Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207992.roa
File: AS207992.roa (raw, json)
Hash identifier: 2ziOcr7jOBDU2UBkqr+z5plq5tfTffJwr5hL6jiF0P4=
Subject key identifier: 38:4F:7A:E3:35:3C:37:F9:10:F8:BB:66:D7:A9:C5:E3:86:28:C2:E9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7224A0DB4CAC199513677E3C5D2F2E115EAFDF14
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207992.roa
Signing time: Thu 10 Oct 2024 23:43:25 +0000
ROA not before: Thu 10 Oct 2024 23:38:25 +0000
ROA not after: Thu 09 Oct 2025 23:43:25 +0000
asID: 207992
IP address blocks: 181.214.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:24:a0:db:4c:ac:19:95:13:67:7e:3c:5d:2f:2e:11:5e:af:df:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 10 23:38:25 2024 GMT
Not After : Oct 9 23:43:25 2025 GMT
Subject: CN=384F7AE3353C37F910F8BB66D7A9C5E38628C2E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:5d:80:4e:b3:90:ca:8c:ac:18:b4:30:5a:
95:85:e2:66:73:ee:3e:9e:cd:ab:09:4a:a1:88:27:
c1:5a:34:05:5d:51:88:4d:48:6a:74:87:30:7f:5c:
04:d3:e4:74:3f:05:7d:cb:16:10:3f:9e:06:7b:5d:
f9:0c:11:41:6f:ad:c1:e0:fd:1c:85:ef:92:c1:9a:
c5:d8:37:63:05:4c:01:13:e3:49:7f:94:05:d3:35:
b2:e9:aa:61:14:59:ec:ea:54:2d:ab:07:96:30:26:
2d:33:f2:7b:3b:89:96:ee:65:1f:84:c1:6c:72:20:
e1:09:96:53:36:7d:5a:85:5b:dd:c2:ff:1d:ab:48:
40:88:37:b1:df:91:f2:f7:30:26:bd:3c:cf:92:19:
34:91:c5:51:49:8f:76:bb:cc:2f:f6:d7:6f:e2:db:
30:49:ea:bc:5a:c1:97:04:3e:b7:e5:22:e8:3b:60:
a9:3e:33:b8:d5:4c:81:73:8f:5a:63:e4:39:10:72:
33:ea:9f:da:03:ad:7e:59:c9:ff:0b:d6:15:6f:f8:
53:ef:5a:24:27:1e:45:ed:6d:2e:45:7e:74:25:aa:
b9:d6:4c:8e:62:e8:ce:08:a1:ad:0f:45:a4:e3:d1:
54:17:d4:29:50:6d:f4:1e:ba:bb:7d:ac:6e:41:63:
52:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:7A:E3:35:3C:37:F9:10:F8:BB:66:D7:A9:C5:E3:86:28:C2:E9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS207992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.189.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d1:d9:60:7c:86:cf:52:c7:14:5b:ec:c5:9f:39:fa:41:96:
e3:72:06:50:96:19:84:70:f6:92:3c:99:a9:77:ce:a8:45:55:
58:ff:27:70:27:b3:05:c9:70:59:5b:aa:a2:fe:a7:c5:68:c1:
b5:9a:1e:c8:ed:e9:67:af:16:38:48:bc:9e:ed:6d:e6:c4:be:
95:28:ff:19:86:68:a0:f9:de:89:92:54:9f:80:3e:4a:6b:3f:
1e:b3:54:a9:49:9c:93:eb:50:6c:f7:11:1f:b0:85:c3:7c:cf:
2e:d9:8c:31:55:71:91:b6:ea:b0:40:a2:ff:25:73:e9:69:fb:
fb:2d:02:69:83:1c:b1:c7:8f:52:2a:62:b2:5c:7e:d6:32:2f:
9d:d6:31:de:bb:97:b1:09:87:7d:c7:dd:6e:d7:9c:5a:5f:ac:
c4:c7:97:da:d9:14:77:65:d2:40:83:46:29:a0:5e:42:b0:ec:
62:5d:74:b1:e1:5d:c7:07:d2:47:0a:67:b4:a2:20:3d:e1:dd:
28:8d:b3:d8:53:4e:f0:48:79:be:17:8a:9a:f2:1c:73:35:3a:
95:df:46:85:95:62:66:7d:ea:d8:54:fb:28:40:d9:42:f7:9a:
6a:17:74:17:85:0a:d4:c8:cb:44:d9:8e:3b:8c:29:cc:69:2b:
74:ac:b8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:35 2024 by rpki-client on console-ams.rpki-client.org