Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396190.roa
File: AS396190.roa (raw, json)
Hash identifier: XsoRffh/A55FYTfKoC8fOE25pD5ndNobWekqjEm5xzE=
Subject key identifier: A7:60:84:90:B0:4E:BC:12:8A:E6:CE:60:3F:96:A1:7C:F9:2C:2C:5A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2E00CB8660CC5CF2121DD806449AB00B8BDF13E6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396190.roa
Signing time: Mon 07 Oct 2024 09:43:37 +0000
ROA not before: Mon 07 Oct 2024 09:38:37 +0000
ROA not after: Mon 06 Oct 2025 09:43:37 +0000
asID: 396190
IP address blocks: 191.96.104.0/24 maxlen: 24
191.96.202.0/24 maxlen: 24
191.96.254.0/24 maxlen: 24
191.101.11.0/24 maxlen: 24
191.101.25.0/24 maxlen: 24
191.101.181.0/24 maxlen: 24
191.101.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:00:cb:86:60:cc:5c:f2:12:1d:d8:06:44:9a:b0:0b:8b:df:13:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 7 09:38:37 2024 GMT
Not After : Oct 6 09:43:37 2025 GMT
Subject: CN=A7608490B04EBC128AE6CE603F96A17CF92C2C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:1a:b6:19:e8:40:79:37:40:76:c6:60:9a:
33:a4:50:cb:57:a6:7c:4a:07:59:1c:d1:23:e7:74:
1d:a7:5f:a8:82:58:6d:86:a4:ce:16:ee:af:3d:8a:
82:64:1d:d4:ec:dd:6c:99:0e:e5:0f:f2:8a:5c:93:
b9:ec:a7:b5:bf:d0:06:88:89:f8:d5:08:d6:f9:df:
4c:6c:6b:d5:07:f1:62:35:12:51:3f:df:b5:ff:ae:
b7:c1:9c:5c:5a:8a:a5:09:13:c1:63:de:be:19:24:
31:24:78:84:be:08:6c:4f:34:c4:4d:28:c6:9a:2f:
1a:50:e2:40:28:22:1a:55:92:64:f2:0a:b4:c2:cc:
9b:6d:d6:b9:87:4e:22:dc:e3:02:4c:48:da:4e:f0:
78:c8:fa:10:4a:4e:79:78:16:dd:8f:28:3e:b6:47:
62:eb:5a:ce:4d:bd:30:de:78:df:20:41:29:e2:f4:
a5:ea:66:87:ef:dc:0f:fc:4b:5f:85:27:87:e9:20:
48:f5:c3:f0:26:e2:26:82:b0:2f:d2:85:c1:e9:16:
f4:f6:0f:98:73:31:21:a2:bb:3f:e9:b9:f5:7e:97:
71:3b:97:21:bd:b4:67:5d:e2:df:bc:45:50:a9:20:
ee:30:cc:5f:1d:2f:a5:89:8c:72:6d:64:7d:f7:36:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:60:84:90:B0:4E:BC:12:8A:E6:CE:60:3F:96:A1:7C:F9:2C:2C:5A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS396190.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.104.0/24
191.96.202.0/24
191.96.254.0/24
191.101.11.0/24
191.101.25.0/24
191.101.181.0/24
191.101.188.0/24
Signature Algorithm: sha256WithRSAEncryption
75:58:10:99:52:2e:ea:73:f6:9e:43:8c:9d:9d:c9:0b:26:2d:
74:31:85:b9:ee:1b:de:e5:31:f4:c7:4b:c1:b0:2d:53:b9:8e:
39:ae:26:95:3b:d6:57:ae:e5:ac:fe:77:d0:a3:ae:58:6f:f4:
e2:7a:65:c3:21:71:54:49:4a:be:9b:41:74:1f:04:a3:36:88:
51:d3:5b:20:0a:e4:00:51:58:dd:67:fa:74:a9:09:e9:a2:a0:
28:f2:18:5d:b8:f1:01:a2:5d:3c:1c:18:c9:34:88:50:14:66:
84:5a:f8:e8:f3:42:eb:2d:09:29:82:b4:3f:d7:82:d6:79:06:
28:4f:21:07:ab:66:77:41:71:cb:69:79:63:6c:99:88:db:d7:
73:64:22:fe:c0:70:aa:3b:45:30:c9:5f:23:28:00:f4:c0:48:
ab:38:96:6d:c0:86:8e:ae:8c:41:68:bb:58:38:08:6a:7d:da:
66:51:15:1b:76:ce:bc:35:b1:dd:ca:cc:d5:16:36:38:7e:f5:
8b:25:7d:d0:fa:9c:1d:3c:66:78:17:56:26:4c:a8:ce:90:34:
8c:46:c3:45:a4:bc:e4:c7:e3:7d:36:22:61:92:fc:ea:31:96:
53:52:3e:49:34:02:39:b1:a8:fd:70:4b:2c:14:2d:ec:e6:9e:
56:7a:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:37 2024 by rpki-client on console-ams.rpki-client.org