Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211748.roa
File: AS211748.roa (raw, json)
Hash identifier: 8/AKIrT5j2+F17EdCcC24fjQ/mNtOQGKgG6AHA4EbjQ=
Subject key identifier: AE:07:89:34:D3:DD:AC:9B:25:9D:3A:67:49:81:E5:5C:74:6F:F5:0D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 032F225B1DCB1C331FEAA8A1A47CB85617FCD1F9
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211748.roa
Signing time: Thu 30 Nov 2023 13:05:07 +0000
ROA not before: Thu 30 Nov 2023 13:00:07 +0000
ROA not after: Thu 28 Nov 2024 13:05:07 +0000
asID: 211748
IP address blocks: 91.199.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:2f:22:5b:1d:cb:1c:33:1f:ea:a8:a1:a4:7c:b8:56:17:fc:d1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 30 13:00:07 2023 GMT
Not After : Nov 28 13:05:07 2024 GMT
Subject: CN=AE078934D3DDAC9B259D3A674981E55C746FF50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:72:4f:9d:f9:cd:ee:76:36:3d:4b:c4:76:
c8:54:7f:c9:6f:8c:ec:2a:cd:92:57:12:36:59:82:
d0:37:29:ec:00:e8:d6:ca:47:26:31:f7:e9:0e:25:
87:b2:d2:3b:5c:b1:15:46:b5:d2:62:4c:f3:dd:03:
be:5c:fb:33:b2:82:95:0c:bd:7f:e1:5b:9d:ae:37:
7f:4f:98:c1:30:6a:5b:14:bc:e3:79:0f:61:b5:90:
e4:94:71:86:1d:9b:9d:59:bf:96:d2:21:a7:bf:89:
52:67:81:08:19:a0:57:b6:54:0c:00:2f:70:87:9f:
4f:5a:4e:48:d8:cf:a9:39:62:60:8a:f2:4c:b6:54:
47:05:40:26:42:b4:d0:8b:47:c4:35:9b:80:6f:01:
e3:2a:a4:7c:d8:29:49:9a:35:c6:e8:ff:f9:a7:4a:
78:57:71:3e:3c:1c:c3:d7:11:c6:10:19:e7:d2:18:
34:fb:8e:a8:ff:af:c1:8b:75:f1:2e:04:4c:52:e9:
2d:fb:12:0f:78:a8:a8:74:06:77:5b:a8:fe:74:b4:
53:27:1b:8b:80:50:7f:24:39:e3:50:28:98:77:54:
06:0d:61:07:f9:46:5a:81:b7:14:e8:32:cc:bb:75:
66:6f:ee:bd:3c:09:d4:78:29:84:58:21:6d:b2:49:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:89:34:D3:DD:AC:9B:25:9D:3A:67:49:81:E5:5C:74:6F:F5:0D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211748.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:02:ca:34:87:3d:dc:39:f4:b5:ec:ba:9e:42:f8:cd:35:8d:
53:ab:88:bc:56:50:23:e3:b5:59:f5:be:7f:11:61:09:9d:8c:
f6:5b:d0:9d:3b:0b:92:2d:0d:3d:b1:2b:ab:b1:12:6e:1a:f8:
b3:00:72:d6:ae:ef:be:c2:b3:f4:c6:01:7f:6c:f9:97:67:dc:
d3:67:db:b2:b3:68:5a:1f:49:c5:e7:b2:27:27:70:c6:d0:e2:
2a:0c:85:6e:fe:cc:6f:83:06:72:e5:35:60:ec:2e:59:63:e9:
dc:10:1c:21:c9:58:cc:08:aa:36:7b:8b:51:49:df:11:9f:bc:
61:83:35:95:ba:87:37:fa:40:62:e4:a0:37:b6:fe:4c:b6:28:
f3:f9:92:4e:81:84:a7:85:33:1e:2d:fc:a4:8c:24:fe:e0:59:
78:34:45:27:f2:1c:1a:78:b1:12:4d:48:d4:ad:44:81:88:65:
a6:de:43:a1:d2:5b:fb:b3:ce:28:0d:63:6a:8e:cc:7a:5f:19:
36:6f:0c:9e:29:d0:25:83:f7:33:14:e4:92:3f:d9:46:05:05:
7a:b3:d0:89:9e:ed:d3:99:6f:05:e5:8d:03:e6:17:34:e5:45:
ee:9c:18:10:12:a8:3e:33:bf:6d:7c:e0:80:64:94:95:e0:c9:
2c:9d:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 22:51:13 2024 by rpki-client on console-fra.rpki-client.org