Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
File: AS16509.roa (raw, json)
Hash identifier: F/yjkOPMYJzs9CeXZVuFVvQe6i/Q/hf1ZSqvAINQpVg=
Subject key identifier: 0E:B8:5F:1D:46:1A:3C:67:BB:8A:9D:EE:B8:F1:39:A7:84:9D:CE:30
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 17A9CF7771E2B181953FF335BD60FF926B2FF4EB
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
Signing time: Thu 09 May 2024 00:01:05 +0000
ROA not before: Wed 08 May 2024 23:56:05 +0000
ROA not after: Thu 08 May 2025 00:01:05 +0000
asID: 16509
IP address blocks: 141.11.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:a9:cf:77:71:e2:b1:81:95:3f:f3:35:bd:60:ff:92:6b:2f:f4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 8 23:56:05 2024 GMT
Not After : May 8 00:01:05 2025 GMT
Subject: CN=0EB85F1D461A3C67BB8A9DEEB8F139A7849DCE30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:88:47:51:08:8d:bf:d5:7c:3f:1f:ac:da:
fb:6e:fa:fc:0a:c4:a5:32:dc:c6:6c:d4:e4:51:d9:
df:45:0c:02:8c:ca:8a:4e:9e:8e:b4:2a:54:58:6c:
c0:2c:04:e1:67:6c:d5:75:96:40:ae:38:9b:5a:fb:
fc:e8:83:ce:c3:a1:e0:ed:b9:44:c6:1d:81:6e:ce:
ff:e4:1e:f3:ab:88:a1:94:4c:96:87:79:ab:69:9f:
8c:5f:93:0e:ce:45:47:28:df:2a:02:50:15:c4:71:
ac:c1:82:93:1e:5c:9a:7a:a4:bc:f1:ef:51:da:42:
a6:ca:d3:3a:83:b0:b0:9c:83:a8:83:c5:fa:28:d8:
84:3a:24:bd:3e:37:07:86:34:fb:de:78:95:37:9c:
ba:df:fd:57:7e:e4:fc:52:cb:52:1a:d0:62:f5:d6:
33:45:53:10:5a:b9:0c:11:88:ba:34:4e:5c:31:0f:
8f:8f:9a:2f:5b:66:d2:ab:d6:a6:77:35:eb:4a:7a:
21:81:ad:3d:35:fd:9e:2d:19:f8:46:37:ff:67:a5:
b0:36:f7:b4:28:5d:98:fd:bc:14:a2:b0:03:1a:2b:
d7:ad:69:7a:fe:e9:4f:33:19:10:0f:c5:8b:11:c7:
4d:86:b8:b4:9b:ea:37:e2:ec:aa:30:d8:a9:26:fa:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:5F:1D:46:1A:3C:67:BB:8A:9D:EE:B8:F1:39:A7:84:9D:CE:30
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS16509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:1e:24:9f:3c:be:ff:6d:3b:45:27:29:06:47:e2:16:74:e4:
e1:f0:72:2a:83:d6:de:f3:96:4b:27:28:31:68:43:27:7b:a0:
db:ad:f6:69:f6:b0:62:06:a2:d2:26:e1:f9:da:96:7e:3f:9e:
c1:53:a8:b1:5e:74:43:45:d1:a7:48:7a:44:ed:8e:ee:75:d2:
ed:c8:1f:f5:9e:20:d3:2e:10:4a:60:21:d5:47:dd:ab:38:47:
03:2e:5f:e8:c6:cb:6d:f2:d4:d5:31:8b:e3:55:e3:06:40:47:
98:4f:d2:67:f0:af:eb:7c:dc:e6:90:aa:75:67:ff:f7:fc:8e:
14:b5:93:66:d2:32:6b:20:b3:86:df:c5:14:ac:a8:04:e1:c7:
89:7f:c9:da:7a:c0:5f:4d:55:a0:a2:f3:0a:14:8c:59:cc:37:
3b:44:13:a7:78:f7:dd:88:e9:b5:28:12:7c:89:c0:ea:33:0c:
13:48:74:8b:cf:9b:6a:bc:6a:ba:dd:37:fa:16:0e:d6:02:7a:
08:e5:3a:93:ee:5a:d5:d2:7b:73:47:b1:e0:14:b1:4e:81:5e:
72:75:54:11:ab:e4:b9:74:1d:92:d1:89:95:96:1e:8d:c8:2d:
8b:57:20:7f:5f:d9:75:0a:d9:47:68:5b:b8:f7:b6:61:3f:e5:
6d:79:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 16:42:02 2024 by rpki-client on console-fra.rpki-client.org