Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215030.roa
File: AS215030.roa (raw, json)
Hash identifier: Gwyhr36XX8TWAkJkokxPZP9tYW2fkSDGehq7gZz5UKU=
Subject key identifier: 7D:39:01:F7:DE:38:4B:55:61:BA:D5:45:AD:D6:57:34:DB:E1:FB:AD
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1ABF29E5FEBF8FCE07D3AB682C5D74B2F8006082
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215030.roa
Signing time: Sun 28 Apr 2024 16:33:27 +0000
ROA not before: Sun 28 Apr 2024 16:28:27 +0000
ROA not after: Sun 27 Apr 2025 16:33:27 +0000
asID: 215030
IP address blocks: 191.101.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:bf:29:e5:fe:bf:8f:ce:07:d3:ab:68:2c:5d:74:b2:f8:00:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 28 16:28:27 2024 GMT
Not After : Apr 27 16:33:27 2025 GMT
Subject: CN=7D3901F7DE384B5561BAD545ADD65734DBE1FBAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:56:d5:98:4b:af:27:2c:42:b8:4c:ca:ea:
2c:1c:98:08:3a:c3:e6:de:d4:28:03:3c:e6:54:51:
59:b6:fe:72:fa:e5:a7:7a:88:ff:c2:a1:41:d5:1a:
4b:e2:7f:28:c2:c1:60:7e:9b:72:c5:d9:17:58:ed:
0a:3d:26:6c:db:7b:99:aa:47:cf:03:f1:fa:6e:bc:
f0:b4:a4:1b:b8:ba:fe:32:a8:64:bb:31:28:02:e4:
54:7e:2b:f1:02:47:13:b1:09:79:15:3f:c3:50:2e:
fe:0c:dd:b4:28:10:86:13:45:dc:4c:7c:fc:f8:aa:
31:18:3b:7e:2d:ab:98:82:35:67:97:c6:6f:3f:f1:
60:12:3a:33:8b:9d:de:dd:53:fe:34:96:f1:70:92:
81:46:0a:16:e6:03:bd:06:a4:73:59:d5:61:3b:0c:
61:8f:11:b9:d8:27:ae:52:60:7f:5a:87:0e:62:33:
4c:09:c7:25:48:d1:12:35:a1:b3:23:40:17:dc:27:
9a:72:53:6d:aa:ad:84:b5:b4:3a:a6:af:2f:21:73:
a6:f9:3a:7d:be:5e:45:bc:c7:f3:4f:a6:f3:dc:7c:
0a:3e:0b:81:41:1c:22:63:b4:f6:d3:20:55:60:9b:
d2:49:12:fd:eb:ca:1f:f4:1d:31:bd:81:5b:c2:5e:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:39:01:F7:DE:38:4B:55:61:BA:D5:45:AD:D6:57:34:DB:E1:FB:AD
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:83:50:f5:67:0c:40:61:8d:05:70:c9:cd:05:26:9f:29:66:
31:b3:75:e1:2f:89:ca:e8:23:2d:7d:19:59:c4:db:0e:e0:e9:
fe:b0:02:27:4e:20:d5:23:57:7f:26:01:59:33:cc:48:6f:93:
1b:fc:92:2e:61:3a:20:bb:f7:5b:80:d5:e0:41:f7:3b:1c:6d:
bc:95:a0:6b:7f:83:c4:5e:40:d3:2e:06:97:68:73:4b:14:86:
07:af:b2:a7:44:d2:96:71:61:00:8a:58:5d:94:09:21:6b:66:
ca:1f:8c:93:79:d6:2a:59:d4:88:1b:e6:eb:17:13:63:97:aa:
e5:ce:86:14:81:00:4e:e7:1c:e7:5d:0d:6b:b7:d3:53:f3:d6:
18:e4:66:42:21:c7:e7:ab:12:0d:0e:c4:fe:15:e4:1a:62:de:
5e:cf:96:ee:fd:a9:f3:19:ba:3e:bb:39:82:46:28:0f:04:70:
df:30:69:54:72:aa:62:4c:36:dc:eb:45:5d:33:b1:d0:3d:b3:
80:52:55:76:ab:ad:4a:d7:0c:98:8e:8c:12:3f:23:4d:04:0c:
ba:06:bd:dc:4a:cd:62:1e:25:66:71:70:7f:16:9e:70:29:2c:
be:fb:32:20:1d:c1:7c:c7:fa:07:7e:75:bc:d1:30:31:6d:92:
09:9b:79:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:21:09 2024 by rpki-client on console-fra.rpki-client.org