Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51082.roa
File: AS51082.roa (raw, json)
Hash identifier: B0EbFnZPVyzyyrfpx7AZ3LbQSXv1/guW5E0WvAMuCm8=
Subject key identifier: 53:0E:0D:5B:FC:BE:65:76:27:FB:BF:AF:B4:6A:06:5F:0D:5A:B7:54
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2C3AACE252C5D62122176739D09B9BEEC5BC9E12
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51082.roa
Signing time: Thu 03 Oct 2024 10:29:51 +0000
ROA not before: Thu 03 Oct 2024 10:24:51 +0000
ROA not after: Thu 02 Oct 2025 10:29:51 +0000
asID: 51082
IP address blocks: 181.215.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 07:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:3a:ac:e2:52:c5:d6:21:22:17:67:39:d0:9b:9b:ee:c5:bc:9e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 3 10:24:51 2024 GMT
Not After : Oct 2 10:29:51 2025 GMT
Subject: CN=530E0D5BFCBE657627FBBFAFB46A065F0D5AB754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f3:81:30:b1:dc:3f:a7:55:df:76:3b:ba:5a:
18:ae:46:d4:aa:1f:81:66:43:df:50:33:51:64:52:
41:b1:30:07:ce:f1:1d:3b:25:1e:e0:4b:47:7f:6e:
2b:b2:d8:5c:07:c9:1c:be:1e:96:8b:9d:f4:5c:93:
8e:fc:7a:59:1c:d4:f7:3c:b4:eb:5e:43:f0:25:8d:
01:9d:64:b6:05:43:c0:de:c9:7d:06:1c:9a:cd:7a:
d3:53:af:73:be:1c:8a:8b:b5:58:ce:cd:8d:68:76:
50:74:c3:fd:7d:08:b4:8d:ef:22:d6:97:e7:34:64:
cc:2c:1c:1e:7d:27:c1:58:78:12:6a:d4:78:eb:e1:
c2:4a:9a:b9:1e:6e:13:92:d1:f7:0c:2e:2c:91:bb:
f7:a2:d7:24:e6:a6:c7:45:80:df:85:b8:2b:09:15:
a8:fd:67:0e:4f:ae:68:3c:fe:0e:a0:9a:4a:f2:96:
f1:cb:70:16:83:c0:ab:05:c6:09:15:ab:33:2b:70:
b9:35:d0:1d:f8:b2:0d:b1:52:53:2d:85:55:96:b6:
e4:1f:2d:56:51:78:40:0a:31:b6:14:2e:1c:81:c0:
61:1b:d1:e1:96:0c:38:80:cd:68:52:00:ac:83:18:
86:06:be:55:10:b8:19:f4:30:bd:fc:94:e3:51:4e:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0E:0D:5B:FC:BE:65:76:27:FB:BF:AF:B4:6A:06:5F:0D:5A:B7:54
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
19:56:2d:32:7f:4f:2b:5b:14:ea:12:e3:e6:9f:fd:31:07:5e:
c8:7b:7b:4e:c3:e7:2f:36:25:a1:44:b4:66:1f:d6:3e:b6:79:
3a:a5:28:6d:ab:69:5f:4d:29:b3:ab:b4:9b:4b:2f:f3:43:35:
10:7a:68:2e:91:34:cd:26:7c:b1:4f:15:91:6d:00:49:38:27:
6d:2b:93:57:ca:4c:d5:aa:c0:6c:26:f2:dd:5f:cd:d6:91:8d:
a7:1c:c0:dd:88:e1:ba:63:52:c5:75:9b:cb:1b:54:eb:2e:1b:
0b:f8:c4:58:9c:56:da:c5:97:99:d7:8d:f0:33:92:f8:21:f3:
e6:f0:0b:0a:76:87:41:cb:cc:e4:07:0c:66:f4:84:bd:92:5d:
2e:3b:9b:90:d5:a5:08:06:cc:a9:ba:57:8b:7b:94:5c:d1:7f:
fc:5d:5c:e9:4a:91:d6:6a:22:13:4c:13:0b:b4:0c:b5:30:1f:
bf:fb:10:fe:84:91:aa:01:6e:b6:cf:25:05:da:fa:8a:fc:08:
3f:a4:e0:c5:eb:f8:3a:b3:5c:c7:1a:77:7d:36:de:d1:c0:02:
51:c2:9c:65:58:60:8a:6e:9b:4e:df:4f:de:1a:54:05:08:6a:
8f:27:5f:73:42:11:f8:5f:0d:fc:5a:0b:3a:12:70:19:a2:85:
63:2f:f5:16
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIULDqs4lLF1iEiF2c50Jub7sW8nhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDEwMDMxMDI0NTFaFw0yNTEwMDIxMDI5NTFaMDMxMTAvBgNV
BAMTKDUzMEUwRDVCRkNCRTY1NzYyN0ZCQkZBRkI0NkEwNjVGMEQ1QUI3NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl84Ewsdw/p1Xfdju6WhiuRtSq
H4FmQ99QM1FkUkGxMAfO8R07JR7gS0d/biuy2FwHyRy+HpaLnfRck478elkc1Pc8
tOteQ/AljQGdZLYFQ8DeyX0GHJrNetNTr3O+HIqLtVjOzY1odlB0w/19CLSN7yLW
l+c0ZMwsHB59J8FYeBJq1Hjr4cJKmrkebhOS0fcMLiyRu/ei1yTmpsdFgN+FuCsJ
Faj9Zw5Prmg8/g6gmkrylvHLcBaDwKsFxgkVqzMrcLk10B34sg2xUlMthVWWtuQf
LVZReEAKMbYULhyBwGEb0eGWDDiAzWhSAKyDGIYGvlUQuBn0ML38lONRTg5pAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUUw4NW/y+ZXYn+7+vtGoGXw1at1QwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTEwODIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11x8w
DQYJKoZIhvcNAQELBQADggEBABlWLTJ/TytbFOoS4+af/TEHXsh7e07D5y82JaFE
tGYf1j62eTqlKG2raV9NKbOrtJtLL/NDNRB6aC6RNM0mfLFPFZFtAEk4J20rk1fK
TNWqwGwm8t1fzdaRjaccwN2I4bpjUsV1m8sbVOsuGwv4xFicVtrFl5nXjfAzkvgh
8+bwCwp2h0HLzOQHDGb0hL2SXS47m5DVpQgGzKm6V4t7lFzRf/xdXOlKkdZqIhNM
Ewu0DLUwH7/7EP6EkaoBbrbPJQXa+or8CD+k4MXr+DqzXMcad3023tHAAlHCnGVY
YIpum07fT94aVAUIao8nX3NCEfhfDfxaCzoScBmihWMv9RY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:37 2025 by rpki-client