Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35392e302f32342d3234203d3e203436343332.roa
File: 3139342e3134372e35392e302f32342d3234203d3e203436343332.roa (raw, json)
Hash identifier: IcZqsJQ4wMkT6/0cBmZvzu+flScy92xKklcM4rEfeh8=
Subject key identifier: 93:0D:35:C0:EC:9D:05:32:8B:4D:FE:5F:EE:83:D4:86:76:CF:34:33
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 46A0EBE6CA62DD5A4137499166B1DF5F3BAC7D4A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35392e302f32342d3234203d3e203436343332.roa
Signing time: Fri 23 May 2025 10:40:54 +0000
ROA not before: Fri 23 May 2025 10:35:54 +0000
ROA not after: Fri 22 May 2026 10:40:54 +0000
asID: 46432
IP address blocks: 194.147.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 20:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a0:eb:e6:ca:62:dd:5a:41:37:49:91:66:b1:df:5f:3b:ac:7d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: May 23 10:35:54 2025 GMT
Not After : May 22 10:40:54 2026 GMT
Subject: CN=930D35C0EC9D05328B4DFE5FEE83D48676CF3433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:22:14:ea:8e:3a:ec:41:08:e8:a8:8e:2c:
f2:f6:c7:f4:2a:7e:26:e8:a3:26:3f:a7:2f:34:9c:
07:19:99:29:30:20:db:c1:31:fe:27:4b:5e:60:e3:
7a:52:20:36:c7:98:5e:52:b8:47:e4:14:df:69:b3:
1c:10:0d:bf:4c:54:d4:fa:b3:8c:a3:a2:e1:96:29:
05:34:4b:83:a5:d8:ec:10:67:ae:cb:a7:ae:2c:70:
ea:44:c9:b2:23:ae:ba:9f:8e:46:4b:90:bb:dc:94:
02:db:41:89:35:86:74:9c:40:a1:7b:34:c1:32:a2:
95:ba:53:67:df:55:c6:94:00:6e:4c:13:55:fe:44:
92:c7:f2:4e:0f:04:1f:5b:ba:50:1f:83:fd:c0:ce:
8e:a5:16:d8:66:4d:36:05:b4:0a:6c:23:1f:be:e6:
b8:b7:33:66:36:15:6b:46:c1:15:14:0f:9b:d3:41:
7e:1f:e9:35:8e:4f:be:6a:6a:73:e9:9d:c1:50:1f:
ad:3f:46:02:32:91:44:c2:19:fe:3b:2e:2e:39:14:
a5:ac:69:1b:64:81:45:d1:2c:bf:ef:3f:a4:16:8b:
3c:86:f0:df:c7:d6:14:3c:47:3c:ec:5f:0e:ce:9d:
2f:2f:be:70:41:5d:32:80:d4:1b:09:e7:e0:bf:d4:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0D:35:C0:EC:9D:05:32:8B:4D:FE:5F:EE:83:D4:86:76:CF:34:33
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139342e3134372e35392e302f32342d3234203d3e203436343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.59.0/24
Signature Algorithm: sha256WithRSAEncryption
be:b6:d0:34:1a:8c:f9:b2:fc:19:c0:de:9c:f2:8b:d9:c9:6f:
aa:41:74:f2:43:86:d2:70:7b:87:b2:4a:d9:c8:fd:e3:62:a6:
72:03:fe:c6:12:c3:73:df:03:10:78:b0:8f:b5:fc:d4:80:66:
de:c0:d3:d8:fe:ef:81:9d:ed:a1:1f:a8:c3:20:8c:a2:95:75:
30:a6:fd:4c:f7:50:b6:fb:c6:00:93:2a:1b:d5:78:57:3f:fd:
42:66:b8:13:cd:da:a1:f8:52:93:c3:3a:5a:e2:29:7b:bc:03:
d4:97:ae:3f:8e:19:57:c6:37:a8:f3:0b:10:21:2c:43:7c:1b:
7b:3d:1c:36:19:41:67:fb:41:d7:ae:ad:c4:74:6f:45:55:eb:
58:25:87:b0:01:b3:29:4d:40:b6:7d:b4:63:4a:de:70:c5:4f:
95:50:34:6b:5b:6b:a5:62:11:2a:e9:09:47:8d:3c:fc:b6:78:
85:72:59:13:fb:f0:17:43:9d:54:e6:3a:19:e9:de:22:34:a7:
42:8a:8e:a3:a1:56:b2:74:54:75:c3:8b:72:92:0c:69:cc:ee:
42:31:b6:52:3f:be:51:b7:46:84:e3:ae:59:92:0f:27:33:d2:
6c:54:2c:fd:73:90:11:7a:1a:7e:53:ea:70:da:6f:f9:7e:82:
f3:e3:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:39:10 2025 by rpki-client