Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51791.roa
File: AS51791.roa (raw, json)
Hash identifier: HFqH61NfwBB1/BBBYoNhphSBvFzVi2rV7USEiPlSjvk=
Subject key identifier: 81:3D:48:62:68:52:EA:23:7D:4D:92:5D:48:8B:48:15:36:17:63:CB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0127B2E715E4F7149227F5440C997D9EB168A7DB
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51791.roa
Signing time: Tue 24 Sep 2024 22:43:22 +0000
ROA not before: Tue 24 Sep 2024 22:38:22 +0000
ROA not after: Tue 23 Sep 2025 22:43:22 +0000
asID: 51791
IP address blocks: 181.215.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:27:b2:e7:15:e4:f7:14:92:27:f5:44:0c:99:7d:9e:b1:68:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 24 22:38:22 2024 GMT
Not After : Sep 23 22:43:22 2025 GMT
Subject: CN=813D48626852EA237D4D925D488B4815361763CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:2f:27:aa:31:da:0c:a3:7d:d2:9e:e1:cf:
b2:c1:7e:ae:44:17:b0:8d:ca:e8:4d:cd:bf:5d:82:
3a:55:8b:47:98:e8:2e:a0:b2:39:a2:45:49:c8:b1:
cf:be:6d:86:df:01:39:a7:20:34:ad:90:fb:86:cf:
50:20:f5:5c:f5:6a:47:3a:09:1c:1d:ba:d4:ba:95:
6e:fa:dc:f9:cf:96:1b:22:06:c9:a8:41:34:46:da:
e4:5a:5d:83:15:db:89:d5:65:0d:72:da:08:aa:c2:
37:4d:73:e5:ac:f5:eb:f8:44:88:44:9f:71:30:6a:
a4:f3:7c:7c:52:83:ed:fb:6d:7f:66:69:b1:64:e2:
8c:05:a7:f3:94:6c:cb:df:11:99:d1:d9:a5:c7:cb:
97:55:7c:46:5f:b6:af:48:87:4c:29:1f:55:f6:91:
5c:79:2c:56:f6:2c:fd:c9:2d:19:77:5c:40:9d:3b:
4f:97:d5:e8:ff:d0:7f:3b:ef:83:93:e4:b7:65:07:
49:9e:58:af:0e:4c:75:6c:a6:3a:af:66:65:cc:64:
71:cb:ef:ef:b5:c2:d7:60:00:c0:a2:a4:dd:7e:62:
b5:42:9f:01:da:61:fa:9c:69:9d:13:4b:7c:57:4e:
65:61:ab:45:8b:48:e4:12:35:9d:45:c0:da:d7:e8:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:48:62:68:52:EA:23:7D:4D:92:5D:48:8B:48:15:36:17:63:CB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS51791.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.193.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0c:b4:e3:e0:e1:87:c1:df:bb:37:0a:d4:06:97:db:53:84:
86:73:f7:1f:2d:bb:89:7c:cf:47:01:61:5b:7f:c5:99:c2:12:
e2:d1:80:be:36:96:4e:95:6b:c6:49:16:5d:19:ad:d8:08:a3:
fb:e1:50:93:04:fe:9a:f8:0e:de:5f:5a:aa:ae:e0:97:fe:9b:
7e:d3:d6:55:66:a9:70:e1:84:51:6a:67:92:f4:cc:b9:af:e8:
c3:66:a2:e4:7b:2c:ba:da:5d:cc:0b:6b:cd:8d:b8:f0:a7:dd:
83:69:79:82:70:dd:14:5f:bc:19:b3:b9:5a:1c:2e:e4:77:05:
67:9a:54:54:b4:87:d6:c7:29:fe:9a:78:82:9a:0b:9f:85:e9:
2f:7b:13:93:de:49:6a:1f:61:80:d4:68:3a:51:29:fb:c3:72:
83:65:dc:a4:d4:75:59:68:13:92:f8:20:fe:7f:4f:f1:52:22:
13:41:1d:02:84:cd:e8:7c:65:61:da:02:24:19:38:52:7f:b2:
1a:ca:88:cd:17:e4:30:08:90:2b:18:8a:38:6a:b6:1c:f1:4d:
ff:da:84:30:4e:ed:3b:2e:80:8c:03:14:ac:02:e4:9c:af:19:
f7:bd:76:c4:7b:1f:1e:84:25:df:d5:c6:83:d8:b1:dd:83:a5:
c0:1f:73:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:05 2024 by rpki-client on console-fra.rpki-client.org