Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
File: AS216022.roa (raw, json)
Hash identifier: ejfLnnDWAKNTgZYUVby5nDwKyeVI/yP0RiYhcNUGocA=
Subject key identifier: 07:79:FA:BF:7A:FA:F2:29:EC:5F:9A:24:7E:7E:A8:1E:24:CA:5B:0D
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 04C7DA310B9B89F347AF58DC3C0ED72917A6EFC2
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
Signing time: Thu 06 Jun 2024 15:10:00 +0000
ROA not before: Thu 06 Jun 2024 15:05:00 +0000
ROA not after: Thu 05 Jun 2025 15:10:00 +0000
asID: 216022
IP address blocks: 141.11.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c7:da:31:0b:9b:89:f3:47:af:58:dc:3c:0e:d7:29:17:a6:ef:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 6 15:05:00 2024 GMT
Not After : Jun 5 15:10:00 2025 GMT
Subject: CN=0779FABF7AFAF229EC5F9A247E7EA81E24CA5B0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:89:bc:1c:95:1f:10:5b:a5:41:b0:b6:12:
44:e0:98:ee:9d:51:10:a5:4d:ce:a9:70:6c:81:6c:
fd:86:da:05:55:a4:b9:43:cd:47:bc:aa:5d:95:90:
27:e2:5c:bc:ee:50:ac:aa:be:c8:df:bd:19:a1:23:
eb:79:61:68:1e:f1:7d:02:d9:e1:bb:b1:cc:c8:fd:
27:b8:5d:e7:73:50:7f:ee:db:78:ae:da:fd:bf:1c:
3f:33:27:b8:ca:d3:5f:5e:e2:1b:49:78:66:3d:06:
88:01:4e:91:ef:39:e6:4d:03:45:e7:da:ac:d2:ba:
e0:26:dd:0b:0e:d2:39:5d:03:60:1a:9a:a7:d4:fc:
d2:35:15:31:77:de:57:04:87:56:6f:47:e7:bd:08:
68:84:33:3c:15:17:6e:1f:0d:d5:36:5c:e6:0b:f5:
51:56:e9:94:70:d5:07:96:a5:7a:e3:f1:e3:bf:25:
a2:ac:51:0a:20:07:10:fd:39:46:de:6a:64:85:41:
7a:53:50:c3:0d:ff:be:71:8d:c5:55:d0:19:a9:be:
cb:2b:48:4b:e8:90:be:0b:ea:d9:cf:58:65:02:30:
a0:81:ee:a3:0e:96:10:96:e1:b4:97:63:d3:ec:5a:
8b:e0:c9:9e:cc:52:41:79:69:9e:3c:ea:56:6b:7c:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:79:FA:BF:7A:FA:F2:29:EC:5F:9A:24:7E:7E:A8:1E:24:CA:5B:0D
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:33:66:87:d5:96:e1:1b:a5:3b:58:72:9a:81:0e:a8:92:52:
c1:f4:aa:f1:d2:64:97:e9:e9:b6:f6:e0:2a:04:d6:33:97:4f:
0e:d6:1d:38:13:76:5e:6c:ec:ac:60:e4:0f:36:02:7c:9a:48:
83:c1:18:27:af:b3:80:ab:a5:b4:c1:78:f3:52:35:61:90:5d:
9a:5d:29:7d:f1:0d:f3:9a:33:9d:79:1d:81:b9:d4:2b:24:a8:
37:f1:8f:ea:f4:2f:73:f2:9a:96:1f:a1:77:51:50:e0:56:7a:
91:05:ee:f5:08:e2:38:80:8f:9f:0f:ca:7f:8b:0b:86:91:fa:
b2:80:e7:b1:bf:ae:d6:09:a0:b0:cd:50:0a:0b:aa:c2:df:43:
77:23:0a:67:47:97:38:0f:bc:e9:5e:87:15:74:30:68:ba:c3:
13:d5:e4:d2:63:ba:04:d7:30:d7:06:e5:3d:f2:96:e4:47:0a:
31:91:2a:5c:58:89:74:1e:e3:c9:2b:5e:f3:6c:d0:49:17:a5:
88:de:7d:84:fb:78:81:f4:a9:5e:14:72:f4:03:61:67:4c:88:
95:26:81:42:35:29:44:76:df:e1:2c:02:f6:43:04:45:0d:1d:
e4:d1:a1:06:29:29:5f:98:04:59:8a:b0:51:98:a1:89:b9:42:
e4:5c:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 13:13:57 2024 by rpki-client on console-fra.rpki-client.org