Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48025.roa
File: AS48025.roa (raw, json)
Hash identifier: 0BgqhTXPPDC5LeLfH3h3fTPZW2s46ZJTkwkdoMZ5sZs=
Subject key identifier: 03:F1:14:D8:36:4F:A3:BF:1D:32:FB:40:6B:42:15:89:60:78:E8:15
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2F0BEC273F123A5F09E77CA1228F0785BE5F5243
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48025.roa
Signing time: Wed 31 Jan 2024 08:05:12 +0000
ROA not before: Wed 31 Jan 2024 08:00:12 +0000
ROA not after: Wed 29 Jan 2025 08:05:12 +0000
asID: 48025
IP address blocks: 45.88.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0b:ec:27:3f:12:3a:5f:09:e7:7c:a1:22:8f:07:85:be:5f:52:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:12 2024 GMT
Not After : Jan 29 08:05:12 2025 GMT
Subject: CN=03F114D8364FA3BF1D32FB406B4215896078E815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:62:4b:63:67:7b:38:29:5a:35:b3:6a:b2:
02:f3:50:1b:de:ae:95:be:c4:e4:e4:bd:57:0a:41:
7e:c7:71:68:00:4f:5e:a1:c9:c5:28:55:2f:0e:71:
05:90:2b:ff:d4:dc:4c:fd:a2:98:ff:0a:e1:8d:a2:
83:08:5c:40:60:53:29:83:6c:74:1d:af:4b:2b:d8:
56:00:ec:d7:b0:2d:50:d9:91:b8:a9:52:94:2e:f0:
a1:2c:83:18:dd:29:e9:de:06:4b:6b:ff:3e:b1:30:
a5:8e:79:dd:d3:f7:14:2d:af:85:7b:a7:c3:11:c4:
94:9c:45:e2:55:c1:c8:b9:7e:b4:c5:e9:7a:62:81:
76:33:30:aa:d7:b7:0f:22:4a:f7:ce:6c:da:b3:c7:
52:55:58:cc:be:02:d7:01:99:09:20:50:8b:18:9e:
d6:48:89:38:81:17:11:04:24:d5:48:b5:5f:6e:9d:
6c:17:1f:12:15:07:20:1d:88:8b:d1:66:7e:7b:69:
65:fd:ac:76:44:2a:21:40:81:c1:98:85:79:d7:30:
1e:a0:d1:b8:1b:b5:55:94:2e:02:b8:f3:a1:46:95:
78:ca:22:b6:5f:9d:47:87:44:79:4d:6c:bf:bb:27:
9b:ff:01:4f:26:44:9e:94:90:02:1c:7d:9e:3d:63:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:14:D8:36:4F:A3:BF:1D:32:FB:40:6B:42:15:89:60:78:E8:15
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48025.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:41:f5:ec:ec:c2:7f:82:2a:34:87:19:2d:1a:f3:eb:b6:4b:
15:16:10:a2:ba:92:ab:a3:b3:fe:a8:14:1a:92:41:de:eb:27:
0d:a9:b5:e1:69:7c:13:b9:91:0b:65:ef:c9:c9:ec:38:85:21:
c9:85:c0:47:6b:33:37:e6:47:d2:70:b4:f8:5f:94:d9:8a:1c:
79:d8:11:79:de:86:ab:1c:45:28:1c:45:53:6d:c8:07:66:97:
c3:6a:cf:ed:bb:e4:14:cb:7f:82:e2:4c:20:37:99:03:16:89:
6d:98:13:15:6b:79:ac:0e:fb:26:01:ab:f1:f0:4e:a4:0e:c9:
a4:fa:79:ac:f2:ab:24:65:22:ed:17:aa:d2:7d:f6:b6:87:a8:
ef:f7:6a:22:2c:e7:15:2b:a9:54:98:00:e5:a0:ea:52:4f:ba:
75:da:07:bb:ca:da:de:54:5b:86:c9:49:da:a1:a0:22:07:f5:
5f:83:c8:14:bd:cc:5b:fb:16:f0:9b:be:b6:eb:e1:ff:0b:7d:
e7:6a:a0:06:83:bc:ca:69:df:16:89:a6:c4:94:27:08:c1:7b:
d8:06:16:64:8d:a6:02:04:2f:00:dd:1b:10:8d:4b:64:18:5e:
d5:59:86:83:0d:70:40:db:cb:7e:92:75:be:2c:d1:7b:ef:c3:
8c:2d:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 02:23:59 2024 by rpki-client on console-ams.rpki-client.org