Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215348.roa
File: AS215348.roa (raw, json)
Hash identifier: h32D7pjv3cV6ZYrv+l/zRQRaLL2ax2C3QWAaHJeFPGM=
Subject key identifier: 6E:10:00:E3:CB:81:64:F0:A1:CB:71:BF:9B:82:CB:28:30:6A:91:D8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7BEAC046827776EE210A8BCC8697D0A01CA947B1
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215348.roa
Signing time: Sat 19 Oct 2024 06:39:53 +0000
ROA not before: Sat 19 Oct 2024 06:34:53 +0000
ROA not after: Sat 18 Oct 2025 06:39:53 +0000
asID: 215348
IP address blocks: 179.61.254.0/24 maxlen: 24
191.96.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ea:c0:46:82:77:76:ee:21:0a:8b:cc:86:97:d0:a0:1c:a9:47:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 19 06:34:53 2024 GMT
Not After : Oct 18 06:39:53 2025 GMT
Subject: CN=6E1000E3CB8164F0A1CB71BF9B82CB28306A91D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:d2:96:c0:ce:26:b9:d6:41:2f:a5:03:4a:
f5:bb:e5:9e:d3:1c:e4:b5:05:88:87:40:9b:b9:06:
33:56:41:d2:cb:61:36:9f:32:db:e8:8d:16:1d:17:
fa:47:a5:2d:50:66:0f:2e:8c:1e:41:77:81:7c:82:
19:ce:86:fc:40:b8:60:e3:41:45:d0:6f:c7:1a:08:
3f:42:bb:6d:5b:01:aa:7a:66:c3:da:91:1d:e5:09:
97:97:41:35:c2:d2:a1:12:5f:d8:b2:05:5a:f1:a4:
0b:36:a0:9a:ab:5e:57:c7:60:f2:f8:48:c1:4a:5a:
5c:8f:d9:b9:93:fa:94:17:64:3e:0f:8b:b9:87:bc:
e0:b9:05:57:65:18:39:87:d1:92:e0:8c:5b:b2:c7:
de:47:5c:5d:51:d1:cb:6f:ea:56:66:01:d6:ce:0e:
1b:b4:d4:1a:ce:a1:63:73:50:b7:93:a4:3a:67:87:
c6:fd:15:d4:ee:51:4b:7f:a2:0f:3a:4c:36:a5:6c:
a4:93:2f:9e:be:6b:fe:9e:30:6e:05:95:f9:f3:9f:
f2:c8:e9:b6:14:3a:24:87:99:a8:db:f6:5a:f8:a4:
b4:8e:a7:6d:51:d7:81:fc:7e:7d:5d:8d:44:dd:37:
d7:4f:ac:88:42:3e:63:e1:4e:56:06:29:a8:91:c0:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:10:00:E3:CB:81:64:F0:A1:CB:71:BF:9B:82:CB:28:30:6A:91:D8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215348.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.254.0/24
191.96.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d9:7a:26:d3:e1:82:bf:7a:80:f3:7e:6c:6d:6c:a7:e9:6a:
df:05:f1:5d:cd:82:7e:cc:e8:ca:a3:17:eb:c0:d4:fe:e4:ac:
c8:b4:9b:6f:67:fd:05:32:d7:b7:1a:68:1b:78:7a:45:ee:dd:
12:8f:f9:c8:a7:fa:ee:0c:35:71:4f:72:72:98:2f:88:f3:27:
61:cf:dd:4d:74:ce:fa:43:d6:f9:5e:62:7f:bd:e2:fb:80:43:
6d:e4:0e:17:9e:8a:b3:be:78:82:cc:b8:c8:94:d0:20:e1:22:
0b:8c:8c:3d:64:10:3f:19:74:49:f3:31:1b:2b:fa:32:29:ed:
ec:36:f8:41:6b:ea:95:93:78:0e:c7:0a:92:e2:51:4c:c3:1c:
82:31:65:1a:38:e4:03:57:44:0f:84:7a:9d:e1:94:1b:db:57:
7d:fe:bc:fe:17:a5:67:fe:29:8a:e7:f5:56:84:e0:02:df:65:
6b:27:a9:0c:f3:ea:3a:12:12:58:e1:0d:ee:79:68:a3:66:02:
94:15:8f:23:d6:b4:02:91:91:21:11:5b:a3:b2:49:78:31:2a:
3f:1b:fb:fc:eb:79:9d:fc:01:d1:a2:b0:be:b1:f7:13:c8:01:
dc:af:34:49:1b:35:1b:fa:83:b2:43:fa:0a:38:4b:3d:95:2e:
a1:64:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:03 2024 by rpki-client on console-fra.rpki-client.org