Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210538.roa
File: AS210538.roa (raw, json)
Hash identifier: yixnQiOqDy3H+d1bRFCGohZ1LZ98I+WLAEI7fyoW0Po=
Subject key identifier: 33:F2:9A:E1:8E:1D:9F:0D:64:DB:22:51:9F:C5:B5:F6:2C:74:3F:ED
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 194219A433C94E7571F01B959CC960E55369E1F4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210538.roa
Signing time: Fri 13 Sep 2024 17:17:39 +0000
ROA not before: Fri 13 Sep 2024 17:12:39 +0000
ROA not after: Fri 12 Sep 2025 17:17:39 +0000
asID: 210538
IP address blocks: 179.61.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:42:19:a4:33:c9:4e:75:71:f0:1b:95:9c:c9:60:e5:53:69:e1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 13 17:12:39 2024 GMT
Not After : Sep 12 17:17:39 2025 GMT
Subject: CN=33F29AE18E1D9F0D64DB22519FC5B5F62C743FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:82:00:37:e1:10:31:f1:2a:8a:5a:f1:ca:
4b:dc:36:2f:66:b0:7c:88:e0:da:47:2e:db:c1:a8:
1b:73:e3:79:8c:d7:4b:9e:8b:0b:cb:2c:e6:0a:57:
85:c4:c5:d3:ec:5a:c8:36:d9:38:a6:3a:95:89:a9:
c4:f5:79:3a:4b:b2:da:3e:2d:e8:aa:56:de:6d:ff:
63:ef:a2:39:f7:97:67:0e:c2:fa:68:95:01:b8:a6:
46:96:78:96:4d:c8:4c:39:b0:48:62:d5:01:ab:f7:
e5:ed:ac:de:8f:03:99:f4:f6:d4:95:dc:b2:c4:37:
4a:77:f5:8c:bb:bf:0d:6a:32:34:61:0e:a8:0d:13:
8b:23:7e:15:f7:ad:fa:07:b0:c1:53:2d:b5:13:2a:
bf:51:20:58:58:0b:35:0e:ac:0d:c1:4a:ab:6f:3a:
87:55:f3:50:f5:54:8d:82:77:aa:a5:80:c0:18:27:
14:d7:1b:a1:5b:ab:4c:f8:1d:e5:9f:3d:4e:c6:29:
5a:3c:f1:ae:b7:f4:ce:cd:70:8b:02:92:81:c7:3c:
7b:f4:d3:8c:50:11:3c:f1:27:cd:82:a2:62:0d:74:
83:84:bc:80:db:7a:4a:4d:2f:fc:80:7d:eb:71:a5:
94:74:4c:34:f5:55:1e:13:5e:4a:e2:22:eb:bd:f0:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F2:9A:E1:8E:1D:9F:0D:64:DB:22:51:9F:C5:B5:F6:2C:74:3F:ED
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.147.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:29:b0:1e:e2:48:99:a5:c1:fa:6f:02:32:07:9c:a3:68:90:
f8:ef:74:c4:ea:30:fd:3d:59:d5:2b:5e:ec:09:aa:08:ac:76:
6c:45:2a:23:f7:50:03:2b:e9:9d:e9:24:77:f9:b8:ae:ad:85:
76:9c:7a:f9:e2:3e:de:b3:99:b2:67:e3:27:0d:56:46:7d:d9:
d5:80:13:59:06:d8:ec:d4:10:4a:ee:4f:b0:48:b1:c9:8d:e6:
d9:4d:0b:33:33:84:6a:c3:04:dd:87:ea:84:b2:00:1d:e3:6b:
39:11:10:9d:6c:9e:c4:12:0d:5f:35:ce:e7:94:82:3d:5b:82:
d2:04:d9:1a:c0:f2:5c:33:a7:bd:0c:89:73:45:50:c4:42:60:
ca:dc:14:fc:a9:27:d1:09:9f:f5:ee:a7:4e:4f:64:6d:4f:b8:
2e:fe:e7:a0:18:0d:a3:6b:93:51:87:14:0c:06:8f:7f:c1:55:
9a:d5:35:62:2c:bc:2d:7a:cc:3a:f9:d5:bb:f1:be:40:14:18:
b0:d9:99:ab:2a:4e:e2:50:50:ea:74:73:7b:af:cb:7d:45:bb:
49:6d:52:7c:38:61:ed:11:03:84:14:08:47:20:91:a2:c9:48:
0d:ac:b5:4a:0e:1c:cc:8c:4a:09:a6:2c:c5:85:44:98:09:74:
bf:ab:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:02 2024 by rpki-client on console-fra.rpki-client.org