Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214326.roa
File: AS214326.roa (raw, json)
Hash identifier: PCWM/RDLh0dOvMbf5tBzQzApL+IgpIdiNJWjpBPbRus=
Subject key identifier: B5:84:D6:60:FA:37:A5:77:4A:15:E5:8E:B1:03:B1:95:D4:DB:B6:F7
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4720EBD088F8E8A49B7DC372DEE704AD40AD4382
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214326.roa
Signing time: Sun 01 Sep 2024 09:46:37 +0000
ROA not before: Sun 01 Sep 2024 09:41:37 +0000
ROA not after: Sun 31 Aug 2025 09:46:37 +0000
asID: 214326
IP address blocks: 179.61.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:20:eb:d0:88:f8:e8:a4:9b:7d:c3:72:de:e7:04:ad:40:ad:43:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 1 09:41:37 2024 GMT
Not After : Aug 31 09:46:37 2025 GMT
Subject: CN=B584D660FA37A5774A15E58EB103B195D4DBB6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ef:b2:68:4b:24:17:e6:af:1f:b6:4b:98:c9:
d1:1a:56:c7:74:87:7a:2e:54:43:cb:a4:4a:b9:6d:
4b:26:82:7c:64:db:34:65:f7:b4:f7:bd:af:c8:52:
c8:f6:24:93:ea:5a:f6:6d:d7:81:20:bb:5f:7d:b0:
51:05:86:62:30:c0:64:2d:04:f1:66:88:86:55:cd:
99:63:57:55:56:1f:a0:5a:e1:01:5a:f9:a7:fd:e0:
2e:1c:53:77:ea:26:fe:24:6e:48:4f:92:d9:3a:69:
a0:0a:96:43:d8:00:22:8d:5b:5a:a7:79:aa:55:1f:
0d:57:aa:8a:66:02:14:30:16:bf:b5:33:7c:ae:f2:
bf:26:24:c3:0f:07:65:9b:c2:89:09:75:01:27:35:
c0:a2:f5:7a:3c:e4:e6:0d:8f:6b:28:5f:1a:e4:87:
86:7b:d9:42:a4:5f:66:0f:ce:42:10:a3:35:fd:3a:
f5:c3:32:bf:3b:2a:0c:9f:8c:a8:4e:d2:3b:1b:f7:
bf:b4:26:4e:a2:03:6d:ad:5c:32:2b:e9:09:d5:55:
9c:9d:41:bf:13:9d:be:7b:41:94:43:2f:1f:9f:9b:
9c:5f:4d:34:00:ad:be:8a:0b:ca:b9:f7:d0:10:83:
ef:4b:56:d3:41:9c:f8:06:6f:9c:f4:8f:26:ef:20:
4b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:D6:60:FA:37:A5:77:4A:15:E5:8E:B1:03:B1:95:D4:DB:B6:F7
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2a:b9:5c:d2:e3:fd:56:9f:f2:65:2a:f7:1b:78:15:e9:fe:
92:66:6b:2b:1c:02:5e:52:b0:df:5b:de:98:1a:8a:40:79:07:
4d:5e:5d:9a:ce:81:f7:34:5c:93:33:2b:eb:e3:14:31:80:86:
94:53:c4:34:fc:8b:f9:9b:c6:af:b7:2c:27:5d:c1:5f:d8:b3:
c1:97:27:da:4b:18:f9:8e:9e:d0:05:da:3c:c2:f2:86:6b:0b:
bd:e2:64:05:6e:ce:cc:47:03:d4:8b:17:b1:b4:0e:07:f6:21:
b9:7a:bc:cc:54:2e:29:7e:00:b1:4e:28:9f:81:2b:79:8d:8f:
9c:e5:9b:b9:70:66:f2:4c:33:9e:f6:9b:94:b5:b6:35:87:ba:
82:d8:77:b1:a0:57:5b:b3:dc:c9:f8:7c:a0:50:c0:5c:44:e0:
84:c3:c7:cc:ac:63:2f:5a:bf:96:bf:dd:09:14:f9:ef:e9:6a:
3f:18:1c:96:84:b8:f6:ce:94:bc:3d:a5:f3:92:2b:7f:69:78:
77:30:70:21:94:89:d2:8c:d5:bc:b7:7a:56:7d:8d:44:49:ed:
02:5d:96:c8:b6:92:c0:e8:e3:b7:8e:56:6f:34:4d:c9:c5:aa:
44:c1:a0:50:89:da:a9:9b:ea:f4:90:6b:39:dc:06:73:22:48:
ca:c0:38:06
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIURyDr0Ij46KSbfcNy3ucErUCtQ4IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA5MDEwOTQxMzdaFw0yNTA4MzEwOTQ2MzdaMDMxMTAvBgNV
BAMTKEI1ODRENjYwRkEzN0E1Nzc0QTE1RTU4RUIxMDNCMTk1RDREQkI2RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR77JoSyQX5q8ftkuYydEaVsd0
h3ouVEPLpEq5bUsmgnxk2zRl97T3va/IUsj2JJPqWvZt14Egu199sFEFhmIwwGQt
BPFmiIZVzZljV1VWH6Ba4QFa+af94C4cU3fqJv4kbkhPktk6aaAKlkPYACKNW1qn
eapVHw1XqopmAhQwFr+1M3yu8r8mJMMPB2WbwokJdQEnNcCi9Xo85OYNj2soXxrk
h4Z72UKkX2YPzkIQozX9OvXDMr87KgyfjKhO0jsb97+0Jk6iA22tXDIr6QnVVZyd
Qb8Tnb57QZRDLx+fm5xfTTQArb6KC8q599AQg+9LVtNBnPgGb5z0jybvIEurAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUtYTWYPo3pXdKFeWOsQOxldTbtvcwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE0MzI2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz2u
MA0GCSqGSIb3DQEBCwUAA4IBAQALKrlc0uP9Vp/yZSr3G3gV6f6SZmsrHAJeUrDf
W96YGopAeQdNXl2azoH3NFyTMyvr4xQxgIaUU8Q0/Iv5m8avtywnXcFf2LPBlyfa
Sxj5jp7QBdo8wvKGawu94mQFbs7MRwPUixextA4H9iG5erzMVC4pfgCxTiifgSt5
jY+c5Zu5cGbyTDOe9puUtbY1h7qC2HexoFdbs9zJ+HygUMBcROCEw8fMrGMvWr+W
v90JFPnv6Wo/GByWhLj2zpS8PaXzkit/aXh3MHAhlInSjNW8t3pWfY1ESe0CXZbI
tpLA6OO3jlZvNE3JxapEwaBQidqpm+r0kGs53AZzIkjKwDgG
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:36 2024 by rpki-client on console-ams.rpki-client.org