Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
File: AS9009.roa (raw, json)
Hash identifier: 0HcrEDFehIO+bLaT4y4MguVH08ybo1dayoAW3fIDZ68=
Subject key identifier: D5:13:9C:A6:65:4E:5C:E0:27:17:E4:17:C5:1D:92:D3:36:B1:EB:CD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 168A1A38F2AC061C079263D9ADB85ACDCA69451F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
Signing time: Thu 17 Aug 2023 15:16:07 +0000
ROA not before: Thu 17 Aug 2023 15:11:07 +0000
ROA not after: Thu 15 Aug 2024 15:16:07 +0000
asID: 9009
IP address blocks: 141.11.18.0/24 maxlen: 24
141.11.40.0/24 maxlen: 24
141.11.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8a:1a:38:f2:ac:06:1c:07:92:63:d9:ad:b8:5a:cd:ca:69:45:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 17 15:11:07 2023 GMT
Not After : Aug 15 15:16:07 2024 GMT
Subject: CN=D5139CA6654E5CE02717E417C51D92D336B1EBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:f9:0f:57:7f:0a:7d:ed:d2:c6:b8:7c:2f:
41:5b:23:c5:0d:96:55:f6:5f:32:95:47:f2:c6:a4:
52:85:e8:6d:e6:e4:20:0f:2e:75:75:da:14:d1:05:
ca:e8:c5:93:c0:9d:dd:20:5e:65:d3:6a:3e:02:ab:
ca:cc:37:0b:e9:38:6a:58:6e:09:4d:20:9d:be:e8:
7e:fc:4d:3d:fe:a7:d8:cf:f2:e8:d2:d8:04:d9:5f:
16:5d:59:5e:40:3d:0c:8a:ac:98:b9:2e:88:09:15:
9e:12:15:52:f0:1a:4f:be:b0:1a:ab:be:9e:50:c8:
de:47:6e:26:fa:eb:7f:d0:e8:77:fb:a2:95:00:36:
c7:48:5f:17:57:f8:d5:64:0e:e9:7c:0a:48:e1:c1:
34:4d:40:b2:52:34:6d:48:e8:e2:82:3f:43:63:54:
64:68:9b:97:00:24:d8:c3:46:53:5b:1e:a3:a1:5d:
0d:8b:2e:1d:b8:3d:86:c5:18:d3:1d:0f:7a:af:fd:
8e:fd:94:c6:a9:b3:a8:7a:a2:3c:0c:00:e7:79:c2:
1d:d8:6b:8e:5a:c3:0e:3b:95:34:d9:d8:45:94:94:
e5:42:09:e3:6f:59:f8:c3:4f:eb:47:68:60:62:33:
4a:76:09:18:cd:b2:5a:06:ba:c8:72:2a:e1:58:54:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:13:9C:A6:65:4E:5C:E0:27:17:E4:17:C5:1D:92:D3:36:B1:EB:CD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS9009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.18.0/24
141.11.40.0/24
141.11.96.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:79:6c:7e:56:ee:85:9a:45:6e:96:8c:7b:bf:83:49:81:2a:
8e:a2:20:11:2b:8e:bc:0b:d7:a5:0d:51:1c:28:8f:b7:c4:12:
ae:1f:d2:85:47:f1:10:b0:4c:d8:53:d1:09:7c:a3:f8:cf:1e:
c1:01:06:3f:3c:52:cd:d4:77:74:f5:ed:e5:43:13:4d:d8:d8:
6f:c6:4b:d2:2f:4b:c2:62:27:51:d0:db:6d:5a:cb:12:d8:08:
bd:be:bf:98:08:6f:3c:e6:14:72:90:09:60:d4:00:38:23:4f:
8d:8c:19:0d:64:08:ef:42:ff:ff:9a:59:f3:54:a0:23:55:d9:
f0:c0:b8:a0:9e:ab:72:77:f8:f6:46:d8:81:a6:98:99:48:06:
92:05:3d:d0:6d:37:a8:c1:94:bd:7b:55:a4:0c:ec:4b:51:c0:
7e:12:0c:57:21:52:30:74:dd:d8:ed:52:73:1c:fc:f4:fc:ca:
22:5f:2c:fc:7c:cc:00:45:d9:ee:4f:76:e7:6d:8a:57:2e:98:
f4:0c:08:f0:95:a8:ed:5d:ae:86:da:0f:8f:47:fd:8e:3d:17:
b1:db:66:a4:4f:1a:a5:34:3a:1b:08:0b:05:cb:04:48:e2:e6:
42:70:f3:c5:e3:88:0d:49:22:b5:42:7d:67:9a:b6:c4:5a:c1:
70:b4:6c:5f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 27 12:05:20 2024 by rpki-client on console-ams.rpki-client.org