce:15:bd:16:3c:f2:e8:bf:db:f1:11:a0:87:df:40:87:57:
c4:53:c3:cd:be:a8:e9:ad:68:ec:b3:65:16:be:7a:37:0a:26:
ff:34:e4:a2:f1:2a:03:67:5e:bc:9f:7e:87:f3:02:75:fb:95:
2c:82:a2:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:36 2025 by rpki-client