Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215400.roa
File: AS215400.roa (raw, json)
Hash identifier: iOBWuwbSw6EtT117BqC6TeptpcoWuPQlvxdELHURQFA=
Subject key identifier: 24:51:FF:A1:FE:78:F5:CE:D5:C4:D0:1E:E5:DB:8D:D9:A9:9C:AB:52
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 16C88EF3EBAB6502AC7E1733C1F492A48E8B5043
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215400.roa
Signing time: Sun 10 Mar 2024 03:51:02 +0000
ROA not before: Sun 10 Mar 2024 03:46:02 +0000
ROA not after: Sun 09 Mar 2025 03:51:02 +0000
asID: 215400
IP address blocks: 185.155.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c8:8e:f3:eb:ab:65:02:ac:7e:17:33:c1:f4:92:a4:8e:8b:50:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 10 03:46:02 2024 GMT
Not After : Mar 9 03:51:02 2025 GMT
Subject: CN=2451FFA1FE78F5CED5C4D01EE5DB8DD9A99CAB52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:9b:93:8a:2d:fa:9d:30:b4:34:09:8c:e0:
1c:5d:63:64:1d:b8:72:09:c8:24:b1:8a:ee:f2:26:
e0:94:eb:f4:dc:56:d6:b8:4a:75:12:0a:ba:fa:16:
77:17:c2:26:3f:00:ed:6c:f0:70:1e:fc:f9:ca:b9:
ac:9a:33:4f:e8:f0:9b:cc:f7:2f:b3:7c:2b:86:ba:
fd:42:3f:85:3b:83:7e:f4:3c:47:cf:af:70:f8:f0:
98:f0:ce:05:b7:98:7d:98:e0:b5:f3:ec:3c:ad:45:
e7:77:fb:84:1c:3f:46:4e:52:fe:1e:2e:0f:40:1d:
6f:34:84:fc:e8:70:91:f5:78:17:10:f2:18:f0:97:
fe:10:f7:38:44:d2:c1:22:e4:cc:2a:9d:61:e1:73:
96:3f:34:3e:f4:48:d4:eb:cb:bf:41:6b:b5:ca:6f:
78:2f:d0:76:a8:f3:05:67:9c:f4:f5:84:a8:b3:f5:
00:d7:c7:03:f9:72:c3:80:93:80:12:d4:28:4b:cc:
f6:8d:4b:0f:0c:f7:fd:17:86:da:87:5e:0d:1e:52:
ed:12:05:c7:23:30:70:8e:69:90:46:43:24:83:d1:
db:fc:be:3c:c4:66:61:d4:59:7f:a2:e0:ce:67:3a:
9a:35:57:9b:78:24:98:6b:7f:57:58:38:19:56:13:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:FF:A1:FE:78:F5:CE:D5:C4:D0:1E:E5:DB:8D:D9:A9:9C:AB:52
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.223.0/24
Signature Algorithm: sha256WithRSAEncryption
52:8d:db:f9:e7:46:40:27:9d:35:2f:e5:f0:14:09:e9:0e:f2:
c0:56:ee:36:0e:29:89:f7:2b:87:c1:1e:c3:22:37:9c:85:9c:
7f:ef:8a:f8:1a:c7:7d:31:be:95:1b:d1:82:46:58:cd:56:98:
bc:e9:ca:2d:b5:33:f2:59:7a:59:cc:9c:e1:ee:0a:f9:d5:77:
5f:5e:90:e4:35:8f:9d:85:a8:ce:b9:01:46:65:57:76:1a:66:
e6:0e:ad:31:82:88:b3:e9:32:f1:6e:79:ee:fa:df:b9:c8:8a:
7d:f0:a7:fe:1f:97:5b:0e:5f:9b:0b:66:bf:31:7b:9d:bc:f3:
57:b7:a8:ee:e5:b2:c8:b9:f3:a3:76:8e:73:8f:dc:e9:79:55:
4c:6c:fb:12:ef:cd:d4:16:6a:3e:60:83:0a:22:9d:af:54:00:
a8:2c:b7:82:00:46:8d:3f:46:c3:fd:4c:65:75:84:c9:e0:6f:
87:22:84:84:c7:3d:9d:10:81:1f:ea:63:99:5f:ff:6f:ec:f6:
ec:13:95:43:70:27:54:7b:31:28:3b:6b:fc:27:fb:89:d1:58:
e8:62:90:0d:fa:2d:1a:ae:dc:f9:d9:ce:3c:99:d7:c4:53:06:
0a:2f:3e:6f:2c:3e:c5:df:ed:a7:b3:34:5c:6b:b0:11:4b:39:
63:49:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 22:51:13 2024 by rpki-client on console-fra.rpki-client.org