Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272962.roa
File: AS272962.roa (raw, json)
Hash identifier: A2b/h3v3lNRaQVt5iEnqJMtFXQmSZ82t0DOKWR1GHcY=
Subject key identifier: C7:BD:34:E1:EB:86:84:24:2F:83:59:8E:30:31:8A:14:34:02:DE:67
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 31B15EB132E3E1F00242804BE8E55F344E6E3461
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272962.roa
Signing time: Tue 08 Oct 2024 18:43:22 +0000
ROA not before: Tue 08 Oct 2024 18:38:22 +0000
ROA not after: Tue 07 Oct 2025 18:43:22 +0000
asID: 272962
IP address blocks: 191.101.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b1:5e:b1:32:e3:e1:f0:02:42:80:4b:e8:e5:5f:34:4e:6e:34:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 8 18:38:22 2024 GMT
Not After : Oct 7 18:43:22 2025 GMT
Subject: CN=C7BD34E1EB8684242F83598E30318A143402DE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:18:c1:fd:1f:20:2a:3f:da:f3:eb:22:97:
40:c7:4f:ed:2c:ca:09:95:f7:6b:e9:b9:79:36:12:
98:34:08:e4:9f:39:6e:4f:ab:2b:ef:32:88:1d:b4:
30:7d:33:b0:64:e2:43:27:fd:62:40:f3:d5:0a:f6:
42:93:01:a1:96:27:d5:10:80:73:b1:1d:5a:7a:91:
7c:8a:ad:fe:39:58:f8:9f:73:ab:04:48:1f:c0:d4:
34:50:3d:e7:51:0d:11:75:8c:5e:cd:be:ca:f8:86:
35:8d:b6:22:df:46:ab:e1:e8:ac:f9:24:37:fd:21:
58:30:fb:aa:f8:4d:f8:69:81:81:72:cf:5a:6e:4a:
d0:df:f9:44:3b:29:e0:74:07:3b:6a:f2:c4:e1:f1:
2e:4a:47:df:87:5a:55:4c:96:87:ca:15:00:99:32:
ac:30:be:58:96:9b:6b:c5:d0:30:e2:b3:8c:2b:3e:
2a:d0:28:f6:e2:24:a9:b6:28:9f:13:96:5c:82:14:
c0:1d:97:96:96:89:f6:02:22:9e:95:f4:eb:77:31:
79:51:a6:c6:d5:fa:71:88:69:15:e1:9e:1d:ef:ca:
b5:9c:93:d2:51:10:d6:4c:d3:e0:ba:3b:78:0b:f3:
40:35:19:7f:79:fe:ea:a9:5d:30:35:a6:bb:37:b4:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BD:34:E1:EB:86:84:24:2F:83:59:8E:30:31:8A:14:34:02:DE:67
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272962.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.63.0/24
Signature Algorithm: sha256WithRSAEncryption
97:bc:6c:d9:5e:28:bd:d8:49:65:73:6e:b3:d9:5f:2e:61:0a:
49:7e:11:72:60:99:66:6c:34:6e:64:df:f2:7c:75:63:ec:56:
a7:68:e9:23:62:fc:e0:7d:c9:27:b1:10:92:38:f0:d1:c2:0e:
e8:41:4d:3b:0b:a5:4c:07:e3:73:c2:cc:0b:fc:d1:99:58:83:
0e:59:b1:fb:43:7b:94:9f:ca:22:84:42:55:32:64:c3:c6:aa:
ac:e2:c6:b8:eb:33:3a:ae:d7:b6:38:ac:ff:6e:32:0d:d7:a5:
d5:3e:e0:c2:e8:da:0a:fd:89:86:87:37:a6:9c:93:b9:ba:03:
94:0b:9c:4a:42:7a:4c:7c:98:d5:cb:94:80:bf:d3:14:3e:69:
74:60:35:f9:ef:c2:1b:e5:13:ed:52:48:81:1d:d4:6e:68:a6:
2a:df:75:ba:7d:1f:74:78:36:08:5a:e1:6f:4a:e5:e2:f7:f2:
76:f0:02:cd:47:0e:f1:8e:41:cf:e5:5b:e5:ce:c1:56:cf:49:
a8:ad:23:bf:53:f2:14:42:53:51:f9:b2:60:3c:b1:b8:c1:40:
16:9a:d2:41:67:c8:23:9c:4d:3c:9e:9b:b4:01:79:49:6a:bb:
21:58:48:49:77:e6:cb:77:f7:6b:10:c2:a3:87:59:c9:b3:c6:
3f:ea:7f:58
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUMbFesTLj4fACQoBL6OVfNE5uNGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDEwMDgxODM4MjJaFw0yNTEwMDcxODQzMjJaMDMxMTAvBgNV
BAMTKEM3QkQzNEUxRUI4Njg0MjQyRjgzNTk4RTMwMzE4QTE0MzQwMkRFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuwxjB/R8gKj/a8+sil0DHT+0s
ygmV92vpuXk2Epg0COSfOW5PqyvvMogdtDB9M7Bk4kMn/WJA89UK9kKTAaGWJ9UQ
gHOxHVp6kXyKrf45WPifc6sESB/A1DRQPedRDRF1jF7Nvsr4hjWNtiLfRqvh6Kz5
JDf9IVgw+6r4TfhpgYFyz1puStDf+UQ7KeB0Bztq8sTh8S5KR9+HWlVMlofKFQCZ
MqwwvliWm2vF0DDis4wrPirQKPbiJKm2KJ8TllyCFMAdl5aWifYCIp6V9Ot3MXlR
psbV+nGIaRXhnh3vyrWck9JRENZM0+C6O3gL80A1GX95/uqpXTA1prs3tI+NAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUx7004euGhCQvg1mOMDGKFDQC3mcwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjcyOTYyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2U/
MA0GCSqGSIb3DQEBCwUAA4IBAQCXvGzZXii92Ellc26z2V8uYQpJfhFyYJlmbDRu
ZN/yfHVj7FanaOkjYvzgfcknsRCSOPDRwg7oQU07C6VMB+NzwswL/NGZWIMOWbH7
Q3uUn8oihEJVMmTDxqqs4sa46zM6rte2OKz/bjIN16XVPuDC6NoK/YmGhzemnJO5
ugOUC5xKQnpMfJjVy5SAv9MUPml0YDX578Ib5RPtUkiBHdRuaKYq33W6fR90eDYI
WuFvSuXi9/J28ALNRw7xjkHP5VvlzsFWz0morSO/U/IUQlNR+bJgPLG4wUAWmtJB
Z8gjnE08npu0AXlJarshWEhJd+bLd/drEMKjh1nJs8Y/6n9Y
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:37 2024 by rpki-client on console-ams.rpki-client.org