Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270075.roa
File: AS270075.roa (raw, json)
Hash identifier: UKDeCpAPhhFzauVegxNqfp76MIu5t3HvWVTwEoNg+78=
Subject key identifier: EF:23:E0:06:07:09:ED:6A:13:38:AF:6C:23:04:34:99:16:69:1B:8A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6D41918D6CFACC1E7D17B376AE136ED005C65541
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270075.roa
Signing time: Fri 14 Jun 2024 17:05:18 +0000
ROA not before: Fri 14 Jun 2024 17:00:18 +0000
ROA not after: Fri 13 Jun 2025 17:05:18 +0000
asID: 270075
IP address blocks: 181.214.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 07:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:41:91:8d:6c:fa:cc:1e:7d:17:b3:76:ae:13:6e:d0:05:c6:55:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 14 17:00:18 2024 GMT
Not After : Jun 13 17:05:18 2025 GMT
Subject: CN=EF23E0060709ED6A1338AF6C2304349916691B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:56:e1:ec:aa:3f:56:70:9f:0b:55:0c:b1:
32:47:5a:71:10:a0:2c:c6:01:22:c6:d3:ab:8f:db:
bb:3b:1a:24:8e:1a:30:3f:2a:36:ae:2d:bb:db:61:
ef:5a:2d:7b:0a:9c:b8:d7:0f:0a:c8:39:85:5e:99:
11:04:e5:89:5c:0a:ba:0c:31:f0:cb:e1:de:c6:f7:
36:e5:df:c8:34:a7:b2:0c:22:b0:b7:dc:c1:f1:a6:
c6:88:ed:8d:ad:ac:59:cc:ce:67:37:ba:10:54:de:
b6:1a:e3:08:ad:f1:56:ea:19:35:c9:b7:84:51:e5:
50:c6:88:64:4e:51:30:5a:8c:05:6c:8d:4e:f0:74:
9a:70:8f:0a:96:42:4d:cd:0d:22:79:28:0a:60:69:
0b:39:bb:4f:1f:1d:f4:bf:c5:46:d1:56:3e:d3:2f:
e8:d6:3c:e6:f4:c7:1c:90:2d:16:3c:6e:5d:bd:d9:
dd:a7:78:9a:3b:d0:4a:1b:4d:50:ab:a3:5d:a3:53:
bc:2f:32:d9:4f:8c:a5:c5:22:4a:eb:fd:ef:f1:d4:
eb:42:5c:53:6b:98:e3:3c:90:8a:43:9f:0f:0d:80:
6d:e5:71:74:84:64:a9:d5:bf:76:68:3d:05:5d:49:
04:83:b1:88:5d:57:69:ac:1f:fa:10:63:5a:7a:78:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:23:E0:06:07:09:ED:6A:13:38:AF:6C:23:04:34:99:16:69:1B:8A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.105.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3a:43:63:56:a4:aa:13:1e:22:0a:89:0d:24:a7:d8:c5:95:
68:c6:b0:9f:c4:0f:cd:95:71:a5:e3:82:40:db:85:af:46:82:
01:36:5b:9a:99:54:a5:e1:f0:b5:c2:6c:c7:43:0f:2d:69:06:
69:36:3e:cf:7f:b9:5b:0b:4e:12:fb:f1:e7:20:95:2d:35:88:
cc:80:16:50:bb:af:c6:14:f2:9f:cc:21:b8:8c:da:8e:16:0a:
d1:1f:c5:4b:61:1a:90:b3:bf:62:d2:f7:4e:2d:43:3a:66:54:
0f:c5:3c:c6:ee:12:57:83:2c:bf:2b:a8:1e:da:52:b2:f9:0c:
78:38:78:cc:39:7e:78:b8:bc:4f:0a:dc:da:ad:38:98:c1:f5:
f3:57:87:21:08:b0:0a:53:7b:97:a1:45:d7:7e:ac:e0:46:2e:
2d:ab:35:95:1a:2d:a2:b2:dd:3a:6c:9d:e5:8b:3e:5a:12:fc:
61:23:05:93:2f:7a:16:78:64:4f:1b:3d:19:82:b2:a0:2c:98:
5e:bd:00:3b:db:cf:bd:51:b2:ff:05:c2:aa:e1:e5:6d:36:e5:
d8:4a:b1:99:30:72:58:f0:96:07:dd:76:b4:07:55:64:82:4b:
88:1a:c3:1f:da:e3:34:a1:70:63:4f:96:11:94:69:f6:ea:db:
35:75:0c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:09 2025 by rpki-client