Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211091.roa
File: AS211091.roa (raw, json)
Hash identifier: vrNUL7vmCgaM4yI2DZjWuGtuLrlZvMlUGml6Il4MQXE=
Subject key identifier: 22:1C:24:DD:25:2C:41:2C:D6:63:0F:01:6A:AE:BB:3D:CB:0B:AF:29
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 15518E0620FB69CEE15E633BDC5EB2B6876635EF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211091.roa
Signing time: Tue 01 Oct 2024 09:43:22 +0000
ROA not before: Tue 01 Oct 2024 09:38:22 +0000
ROA not after: Tue 30 Sep 2025 09:43:22 +0000
asID: 211091
IP address blocks: 191.96.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:51:8e:06:20:fb:69:ce:e1:5e:63:3b:dc:5e:b2:b6:87:66:35:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 1 09:38:22 2024 GMT
Not After : Sep 30 09:43:22 2025 GMT
Subject: CN=221C24DD252C412CD6630F016AAEBB3DCB0BAF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:45:03:39:a7:81:8c:d2:79:eb:24:e0:bb:
37:ee:ca:68:75:b2:97:f1:16:7b:99:d9:de:8b:c1:
07:0f:b6:17:23:10:58:89:78:1d:d0:c3:62:c8:53:
54:aa:2b:ab:2b:62:ef:a4:6e:5e:cc:13:ef:82:7c:
23:04:22:bf:85:32:be:27:72:23:d4:eb:db:dc:7a:
09:dd:fb:ba:f8:78:fb:96:49:98:a9:76:22:da:04:
42:bc:d5:d6:e6:b5:09:a9:63:24:bf:cc:66:8c:13:
bb:9f:b8:32:8d:84:f1:43:8b:cb:03:6d:fe:98:63:
8b:12:61:ac:52:13:88:ab:88:aa:78:42:79:84:48:
76:34:0f:17:5a:d2:dc:ea:d4:54:96:38:08:56:5e:
50:29:44:b2:11:3a:3d:b5:09:5b:4f:63:95:d2:5c:
b7:3c:81:fb:a8:ad:79:88:b1:48:53:0c:76:a8:15:
01:66:bc:f7:ce:2e:43:2f:a0:85:df:fa:a8:2f:3a:
35:ee:d5:d4:2c:58:42:d8:9e:c4:2a:ca:f8:a1:c9:
b2:d6:89:b8:a9:a3:c0:11:03:1d:06:05:79:84:3e:
dd:3f:2b:81:22:70:89:4a:36:5f:4b:30:4c:65:94:
be:9a:ad:a4:08:53:0a:b1:d2:07:a0:ec:0b:a5:a7:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:24:DD:25:2C:41:2C:D6:63:0F:01:6A:AE:BB:3D:CB:0B:AF:29
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f0:05:d1:7e:ee:df:c0:ee:c0:29:7e:1f:d0:6c:f8:fd:01:
a8:37:c7:92:c5:2f:dc:3a:63:2d:41:70:c5:26:c0:27:16:f6:
18:8b:6f:bb:e3:82:18:ed:cd:d7:9a:60:e8:62:7d:84:a5:e5:
0e:04:85:81:01:74:a5:f1:53:21:b3:1a:ed:f3:82:0b:9e:e3:
62:35:e9:25:31:c8:ac:04:58:d7:2a:7f:b6:13:0a:24:75:15:
b6:ee:9c:dd:11:17:e4:a1:17:80:65:3f:c5:27:c4:9b:60:83:
49:b1:5d:08:02:b2:34:50:d4:bf:22:fc:0a:ed:f4:c6:cf:83:
f3:76:b5:88:69:52:77:f9:25:a2:04:fa:da:d6:91:6d:37:27:
81:98:80:67:c8:01:51:2a:b4:8c:80:b3:1a:0e:82:ce:a4:da:
52:25:fb:b8:fc:a8:26:cd:16:f4:4b:cb:6f:de:e0:4e:7a:ec:
58:1e:5a:64:b7:68:90:67:ae:7f:76:92:04:cb:17:82:54:f7:
05:c1:30:55:c9:12:60:4c:08:91:5d:d5:d2:01:dd:98:90:0f:
ba:be:73:3a:b4:cc:b3:16:2b:48:ad:74:68:1b:5c:d5:83:90:
2f:fd:3f:d6:10:69:0d:ff:37:b5:cf:a4:ce:77:ba:ba:bb:73:
20:e0:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:02 2024 by rpki-client on console-fra.rpki-client.org