Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
File: AS834.roa (raw, json)
Hash identifier: TvM39qho5qfm/UhJ0C/tb9j/mHBFoaTBctCl/ED1ZPM=
Subject key identifier: 9B:20:DB:5E:94:08:E8:5D:C0:BC:E3:17:91:A0:08:8C:AD:7E:C7:99
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1BEDA1F3F0296D899A1B7219AEF29088A93EF2F5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
Signing time: Thu 02 May 2024 13:51:10 +0000
ROA not before: Thu 02 May 2024 13:46:10 +0000
ROA not after: Thu 01 May 2025 13:51:10 +0000
asID: 834
IP address blocks: 45.87.185.0/24 maxlen: 24
45.95.38.0/24 maxlen: 24
45.231.206.0/24 maxlen: 24
149.62.40.0/24 maxlen: 24
181.215.73.0/24 maxlen: 24
181.215.189.0/24 maxlen: 24
181.215.204.0/24 maxlen: 24
181.215.206.0/23 maxlen: 24
181.215.216.0/24 maxlen: 24
181.215.225.0/24 maxlen: 24
191.96.24.0/24 maxlen: 24
191.96.122.0/24 maxlen: 24
191.101.181.0/24 maxlen: 24
191.101.192.0/24 maxlen: 24
191.101.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ed:a1:f3:f0:29:6d:89:9a:1b:72:19:ae:f2:90:88:a9:3e:f2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: May 2 13:46:10 2024 GMT
Not After : May 1 13:51:10 2025 GMT
Subject: CN=9B20DB5E9408E85DC0BCE31791A0088CAD7EC799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:87:63:73:48:e1:51:75:5f:41:4e:18:65:
15:f7:e6:98:f4:37:2b:f8:47:a6:a3:e9:eb:13:be:
3f:6f:14:ac:62:e6:55:43:1f:03:76:da:e8:d8:41:
77:d7:40:c7:5a:a0:27:b8:78:ca:c4:75:14:f1:35:
51:8e:7e:bc:fe:c2:8f:a1:10:e0:f8:16:1f:c2:5b:
86:91:f0:99:33:4c:af:2f:a6:e0:48:c8:c9:2b:ae:
1d:88:9e:a5:a3:f9:82:fa:84:c9:0d:e6:67:32:24:
fe:cf:fe:dc:62:ce:ea:6f:d2:88:d0:16:b9:49:65:
ed:01:49:da:20:a6:f0:dd:d5:f6:b0:a4:a3:c2:e6:
da:9d:aa:c8:e0:3a:88:15:17:a0:96:cc:f2:5c:a5:
5e:57:65:ae:1a:22:4b:c3:3f:d4:25:d2:ec:54:7d:
7f:36:d6:36:5b:5d:17:1c:f4:22:3d:02:14:c3:3e:
41:6e:10:69:a3:78:46:5b:d8:bb:55:4a:7b:9d:0e:
70:38:c5:13:47:35:f8:f9:44:93:f2:e6:3d:c6:47:
e3:fb:b2:82:cd:3a:fa:8d:09:62:0e:ed:cb:e3:11:
49:a7:08:80:93:2b:cb:1f:66:e6:26:93:f5:3e:c9:
4c:d2:87:b1:8c:8a:a7:99:a0:62:06:5a:31:05:b3:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:DB:5E:94:08:E8:5D:C0:BC:E3:17:91:A0:08:8C:AD:7E:C7:99
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.185.0/24
45.95.38.0/24
45.231.206.0/24
149.62.40.0/24
181.215.73.0/24
181.215.189.0/24
181.215.204.0/24
181.215.206.0/23
181.215.216.0/24
181.215.225.0/24
191.96.24.0/24
191.96.122.0/24
191.101.181.0/24
191.101.192.0/24
191.101.207.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b7:dd:52:94:06:27:4d:15:3f:fc:5a:b4:c6:9b:78:28:14:
ca:33:4b:8b:70:71:0a:18:c1:4a:51:1e:8e:9b:62:0e:28:dc:
ee:66:3a:f6:4c:c9:d5:8f:87:40:2c:7d:9b:fb:47:24:92:d0:
fa:43:5c:c9:f1:4a:e8:a9:b8:d3:11:32:6a:07:77:af:d8:e2:
bf:85:2e:ea:34:0b:80:be:ff:9b:58:38:78:49:b3:08:15:18:
65:5c:97:2f:d5:0c:02:ef:66:81:fa:a0:68:1f:8f:a0:df:6b:
92:76:57:6c:a5:5a:25:d9:3f:86:cd:6c:88:3c:fb:07:2b:8f:
1d:e9:a0:6c:1c:41:69:82:bf:e6:3b:89:6d:6b:e1:ea:be:86:
32:4f:b7:7a:7a:ee:bc:e5:a9:ee:5d:a5:9c:55:8a:73:0a:1f:
d9:8d:82:c1:08:65:15:6a:43:7e:7b:08:e5:27:a6:bc:a5:d5:
61:4b:99:71:f4:56:d7:dd:41:2d:ea:57:a3:12:6e:8b:72:a1:
ef:ce:fa:38:47:04:fe:c3:33:d2:e1:0e:fd:54:dd:f9:78:35:
81:28:71:3c:b3:4c:96:8e:c8:54:89:9c:61:d0:9f:bd:23:72:
21:60:82:06:7d:0b:10:58:d0:2e:09:ac:af:6e:e3:e4:e4:29:
46:d8:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:20:45 2024 by rpki-client on console-ams.rpki-client.org