Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397086.roa
File: AS397086.roa (raw, json)
Hash identifier: 1jRSiD2H+0X2NnToWaxSzzwZQ/UoTqrzeVbVsBAw7lQ=
Subject key identifier: C9:CD:26:F3:8D:A9:07:F5:2F:72:00:C6:89:78:9B:78:97:74:17:33
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 528C77B7B6368726AD683492EED75BC5E906D3E9
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397086.roa
Signing time: Thu 21 Nov 2024 15:30:17 +0000
ROA not before: Thu 21 Nov 2024 15:25:17 +0000
ROA not after: Thu 20 Nov 2025 15:30:17 +0000
asID: 397086
IP address blocks: 181.41.218.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:8c:77:b7:b6:36:87:26:ad:68:34:92:ee:d7:5b:c5:e9:06:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Nov 21 15:25:17 2024 GMT
Not After : Nov 20 15:30:17 2025 GMT
Subject: CN=C9CD26F38DA907F52F7200C689789B7897741733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:61:36:8e:8d:50:02:df:7b:33:b6:36:35:
c7:24:16:fe:73:89:91:0c:33:a3:47:22:0b:9a:0e:
f4:1f:1f:62:6e:48:4e:a6:9f:57:c0:d6:6e:12:42:
1c:cd:e6:c7:c8:42:07:1d:28:6d:50:98:dd:d3:f7:
c3:53:43:73:cc:80:8c:71:73:d5:5b:4e:d1:0a:d5:
eb:9e:21:1e:0f:70:fe:f1:81:98:b8:58:76:d6:ce:
e4:59:e0:41:5b:89:a7:35:02:20:47:64:18:ab:42:
16:e3:c6:65:b2:dc:c0:7c:e8:bd:37:fa:14:62:ee:
55:db:0f:33:97:ce:9d:bb:76:7d:6b:3a:50:45:1a:
2b:e0:45:7b:8b:f5:6c:a8:4a:93:35:14:3e:ca:1a:
39:cb:ca:38:d7:af:61:a5:c5:cc:fa:8a:a6:25:03:
a1:ac:c3:c3:c6:ee:a4:79:55:ec:4b:b2:36:b5:f5:
e7:51:66:55:1b:fe:af:85:a4:df:fe:68:6f:90:fa:
cc:0f:fb:06:a9:5f:4b:4d:d3:d3:80:55:1a:7e:fd:
86:78:c7:5a:a0:4a:c6:94:d0:3b:df:da:37:08:02:
7d:9a:2a:7f:f1:b2:1f:a3:eb:5c:7a:44:77:8e:ee:
ea:ad:e8:87:f4:88:a0:b3:c7:a0:4a:a8:09:ec:e9:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:26:F3:8D:A9:07:F5:2F:72:00:C6:89:78:9B:78:97:74:17:33
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS397086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.218.0/24
191.96.174.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2a:36:ea:11:47:0c:40:10:2d:2e:33:0c:a4:6b:8e:4a:8a:
51:17:b9:1b:13:f4:c7:64:69:c9:27:5a:c1:c2:bc:dc:35:2a:
40:55:db:8f:c3:91:56:87:f9:af:4b:58:b0:64:74:34:91:9c:
a2:ee:73:60:3f:44:e8:81:93:91:4c:d7:fd:31:99:0c:c2:8f:
58:02:77:2f:20:1b:ed:2f:cb:ed:a9:4c:23:e2:b6:fe:aa:15:
92:1f:52:5a:be:54:3e:4b:7e:8e:d5:04:ca:74:d2:fd:91:8d:
e4:0b:43:d7:b3:c6:c8:b9:7a:e3:50:c3:42:f3:4b:38:9c:7c:
8c:3b:85:03:4f:30:17:d5:5c:e5:6a:25:c9:67:ee:e6:e1:a6:
69:37:f0:b4:de:d7:70:a4:ba:71:eb:36:44:31:41:fb:fc:85:
15:be:75:1e:55:0f:96:45:c4:f0:ed:d7:e9:c6:21:db:f6:2d:
42:5b:2d:09:a9:1d:ea:22:85:d5:14:47:03:94:16:e9:19:a9:
49:96:1d:bb:a2:70:5a:c3:d6:ca:c4:12:94:57:77:1a:ff:99:
10:ce:d4:7e:c5:42:eb:d6:b6:55:50:73:8e:71:11:e1:7b:72:
6c:ab:be:14:83:6d:4a:71:94:5f:1e:ba:5c:91:fe:f3:d7:9a:
ca:9c:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:38 2024 by rpki-client on console-ams.rpki-client.org