Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197649.roa
File: AS197649.roa (raw, json)
Hash identifier: nVgI0Yrlty2skj+A+Z2HYZP238kNTL3GgR9S9JXkmz0=
Subject key identifier: A2:B8:C9:48:E7:7D:B1:DC:45:1E:F6:B2:51:C4:1C:DD:0F:AF:2A:B9
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 3927483100B6CE0246E5070D188DFC9465FBFEEA
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197649.roa
Signing time: Wed 27 Dec 2023 05:17:57 +0000
ROA not before: Wed 27 Dec 2023 05:12:57 +0000
ROA not after: Wed 25 Dec 2024 05:17:57 +0000
asID: 197649
IP address blocks: 45.149.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:27:48:31:00:b6:ce:02:46:e5:07:0d:18:8d:fc:94:65:fb:fe:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Dec 27 05:12:57 2023 GMT
Not After : Dec 25 05:17:57 2024 GMT
Subject: CN=A2B8C948E77DB1DC451EF6B251C41CDD0FAF2AB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:64:06:6f:00:71:a0:5f:da:de:f3:71:d1:
41:32:10:17:fb:64:79:22:07:84:d5:d6:31:a4:26:
c8:f2:9c:4c:00:7d:27:77:01:68:d2:bf:9a:b1:38:
2c:28:a8:4e:1d:bc:97:f6:42:20:16:ed:2c:02:bc:
fd:b4:81:1f:73:fa:5c:e6:d3:fa:12:3c:81:94:15:
47:1d:03:e2:33:79:f2:fb:af:8c:68:12:8f:4e:49:
41:bd:00:1d:02:10:ac:bc:73:32:d2:8d:c6:63:10:
4a:af:d5:73:2b:5f:d9:28:fa:b9:3c:73:82:a8:c0:
14:50:9f:59:6b:59:e4:3f:97:89:9b:48:6b:91:77:
e8:09:0a:ea:fe:58:a1:fe:a7:97:74:e4:06:46:89:
2a:ab:ae:ab:de:2c:55:11:ce:b1:2b:bf:15:4f:c9:
fd:49:60:70:80:db:05:d2:f8:ad:d9:f7:d1:30:9c:
c7:63:1a:60:27:7e:ab:bb:f2:05:3e:9f:1f:50:f8:
d9:5f:7d:fb:27:be:75:99:98:b6:f9:f3:ff:a4:8e:
bc:c5:41:e3:91:39:ff:f7:28:cf:b2:99:f9:8e:8a:
9e:a4:a8:ce:56:f4:20:78:ea:84:ea:30:81:e0:a1:
68:94:25:07:2e:f8:47:98:f8:0e:58:02:8c:f4:74:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B8:C9:48:E7:7D:B1:DC:45:1E:F6:B2:51:C4:1C:DD:0F:AF:2A:B9
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS197649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.101.0/24
Signature Algorithm: sha256WithRSAEncryption
50:7e:d5:56:c2:24:64:d5:e6:c2:7d:0f:d7:91:43:51:e7:6f:
30:b3:f3:9d:b7:0a:e9:20:6f:80:4b:95:e1:c5:81:ae:62:4d:
f3:e0:e4:90:6e:e1:ec:59:67:89:23:c7:0e:25:aa:de:32:97:
9e:f2:17:68:52:eb:c5:9c:82:99:c9:e5:b6:64:43:3d:29:32:
67:f4:27:06:c2:ce:d1:37:f6:a1:2a:1d:e2:6a:1f:d9:b2:91:
71:88:9f:9c:b2:7d:39:91:eb:96:07:48:28:fc:f6:a6:30:3f:
0a:7f:60:a5:6a:79:9b:f3:c6:24:c2:88:14:1b:ec:1d:17:1f:
40:f6:31:48:ea:ba:12:3e:4d:06:e9:f0:df:3a:1c:75:8a:b9:
f9:a9:c2:a2:14:62:33:c1:16:d4:5e:a0:44:0e:b0:44:1b:ea:
32:58:ad:16:a2:cf:2f:f1:b1:48:80:a1:3c:71:e2:e6:1f:ee:
b2:c2:63:01:3f:74:30:09:de:9b:21:c7:1e:28:2c:a5:55:67:
b9:47:2c:39:03:5c:ee:1f:d3:9c:e0:e6:b4:8a:16:52:85:f7:
c0:ad:67:86:7e:74:4b:8e:80:35:43:cc:d4:5b:81:fb:84:4f:
b1:47:d2:37:55:08:50:51:32:98:c8:a8:d1:2b:9d:8e:fe:4f:
96:1d:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:23:12 2024 by rpki-client on console-ams.rpki-client.org