Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214000.roa
File: AS214000.roa (raw, json)
Hash identifier: j0H6QqAxtG7rvl+YsBVK4HT4OKGYdQwv7TIM9Z22sCQ=
Subject key identifier: E7:53:AE:AF:F1:1F:86:08:C4:53:02:4B:0B:A9:FE:B2:3D:A9:96:9A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1BB508E58BA3397D02C649F3BCDBF96551A2B61C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214000.roa
Signing time: Sat 01 Feb 2025 00:02:01 +0000
ROA not before: Fri 31 Jan 2025 23:57:01 +0000
ROA not after: Sat 31 Jan 2026 00:02:01 +0000
asID: 214000
IP address blocks: 179.61.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 07:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b5:08:e5:8b:a3:39:7d:02:c6:49:f3:bc:db:f9:65:51:a2:b6:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 23:57:01 2025 GMT
Not After : Jan 31 00:02:01 2026 GMT
Subject: CN=E753AEAFF11F8608C453024B0BA9FEB23DA9969A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:a2:0b:85:61:90:73:f6:4c:8b:24:f2:3f:
04:43:83:a6:c2:87:a2:19:9c:c2:88:7d:40:1a:9e:
4b:9e:e4:d1:ac:3c:c4:74:79:8b:38:b7:cd:28:01:
aa:f8:f7:07:6d:e4:1b:c0:87:7a:56:01:b7:08:ee:
8b:1f:a5:d7:e2:51:ce:d5:29:f3:1b:63:1a:dc:a6:
05:97:12:5b:13:20:bc:ec:64:c9:c4:64:4c:ce:c5:
ee:23:56:9a:16:4b:6c:37:9c:90:79:75:31:01:a0:
55:7b:9d:0c:44:32:2d:fb:76:5b:bf:d7:d1:6c:ed:
08:8d:d5:0d:8c:a5:27:33:15:af:5d:5d:7c:ee:ef:
04:bd:7c:9a:10:e6:9d:e3:32:e6:31:15:81:2d:36:
17:cf:08:1a:f8:28:0f:be:7d:0c:5d:27:2b:c8:ff:
97:c9:46:5e:6f:20:a6:0c:d4:18:fd:80:61:3c:4d:
6f:40:dc:b0:72:61:29:05:b7:45:91:87:62:80:ba:
fa:cd:e9:aa:f8:b6:06:44:8f:27:ea:08:56:92:7c:
c9:5b:23:64:f3:c1:83:7f:09:ac:1e:b5:f6:ff:eb:
b7:c5:79:9f:b1:36:47:7f:3e:52:40:63:22:7c:6e:
b1:f7:d5:03:ad:66:ee:1c:20:41:d8:3e:0a:69:fb:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:53:AE:AF:F1:1F:86:08:C4:53:02:4B:0B:A9:FE:B2:3D:A9:96:9A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214000.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.129.0/24
Signature Algorithm: sha256WithRSAEncryption
44:77:08:f3:5d:56:d3:99:13:8a:9e:de:b0:a3:f3:26:db:a8:
f8:1f:45:71:cf:a4:e7:05:7c:57:8a:31:b1:d7:a0:a7:7e:e9:
b7:93:f1:0e:27:e9:42:1f:35:55:b0:dc:ed:f5:87:18:03:77:
f7:ea:eb:79:2e:df:8b:a5:5b:71:03:0b:6a:c1:58:1d:06:56:
c9:78:e5:47:bf:92:35:54:77:d6:04:0b:7c:e5:4c:fd:35:f6:
bc:c2:fa:b0:f0:30:d0:ab:e5:6a:11:ff:66:8a:c5:ac:d3:31:
c7:2f:78:d2:1c:96:0d:f7:fd:36:47:58:e2:8d:5f:92:9b:38:
70:50:e4:20:95:2d:0b:de:c5:2c:c2:9c:bb:65:1f:d6:d8:82:
1d:d3:ea:ce:bc:a5:dc:d7:1e:4e:94:aa:72:fa:6f:c3:78:b3:
2a:ab:d6:5c:5f:f9:6a:16:a4:cf:ef:15:87:26:13:45:40:92:
4d:4e:13:10:fa:c1:df:e8:84:4b:1a:4f:ba:65:84:d3:f8:a3:
4b:1e:da:83:41:5e:da:f1:39:c7:a0:63:af:de:aa:16:35:83:
08:ab:a5:10:92:d4:54:1f:3b:ef:0a:6d:08:ce:eb:a3:86:f9:
1d:30:60:34:a8:cd:98:8c:ea:c9:89:33:4e:ab:54:93:89:67:
b6:41:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:33 2025 by rpki-client