Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14670.roa
File: AS14670.roa (raw, json)
Hash identifier: 4TDqdtAWb1N93XsCrqKJBS1BGNp127aC5ckpJu97W4k=
Subject key identifier: 15:67:2B:28:FF:32:26:8D:47:5B:A6:E5:36:C8:9D:45:F3:56:E3:EC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 71F1D82EA930962511D0ED7E5EA1EBBF2D01A6A1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14670.roa
Signing time: Tue 12 Nov 2024 14:43:27 +0000
ROA not before: Tue 12 Nov 2024 14:38:27 +0000
ROA not after: Tue 11 Nov 2025 14:43:27 +0000
asID: 14670
IP address blocks: 179.61.137.0/24 maxlen: 24
179.61.192.0/24 maxlen: 24
179.61.232.0/24 maxlen: 24
181.214.31.0/24 maxlen: 24
181.214.83.0/24 maxlen: 24
181.214.142.0/24 maxlen: 24
181.214.156.0/24 maxlen: 24
191.96.133.0/24 maxlen: 24
191.96.151.0/24 maxlen: 24
191.96.165.0/24 maxlen: 24
191.101.33.0/24 maxlen: 24
191.101.50.0/24 maxlen: 24
191.101.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:f1:d8:2e:a9:30:96:25:11:d0:ed:7e:5e:a1:eb:bf:2d:01:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 12 14:38:27 2024 GMT
Not After : Nov 11 14:43:27 2025 GMT
Subject: CN=15672B28FF32268D475BA6E536C89D45F356E3EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:14:ed:63:7f:b1:3c:48:60:7b:25:ef:11:
ad:28:e7:ae:f4:49:4f:7c:24:4b:76:aa:b1:1b:7a:
e9:a8:b6:86:3c:43:78:cc:3e:31:ae:f4:66:ac:af:
4a:91:78:9d:aa:bd:6e:6e:bc:45:a1:bd:8c:d2:74:
c6:d0:3f:0a:79:f3:7a:55:6f:15:e8:55:8a:12:b3:
11:19:34:15:fa:32:d5:82:66:35:44:f8:ce:16:74:
22:67:3e:b5:26:44:b4:91:73:a3:6c:5a:d9:b4:77:
6c:ce:93:b1:15:24:c2:54:55:c3:13:25:7a:01:a5:
04:86:f0:b8:58:89:a0:ad:86:d7:d5:ba:9e:59:18:
94:f1:eb:04:c7:db:1d:0d:34:4a:84:41:26:d9:9a:
c2:14:06:ec:20:36:d7:d2:13:cf:12:3e:9c:7a:62:
87:0a:ac:b3:70:07:de:aa:9a:ff:1e:9a:ba:bc:c1:
24:d8:b2:d9:0d:72:8d:d6:a2:4c:93:c5:12:49:81:
54:c1:8f:1d:bf:89:e2:73:fd:2a:6f:a3:b0:b4:03:
3f:63:31:2a:41:53:e2:14:db:71:ed:a7:1e:e1:87:
a5:c2:08:bc:43:6b:7b:6e:cb:04:20:a3:1e:5d:d8:
c6:4b:e6:82:e5:e3:f0:cf:d2:26:00:b2:81:1a:63:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:2B:28:FF:32:26:8D:47:5B:A6:E5:36:C8:9D:45:F3:56:E3:EC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS14670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.137.0/24
179.61.192.0/24
179.61.232.0/24
181.214.31.0/24
181.214.83.0/24
181.214.142.0/24
181.214.156.0/24
191.96.133.0/24
191.96.151.0/24
191.96.165.0/24
191.101.33.0/24
191.101.50.0/24
191.101.241.0/24
Signature Algorithm: sha256WithRSAEncryption
46:09:9b:94:50:02:06:48:05:7a:41:90:bf:74:e1:66:a9:ab:
46:42:35:df:fb:c3:2a:81:fb:97:28:28:a0:3a:b2:c0:cd:11:
d6:bb:c6:2a:a8:ca:0f:49:e3:8e:e3:b6:ef:67:1d:8f:d6:b9:
58:26:0a:ae:d3:b2:92:02:b4:ec:32:86:db:50:2c:a9:d5:0c:
7a:a3:53:e2:73:05:7b:62:c0:45:41:cb:90:eb:30:bc:13:13:
53:1c:51:31:d2:d5:a4:55:bb:31:d3:6c:16:33:61:de:7f:8f:
a2:34:ae:2c:ea:02:e1:ca:3a:e2:2d:cb:cb:b9:f9:f4:17:e8:
ae:f5:d3:11:38:d4:eb:20:b5:b9:c7:9a:75:94:90:64:94:0f:
ef:46:f5:6b:17:27:09:64:87:bf:11:e4:89:37:a0:92:10:7f:
8b:60:fe:02:82:e9:90:04:f1:4c:4f:17:7b:e8:2e:fc:4e:c5:
cf:a5:a0:76:90:82:e8:e7:b7:c1:ca:c0:3e:15:88:ba:f0:b4:
ba:50:23:19:5b:e5:34:96:c2:89:b7:91:24:c1:b0:0b:79:80:
74:83:b1:4f:41:f0:b0:27:6d:41:17:a6:c5:37:87:ef:d9:6e:
b8:72:4d:b3:1c:e7:f7:c6:81:eb:0f:d2:75:92:28:89:7b:29:
5e:31:d5:96
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcfHYLqkwliUR0O1+XqHrvy0BpqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDExMTIxNDM4MjdaFw0yNTExMTExNDQzMjdaMDMxMTAvBgNV
BAMTKDE1NjcyQjI4RkYzMjI2OEQ0NzVCQTZFNTM2Qzg5RDQ1RjM1NkUzRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEShTtY3+xPEhgeyXvEa0o5670
SU98JEt2qrEbeumotoY8Q3jMPjGu9Gasr0qReJ2qvW5uvEWhvYzSdMbQPwp583pV
bxXoVYoSsxEZNBX6MtWCZjVE+M4WdCJnPrUmRLSRc6NsWtm0d2zOk7EVJMJUVcMT
JXoBpQSG8LhYiaCthtfVup5ZGJTx6wTH2x0NNEqEQSbZmsIUBuwgNtfSE88SPpx6
YocKrLNwB96qmv8emrq8wSTYstkNco3WokyTxRJJgVTBjx2/ieJz/Spvo7C0Az9j
MSpBU+IU23Htpx7hh6XCCLxDa3tuywQgox5d2MZL5oLl4/DP0iYAsoEaY9i5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFWcrKP8yJo1HW6blNsidRfNW4+wwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQ2NzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMFQEAgABME4DBACzPYkD
BACzPcADBACzPegDBAC11h8DBAC11lMDBAC11o4DBAC11pwDBAC/YIUDBAC/YJcD
BAC/YKUDBAC/ZSEDBAC/ZTIDBAC/ZfEwDQYJKoZIhvcNAQELBQADggEBAEYJm5RQ
AgZIBXpBkL904Wapq0ZCNd/7wyqB+5coKKA6ssDNEda7xiqoyg9J447jtu9nHY/W
uVgmCq7TspICtOwyhttQLKnVDHqjU+JzBXtiwEVBy5DrMLwTE1McUTHS1aRVuzHT
bBYzYd5/j6I0rizqAuHKOuIty8u5+fQX6K710xE41OsgtbnHmnWUkGSUD+9G9WsX
Jwlkh78R5Ik3oJIQf4tg/gKC6ZAE8UxPF3voLvxOxc+loHaQgujnt8HKwD4ViLrw
tLpQIxlb5TSWwom3kSTBsAt5gHSDsU9B8LAnbUEXpsU3h+/ZbrhyTbMc5/fGgesP
0nWSKIl7KV4x1ZY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:34 2024 by rpki-client on console-ams.rpki-client.org