Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa
File: AS198651.roa (raw, json)
Hash identifier: ybs3rO1IPP/QXJfjDDTEU3gPeMzgj9DAbgMlBG/iJ+A=
Subject key identifier: 1D:B4:C5:8B:38:25:B8:57:B2:EC:6A:CB:52:55:74:26:BF:19:8B:C0
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 304A09465064EF7B963FCBD303519F1507B22A73
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa
Signing time: Wed 31 Jan 2024 08:05:10 +0000
ROA not before: Wed 31 Jan 2024 08:00:10 +0000
ROA not after: Wed 29 Jan 2025 08:05:10 +0000
asID: 198651
IP address blocks: 185.172.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4a:09:46:50:64:ef:7b:96:3f:cb:d3:03:51:9f:15:07:b2:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:10 2024 GMT
Not After : Jan 29 08:05:10 2025 GMT
Subject: CN=1DB4C58B3825B857B2EC6ACB52557426BF198BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:be:16:75:39:cb:aa:0d:00:59:3b:4b:d0:ee:
29:71:08:f6:ad:73:f2:b7:ad:5e:e8:9e:ca:af:b0:
f3:cb:90:77:40:fb:5b:c6:d3:e3:e2:0c:9f:3f:bf:
8e:39:b9:b5:58:68:7d:70:1d:bd:ae:7d:9d:9c:c9:
f5:90:ec:7a:8c:86:b7:66:e0:26:4e:22:cb:75:c3:
3b:80:52:d3:80:f6:29:82:71:26:0c:39:0a:8c:23:
1b:a0:0f:af:52:ab:93:df:f1:bb:81:09:31:a6:34:
d7:91:81:60:d0:f3:51:f9:c0:fb:b1:8f:1a:ca:5d:
0c:cf:12:b9:54:ef:dd:81:aa:ef:2a:ed:3a:86:c6:
7f:9c:dd:87:19:42:62:c4:be:4d:09:79:fb:f9:0a:
99:27:9e:f6:bd:18:27:18:9c:04:de:8d:cf:29:7b:
ef:e0:ea:94:49:f4:51:fc:b1:83:d5:9e:49:b2:6a:
58:cf:c1:c1:1a:25:fc:4e:cc:e2:f0:ac:cf:40:da:
8d:24:da:83:e4:5e:ad:c9:e2:d4:86:a5:21:08:1b:
9d:63:fc:b2:aa:10:6b:30:e4:91:1a:90:b2:27:88:
d6:ca:2d:ea:b5:e5:98:0a:fc:2c:0c:98:7c:94:9b:
dd:2b:44:20:e6:db:9a:bc:dd:8a:04:36:b0:bc:b9:
92:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:C5:8B:38:25:B8:57:B2:EC:6A:CB:52:55:74:26:BF:19:8B:C0
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS198651.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.65.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a4:87:16:e6:11:51:7c:fc:33:a3:1a:94:d2:c6:18:73:5a:
64:b9:3f:e4:30:66:75:17:5a:78:af:fb:d6:b7:f4:c9:fd:26:
10:3c:ac:7a:ba:ff:69:4e:d0:41:b7:a3:a4:2a:28:24:f9:19:
37:25:fb:20:6b:52:9f:32:cf:c5:36:cf:65:fd:89:f4:32:ac:
67:a1:47:e8:3d:a6:8a:2d:07:ee:69:de:36:7a:d7:e0:13:7a:
7f:c8:2e:b9:7c:00:11:b0:96:5f:c7:08:28:e9:56:dd:db:ea:
92:eb:71:c0:21:de:ab:78:42:f5:13:fa:f5:a8:84:0c:cb:80:
24:d6:8d:df:2c:e0:19:70:70:0c:a3:30:02:30:06:39:60:ea:
fc:6f:1b:c1:bc:b9:be:d9:1b:19:8d:99:bb:82:2f:21:5d:b0:
5e:37:ec:96:9d:2e:1d:08:e6:40:d2:2a:3c:54:a2:64:b9:18:
06:bc:80:c2:6c:20:01:64:66:99:d5:fc:84:82:03:9c:8a:03:
ea:5a:a1:a8:64:3c:c6:02:de:9c:2b:05:94:33:89:d3:53:6c:
e2:67:df:97:55:7a:c5:a8:25:db:de:1e:e0:1c:38:be:54:d7:
f3:f1:50:fd:b7:2c:e8:f2:94:10:4f:36:12:88:a1:ef:7c:e5:
33:d5:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 02:23:56 2024 by rpki-client on console-ams.rpki-client.org