Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213186.roa
File: AS213186.roa (raw, json)
Hash identifier: Uaz4DOADl/SF4BOlzu4JTIOhIuek8402D3tXtccLffY=
Subject key identifier: 57:2B:72:F6:1D:4E:C7:94:1C:4F:83:A3:B6:91:4D:52:A6:FD:F3:9B
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 5157CA1ED8D65B2FF01634D6D4DD5937C909407C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213186.roa
Signing time: Thu 30 Nov 2023 13:05:07 +0000
ROA not before: Thu 30 Nov 2023 13:00:07 +0000
ROA not after: Thu 28 Nov 2024 13:05:07 +0000
asID: 213186
IP address blocks: 45.158.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:57:ca:1e:d8:d6:5b:2f:f0:16:34:d6:d4:dd:59:37:c9:09:40:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Nov 30 13:00:07 2023 GMT
Not After : Nov 28 13:05:07 2024 GMT
Subject: CN=572B72F61D4EC7941C4F83A3B6914D52A6FDF39B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:70:b6:06:8e:26:ec:e4:45:fb:a4:9e:12:
ca:b1:75:31:36:58:7d:4a:52:25:49:51:12:3a:0f:
a1:b9:f0:77:d6:1a:a7:a2:a4:ab:73:79:0d:51:ad:
a0:c5:65:49:0e:9b:5e:66:5b:d4:2a:5c:e9:59:ed:
eb:f9:df:c5:38:82:69:2d:3c:a0:79:d8:48:e9:6d:
fe:48:61:6a:a0:90:04:ce:3c:09:c8:0b:6a:b3:7a:
41:91:6f:73:81:53:e8:a0:6f:26:73:bb:08:21:e3:
2b:eb:e4:d2:ed:9c:a4:0c:13:59:d9:b9:00:68:1e:
0f:12:bd:cc:b9:e8:f4:2b:b8:24:6d:24:3f:4f:50:
92:11:64:6d:f9:c5:20:6a:fb:58:74:e1:93:f7:59:
d4:3e:3a:07:61:ec:6c:2a:95:f0:2a:a7:e5:bf:ca:
4c:1d:cf:ab:e0:e8:05:d2:87:90:7d:fd:73:e4:d4:
59:52:bf:24:fd:a2:86:04:18:4f:7f:62:da:d2:98:
4f:1a:4e:1f:39:02:11:42:9a:6a:9e:cc:89:78:62:
e0:cf:38:3c:fa:5a:9c:ee:0a:5d:f4:58:fd:5b:54:
85:e1:40:c3:13:bf:0c:92:0b:1a:5e:5b:9d:6f:98:
64:bd:95:66:ec:b3:07:2c:59:15:ec:85:9f:43:5a:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:72:F6:1D:4E:C7:94:1C:4F:83:A3:B6:91:4D:52:A6:FD:F3:9B
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS213186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.10.0/23
Signature Algorithm: sha256WithRSAEncryption
77:46:fc:c5:42:f8:9c:e3:a6:d2:bb:24:54:c8:37:08:4e:b7:
72:ef:36:bc:9f:df:6c:5f:96:04:06:4a:b5:94:cf:4d:1b:03:
07:09:5d:4f:ba:c7:8e:d3:ef:53:cd:53:59:1c:94:fb:01:f5:
8e:09:3a:70:32:15:ec:04:9a:f4:ca:f2:95:7e:c8:c1:be:44:
58:5e:e9:5d:e9:39:24:41:e4:6b:54:df:94:93:a3:ae:ca:c2:
3b:bf:17:00:f3:c7:d7:91:92:95:44:4b:63:5a:31:4e:b5:55:
37:00:71:ea:84:bf:98:76:78:0d:c0:dc:c1:fe:fb:54:ce:86:
1d:cc:48:d7:cb:50:e5:28:05:d0:60:c1:5b:13:d7:34:2d:74:
a1:7f:f7:1b:4c:ad:df:98:5a:65:ba:b9:b5:4e:0b:b7:c6:20:
2f:d7:e6:c4:d0:f3:10:89:28:0e:83:ef:00:bc:1d:85:fc:c6:
bc:8d:ee:cd:46:08:78:55:6d:f5:f9:7a:78:87:3f:48:c2:50:
ff:3c:59:c8:80:95:6b:70:0b:e9:e9:e2:fd:58:98:25:d3:44:
29:03:f3:66:f0:52:59:83:f8:6d:67:f4:e8:72:5c:ae:5b:1b:
64:c3:9c:1b:38:4d:ab:ca:35:22:de:70:ab:ef:3b:e6:c5:b8:
fd:ca:20:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:09:36 2024 by rpki-client on console-fra.rpki-client.org