Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35322e302f32342d3234203d3e20313437303439.roa
File: 3138352e3137322e35322e302f32342d3234203d3e20313437303439.roa (raw, json)
Hash identifier: 9a0T5pBLKCKXIUKaMR0N1DZ7YWKKaTw9ogm0JHc+j44=
Subject key identifier: 63:80:D2:19:1D:4B:0B:67:C6:29:07:88:72:63:89:8C:D6:F3:51:A4
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 4D6A51CC626ECC80444D547023C307DF56C2C15A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35322e302f32342d3234203d3e20313437303439.roa
Signing time: Mon 21 Apr 2025 11:46:07 +0000
ROA not before: Mon 21 Apr 2025 11:41:07 +0000
ROA not after: Mon 20 Apr 2026 11:46:07 +0000
asID: 147049
IP address blocks: 185.172.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6a:51:cc:62:6e:cc:80:44:4d:54:70:23:c3:07:df:56:c2:c1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Apr 21 11:41:07 2025 GMT
Not After : Apr 20 11:46:07 2026 GMT
Subject: CN=6380D2191D4B0B67C62907887263898CD6F351A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:fd:dd:a4:ba:f8:5e:49:a3:c3:f5:fa:12:
f7:1f:6f:7d:48:d6:71:10:0d:34:60:83:14:86:27:
11:7f:52:b2:1c:1f:cd:e0:6a:af:1a:8f:68:1d:d7:
e3:62:2c:e8:17:bb:a2:87:7d:19:30:01:d0:d2:ed:
7f:39:b4:b8:4e:2f:5e:03:5e:23:26:fa:4f:51:a2:
d3:9c:3c:75:f5:f0:84:8b:6e:e6:bc:ec:24:52:51:
96:16:6a:40:f6:cb:b1:0f:b7:4b:2f:8d:77:43:72:
b7:f3:56:44:50:95:df:91:5f:0e:d7:29:17:10:87:
40:f8:af:13:15:af:0c:10:55:55:82:16:cc:a1:70:
ef:de:e8:64:0d:63:de:de:59:80:8a:c7:f1:b5:e1:
8a:d3:c5:36:11:9d:55:99:5a:48:f9:45:fe:6b:47:
0f:8a:9c:5f:6d:e9:1d:c5:e7:8a:52:e8:7a:ea:6c:
78:3f:42:e6:62:8e:1b:98:69:80:35:07:48:17:cd:
e3:42:7d:f7:5f:e6:f9:bf:a4:cc:11:cb:8b:b3:9d:
02:9e:a9:69:03:e7:dd:bf:68:a9:1d:90:63:b0:08:
b7:5b:d2:ed:d1:40:ec:86:06:1f:99:22:35:d0:46:
7a:40:fd:40:6c:10:9c:6e:eb:84:2d:b8:6f:1a:94:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:80:D2:19:1D:4B:0B:67:C6:29:07:88:72:63:89:8C:D6:F3:51:A4
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3138352e3137322e35322e302f32342d3234203d3e20313437303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.52.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9d:01:56:04:f6:46:ae:a8:45:9a:63:35:16:82:a3:db:a6:
bc:05:52:f5:79:41:89:10:11:62:7b:51:fe:61:a1:98:52:1e:
09:11:2d:ff:ca:81:18:f0:d4:13:91:55:4a:78:dd:7c:4d:5d:
ed:68:ab:02:6f:c6:57:cd:06:e2:6c:39:82:35:40:ee:e6:6f:
77:1c:8b:4e:3b:9e:4d:1a:51:af:25:1f:e2:18:a4:f8:ae:5a:
d3:64:e3:42:67:35:35:3d:45:77:3f:98:c0:4d:1c:ab:cc:54:
e0:10:27:18:55:65:8e:40:b9:1e:c8:2e:9a:5a:f6:99:fc:28:
e0:d0:21:13:8d:5c:b0:82:17:2c:f1:f2:a1:21:03:f0:e7:3a:
94:51:54:78:59:9a:53:44:a2:a6:f8:de:a5:58:33:04:d8:61:
76:f7:98:25:d5:c3:23:ce:3a:b1:0e:6e:e8:fe:0a:21:de:41:
2e:65:20:84:32:01:5c:04:31:41:73:d0:ed:02:94:16:3f:fa:
f9:54:b0:2c:1c:0c:85:0c:39:73:cf:27:17:24:06:b0:f2:f0:
48:b4:8f:fb:93:38:66:0e:21:40:ac:1f:d1:25:ad:4c:35:a2:
db:d1:06:0a:b0:ac:32:ff:44:4e:ae:80:68:6d:45:1b:e6:07:
d7:16:49:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:05:26 2025 by rpki-client