Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: +jPraWtbBHgf9lGIOR4RKWMMfZd/L/j0NJiWnJ+8DeA=
Subject key identifier: 66:CF:93:80:7A:12:42:4D:A2:D8:E4:E9:DC:7D:EC:AD:3D:A8:CE:47
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1096F4D1ACB3E198CD7ACEF51EB79720EC00C8C6
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS8100.roa
Signing time: Mon 11 Mar 2024 13:22:15 +0000
ROA not before: Mon 11 Mar 2024 13:17:15 +0000
ROA not after: Mon 10 Mar 2025 13:22:15 +0000
asID: 8100
IP address blocks: 193.29.97.0/24 maxlen: 24
193.151.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:96:f4:d1:ac:b3:e1:98:cd:7a:ce:f5:1e:b7:97:20:ec:00:c8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Mar 11 13:17:15 2024 GMT
Not After : Mar 10 13:22:15 2025 GMT
Subject: CN=66CF93807A12424DA2D8E4E9DC7DECAD3DA8CE47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:57:23:5c:8b:a1:0d:53:e0:84:07:9b:9c:
66:bb:2e:42:df:80:f0:5f:d6:52:97:d2:83:6b:65:
77:4c:b2:91:4d:7c:19:9f:c3:b7:59:9e:1d:9a:7e:
2e:62:90:73:a4:b4:f7:09:89:a5:11:e1:17:47:80:
d8:4c:ab:42:df:ed:cb:75:15:53:fd:56:bd:d7:15:
12:32:34:64:da:33:f5:61:17:99:65:ca:5d:ed:66:
38:16:fb:e7:42:c2:b2:b7:d9:3c:3e:db:c9:a9:d2:
14:af:f2:2d:f9:24:7d:fc:e8:a9:5f:e6:dc:49:f7:
86:4a:35:19:93:c6:6d:ed:07:b3:d4:21:cc:17:c3:
35:f0:3f:08:2a:e6:f6:53:c6:b8:71:8c:ca:69:ff:
8f:c4:37:38:b2:a1:8f:c0:6b:09:3f:d9:e2:1d:2d:
32:1e:b3:3a:25:0e:ae:58:eb:1e:f6:fe:52:82:72:
9b:ef:41:2e:13:9a:e5:06:e5:f8:8d:98:39:04:4f:
43:79:35:6a:a7:ce:02:26:87:c1:24:07:ac:b8:ac:
a8:4c:37:2a:15:2d:59:38:22:df:e8:80:79:ae:5a:
0e:e9:17:bf:d5:68:f1:31:f3:fd:33:46:58:97:e1:
91:b0:5c:0c:27:83:2a:cc:1e:04:61:e9:be:e1:ec:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CF:93:80:7A:12:42:4D:A2:D8:E4:E9:DC:7D:EC:AD:3D:A8:CE:47
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.97.0/24
193.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
54:63:ba:7f:da:0c:23:c5:e4:0f:ce:bf:5f:ac:50:52:b3:47:
fb:4b:a5:d8:cd:cc:ed:39:be:07:dd:76:3c:45:92:f3:1a:f7:
28:ad:3c:fd:09:12:f2:dc:19:14:8b:68:8e:80:3e:32:e5:0b:
d3:a6:02:7a:17:bd:92:0d:c3:16:2e:5f:93:e8:96:30:0e:d3:
53:9e:ce:0d:75:04:07:ef:d5:23:48:ab:d6:aa:bf:70:fe:3a:
cc:75:e8:0a:bd:bf:96:36:e6:1d:01:e5:91:c2:1a:17:d6:d4:
1e:72:35:07:64:08:f3:bb:f9:f4:19:b6:40:9f:ab:fa:f3:3c:
04:1c:06:c5:25:12:02:8f:86:75:20:9c:3b:51:dd:04:f1:41:
be:8f:af:36:c6:78:a5:5e:50:89:0d:fb:3f:6d:7e:cd:bb:2b:
09:a4:f0:64:db:07:25:7d:31:44:15:bb:90:73:3d:09:8d:d8:
4c:27:3b:de:24:06:10:f2:ff:5c:0a:71:39:3f:9c:89:e2:cd:
b2:40:f0:63:32:d4:d9:5f:23:bb:b0:1c:d0:6c:2b:6b:a0:6d:
4f:b1:a5:a9:ff:78:d9:2d:6e:4c:93:77:6d:a9:95:5c:e7:6d:
da:a4:14:d8:a1:3a:7b:45:4e:cb:7f:a7:6d:1c:25:53:b7:53:
99:a8:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 16:58:37 2024 by rpki-client on console-fra.rpki-client.org