Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198448.roa
File: AS198448.roa (raw, json)
Hash identifier: M9GpG9IqLtQbXbOG7AnNzF5a4jNnVTNIsr3YPSyjFEY=
Subject key identifier: 2F:36:46:23:D8:1B:70:0C:33:6F:34:11:D1:61:41:F3:82:B5:A5:0A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 11AEBC28380888FD0FF91C4380846D1EE5FA4A74
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198448.roa
Signing time: Sat 04 May 2024 11:30:31 +0000
ROA not before: Sat 04 May 2024 11:25:31 +0000
ROA not after: Sat 03 May 2025 11:30:31 +0000
asID: 198448
IP address blocks: 181.41.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 17:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:ae:bc:28:38:08:88:fd:0f:f9:1c:43:80:84:6d:1e:e5:fa:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 4 11:25:31 2024 GMT
Not After : May 3 11:30:31 2025 GMT
Subject: CN=2F364623D81B700C336F3411D16141F382B5A50A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:00:74:96:5a:7b:32:65:0e:38:77:12:31:
7f:aa:87:4b:53:98:b6:2b:c8:bb:1e:71:2e:09:50:
df:bf:7a:14:4a:38:a9:47:d7:54:fe:b8:36:1c:75:
67:fd:0f:02:f5:13:15:5a:02:71:91:92:09:fa:15:
66:82:06:19:6e:e2:a6:44:fd:a0:c1:f6:71:e9:6b:
d8:35:67:17:a9:18:d6:20:93:71:b6:89:98:51:98:
f1:1e:3b:9b:f3:f9:02:57:2e:b2:5d:6c:03:1d:9a:
95:77:9c:07:bc:97:95:9d:8a:8e:6e:22:1c:29:c9:
08:33:f0:75:49:f3:f2:49:eb:4a:58:17:f5:7d:90:
f3:0f:82:79:e1:30:0b:8e:cf:27:5b:f4:9f:72:1d:
09:49:84:fd:20:8b:31:4f:30:32:82:88:5c:d1:1c:
a5:17:81:b5:03:76:7e:de:ec:ba:b5:1a:3f:d5:28:
32:24:ba:91:bd:ee:05:51:19:b0:26:2e:29:3d:f0:
92:00:05:06:76:69:23:bf:6e:46:d4:3e:2e:fd:8b:
60:fb:3e:fd:f6:be:9a:2e:b7:be:84:1d:6b:b5:00:
88:08:da:c3:f3:ab:0f:7c:ee:6c:9a:7d:d7:ed:eb:
28:f9:67:20:b3:e4:d0:c3:0b:c3:8a:aa:08:b9:33:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:36:46:23:D8:1B:70:0C:33:6F:34:11:D1:61:41:F3:82:B5:A5:0A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198448.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.196.0/24
Signature Algorithm: sha256WithRSAEncryption
67:be:4d:2a:78:19:72:7e:e8:9d:28:dd:70:9c:dd:3a:ed:32:
d1:57:08:0c:b3:45:cf:bf:b0:b6:ee:c7:ff:50:7c:cb:19:d9:
87:1f:11:42:fd:38:8f:e4:76:97:ae:df:ed:3d:6b:6f:eb:b0:
ef:04:15:f1:93:8d:1a:ec:0d:1f:c0:8a:4b:23:c6:d8:0f:2f:
82:80:56:c2:49:48:43:73:9c:cd:50:1f:f7:c4:f1:5f:5f:31:
f5:71:50:de:6e:6c:9d:d3:a1:4a:16:05:73:9b:89:bb:a4:0e:
d4:31:3b:16:f2:d0:ac:96:92:6f:10:e6:7e:c5:cc:aa:46:99:
f7:b3:9f:9b:80:44:d3:2a:2f:23:fc:7c:71:58:c7:75:38:c4:
8b:5e:10:26:55:3e:a9:04:92:74:33:c2:57:e4:09:23:e8:55:
50:2e:b1:41:47:cf:b0:29:4b:54:99:b1:5e:a6:bc:c6:70:d9:
01:5e:96:ba:c4:0d:e6:4f:72:87:5a:f9:6a:01:53:dd:80:5f:
bc:75:63:ec:5e:5c:09:78:bf:5e:74:0a:62:91:53:f7:ab:b4:
91:5a:45:27:0f:33:b8:95:82:8c:f3:d0:8f:35:3e:e5:5e:77:
bc:c6:e3:c2:0f:88:c4:57:12:0a:ec:47:07:92:ca:a0:21:bf:
8b:d7:72:6a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUEa68KDgIiP0P+RxDgIRtHuX6SnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA1MDQxMTI1MzFaFw0yNTA1MDMxMTMwMzFaMDMxMTAvBgNV
BAMTKDJGMzY0NjIzRDgxQjcwMEMzMzZGMzQxMUQxNjE0MUYzODJCNUE1MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQgB0llp7MmUOOHcSMX+qh0tT
mLYryLsecS4JUN+/ehRKOKlH11T+uDYcdWf9DwL1ExVaAnGRkgn6FWaCBhlu4qZE
/aDB9nHpa9g1ZxepGNYgk3G2iZhRmPEeO5vz+QJXLrJdbAMdmpV3nAe8l5Wdio5u
IhwpyQgz8HVJ8/JJ60pYF/V9kPMPgnnhMAuOzydb9J9yHQlJhP0gizFPMDKCiFzR
HKUXgbUDdn7e7Lq1Gj/VKDIkupG97gVRGbAmLik98JIABQZ2aSO/bkbUPi79i2D7
Pv32vpout76EHWu1AIgI2sPzqw987myafdft6yj5ZyCz5NDDC8OKqgi5M1u7AgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQULzZGI9gbcAwzbzQR0WFB84K1pQowHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTk4NDQ4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtSnE
MA0GCSqGSIb3DQEBCwUAA4IBAQBnvk0qeBlyfuidKN1wnN067TLRVwgMs0XPv7C2
7sf/UHzLGdmHHxFC/TiP5HaXrt/tPWtv67DvBBXxk40a7A0fwIpLI8bYDy+CgFbC
SUhDc5zNUB/3xPFfXzH1cVDebmyd06FKFgVzm4m7pA7UMTsW8tCslpJvEOZ+xcyq
Rpn3s5+bgETTKi8j/HxxWMd1OMSLXhAmVT6pBJJ0M8JX5Akj6FVQLrFBR8+wKUtU
mbFeprzGcNkBXpa6xA3mT3KHWvlqAVPdgF+8dWPsXlwJeL9edApikVP3q7SRWkUn
DzO4lYKM89CPNT7lXne8xuPCD4jEVxIK7EcHksqgIb+L13Jq
-----END CERTIFICATE-----
Generated at Sat Jun 1 03:01:11 2024 by rpki-client on console-ams.rpki-client.org