Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: Kkdi+W5utuSEctCO/URmot78hrPLMIEiJHrL/+bwL9A=
Subject key identifier: 9E:D1:3F:AF:AF:19:A9:C4:21:10:12:DE:FD:71:F3:5F:71:93:04:E2
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 18DFB0DBD6AD29F00D97BFE254A0145DADFFFF8B
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
Signing time: Fri 06 Sep 2024 13:58:54 +0000
ROA not before: Fri 06 Sep 2024 13:53:54 +0000
ROA not after: Fri 05 Sep 2025 13:58:54 +0000
asID: 215304
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:df:b0:db:d6:ad:29:f0:0d:97:bf:e2:54:a0:14:5d:ad:ff:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 6 13:53:54 2024 GMT
Not After : Sep 5 13:58:54 2025 GMT
Subject: CN=9ED13FAFAF19A9C4211012DEFD71F35F719304E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:f6:d3:71:28:f9:a0:b9:19:a7:cd:af:9c:
e2:de:13:29:4d:71:de:21:a2:12:bb:39:17:c4:dd:
cb:f3:fa:ba:38:76:71:72:43:fa:f0:10:5c:81:27:
08:18:b8:8b:dd:fc:0f:6c:84:17:43:9c:1e:26:38:
5c:98:1b:4c:ab:af:b0:24:e1:d6:c0:be:6b:d7:85:
88:20:e2:d5:5f:80:0d:21:9e:bd:41:7e:3b:64:21:
ce:d5:0c:bc:5e:22:f7:9d:8a:e3:d8:78:d1:e4:4f:
d8:e9:59:2b:f5:af:b4:a6:cd:f5:ca:a9:c1:61:f3:
57:a0:9b:24:87:1d:8c:bb:30:30:0a:6c:8f:46:b2:
7b:f7:90:ff:9d:38:ac:1e:a1:c1:63:1e:13:da:37:
6a:71:5c:22:1c:2d:42:27:ae:03:78:aa:95:ba:4a:
1d:f3:fe:85:44:b6:cb:5f:73:c7:63:95:55:a3:a9:
4f:e3:67:30:72:d2:d7:0b:26:15:31:9c:f0:e5:81:
83:81:a5:7c:78:c3:81:7d:48:22:1a:ea:25:ec:77:
98:b3:15:83:81:89:2a:03:da:73:f2:83:ad:92:8f:
43:1f:c5:0e:64:6a:ef:49:77:7e:db:a5:fc:d1:6a:
32:7a:42:98:3e:0b:b9:a8:3a:cd:ca:fc:fa:70:82:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:3F:AF:AF:19:A9:C4:21:10:12:DE:FD:71:F3:5F:71:93:04:E2
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:09:c4:64:08:10:4f:cf:fb:a0:b8:1b:6e:fa:89:e7:6f:ba:
40:0c:cb:de:de:f2:2b:75:0a:ad:ba:4b:a0:56:a6:be:aa:a7:
ed:bf:0f:c8:c4:0d:d9:9e:d1:92:60:5a:fc:32:e4:e2:f8:9f:
79:a9:67:45:db:ca:d3:5c:4a:6e:23:ad:f0:cf:79:1b:06:b7:
e2:f5:51:dc:05:21:4a:ec:9e:18:53:cf:81:82:80:28:1c:bd:
1e:66:f2:f3:cc:2c:f8:8e:42:2e:91:ff:28:aa:2a:28:49:ee:
41:94:e2:8f:0c:69:f6:ad:ae:7d:1b:a6:af:66:ee:d1:3a:22:
e6:f8:f3:e4:f5:84:c0:a6:87:34:34:8d:3c:39:1c:9c:ac:5a:
f5:63:fa:e4:e8:8e:03:c4:7f:3a:28:66:31:4d:6c:7a:0a:09:
5f:a8:52:db:44:72:f1:f7:ee:22:a7:af:1c:55:5a:b0:d8:f9:
e4:82:89:7a:df:b4:52:eb:bd:d8:32:9d:ae:9d:e6:f9:34:80:
f2:13:02:ea:8f:00:53:b4:d9:b7:4b:42:e0:c4:51:67:ef:9d:
a7:3f:48:d1:17:6e:60:71:11:0d:e6:03:da:9f:63:53:15:19:
2c:4e:8d:51:06:e9:d4:85:1b:36:2c:a9:7d:f9:40:18:79:d8:
1c:6c:2b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 05:51:23 2024 by rpki-client on console-fra.rpki-client.org