Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216030.roa
File: AS216030.roa (raw, json)
Hash identifier: Z1/niRCi6bZ9kB282Gr60dVS7fUr+wNvsOhLslGFHf0=
Subject key identifier: 0F:57:D4:7D:F8:B5:12:2E:83:DB:59:AF:5B:78:BC:50:2D:6A:5B:8A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 52E0C272663AC364EFE3ECE402AD53252D914DC0
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216030.roa
Signing time: Thu 29 Aug 2024 03:36:06 +0000
ROA not before: Thu 29 Aug 2024 03:31:06 +0000
ROA not after: Thu 28 Aug 2025 03:36:06 +0000
asID: 216030
IP address blocks: 191.101.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e0:c2:72:66:3a:c3:64:ef:e3:ec:e4:02:ad:53:25:2d:91:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 29 03:31:06 2024 GMT
Not After : Aug 28 03:36:06 2025 GMT
Subject: CN=0F57D47DF8B5122E83DB59AF5B78BC502D6A5B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:e9:32:5c:77:83:65:1b:7d:fd:8f:6a:e2:
99:13:98:74:0d:ba:8f:29:03:22:cc:83:27:d2:4a:
c6:81:c3:22:41:65:fb:8a:cb:41:a5:a3:a2:ee:e3:
a5:a8:b6:61:50:a0:5d:5f:c0:63:2a:33:cc:12:39:
6e:f3:0e:15:de:1f:0a:90:fc:90:08:b0:e3:f8:6d:
d8:cd:14:8d:4b:a0:c5:d7:8c:fa:be:cd:ac:d0:00:
1e:10:f2:d7:17:1b:b2:68:ee:c5:70:af:2a:2a:ad:
b6:ac:46:41:e3:89:8f:11:42:ad:9a:bc:71:51:a1:
90:8c:f1:69:57:34:a6:26:d1:50:75:30:0e:30:80:
00:3e:19:dc:a9:6c:1f:db:de:89:24:cc:99:8a:15:
07:81:3f:54:1e:a2:e2:6d:6d:e6:6c:c1:ad:30:d5:
9c:c2:e1:a9:a7:35:6b:23:fd:f6:fb:d0:3d:be:9d:
59:ef:62:05:5e:3a:e8:c8:33:19:a0:4d:a0:f4:92:
0d:02:11:a4:83:44:31:f2:73:bf:b7:e1:d8:2f:05:
b4:76:05:3e:7e:76:f2:1a:ec:35:3d:40:e8:6b:6f:
38:65:ed:6d:44:9d:d0:ea:d4:ef:19:bd:3e:2b:23:
9d:74:cc:52:06:a7:b7:6a:61:12:02:2c:64:c3:3e:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:57:D4:7D:F8:B5:12:2E:83:DB:59:AF:5B:78:BC:50:2D:6A:5B:8A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c6:08:e8:41:19:32:5c:30:06:5f:21:a3:dd:4a:11:6b:09:
8b:ea:d3:e1:0d:0b:f6:56:7b:26:09:ae:87:37:ef:fa:c8:eb:
37:6a:72:b9:1c:d3:09:c8:34:c4:23:0c:fd:84:18:fa:3c:fe:
31:dc:68:59:72:68:8b:38:47:50:95:34:2e:b7:3f:ef:2f:f7:
7f:f6:17:85:69:69:dc:c6:d4:cf:9e:ce:1b:e6:9d:a8:14:7f:
cc:9d:8b:f5:71:77:f6:1f:06:f1:d1:e9:b6:d8:7c:3c:ef:b7:
a5:ea:c9:c7:60:ed:ca:76:20:da:c5:17:4b:bb:60:ad:41:90:
9e:f0:cd:df:48:d6:5f:f3:4d:b4:bd:49:94:5a:fa:1a:90:16:
d1:b5:a7:0f:c5:f5:d7:96:3a:86:08:45:12:3f:71:db:2c:56:
40:d0:e1:10:26:18:a9:78:dc:21:5e:da:ed:19:12:13:f8:17:
3f:30:f0:48:6d:a6:17:0b:c3:26:8a:a7:51:b3:e4:9a:09:ee:
81:47:36:95:75:6f:5c:52:7d:9d:1b:5b:2a:f3:7a:6e:c2:38:
d3:9d:cd:27:4e:5e:d0:7b:f2:15:32:f8:0f:4d:cf:b1:dc:c2:
a5:49:de:ef:2f:75:12:1b:7d:e9:1d:33:3b:7d:49:72:d1:69:
f7:32:3a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:03 2024 by rpki-client on console-fra.rpki-client.org