Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS141892.roa
File: AS141892.roa (raw, json)
Hash identifier: mlFG9vBssiVBSwbsLtyNPGLfS573wHUgE99T0WAwc4U=
Subject key identifier: 4D:69:EF:A2:4D:03:B4:73:7E:62:77:1D:2D:7D:AA:E0:4D:BB:9C:7E
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 378E4FA294E506A518D38B4531067AC8351D399D
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS141892.roa
Signing time: Thu 23 May 2024 16:49:13 +0000
ROA not before: Thu 23 May 2024 16:44:13 +0000
ROA not after: Thu 22 May 2025 16:49:13 +0000
asID: 141892
IP address blocks: 2a0f:85c1:3c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8e:4f:a2:94:e5:06:a5:18:d3:8b:45:31:06:7a:c8:35:1d:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: May 23 16:44:13 2024 GMT
Not After : May 22 16:49:13 2025 GMT
Subject: CN=4D69EFA24D03B4737E62771D2D7DAAE04DBB9C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1d:7f:bf:cc:d0:99:49:46:57:39:f2:34:80:
42:3d:c7:35:64:c9:d5:88:25:27:4f:c0:6d:3d:73:
f6:96:e9:ed:9d:f5:fc:9d:c6:52:ca:6a:9e:65:ef:
b3:cb:d1:87:f5:98:8a:36:cf:81:39:3e:48:f0:f3:
e6:7d:5d:72:ad:48:cc:24:08:51:ba:e9:0f:97:fb:
3d:9b:e0:2f:06:ab:f2:c8:85:37:62:89:96:cb:33:
aa:88:3e:92:fe:18:e3:b5:27:6f:0f:e3:50:b1:63:
92:e5:a9:b2:78:ce:33:28:d9:9e:18:94:d8:cf:f6:
f5:71:14:9f:ce:6a:33:49:6a:2e:fa:4b:35:5f:53:
2b:96:77:f2:37:01:18:b1:f0:10:91:11:a8:3a:4e:
40:70:4a:a6:37:e6:53:1c:a7:5f:9a:88:60:e6:90:
0d:62:87:33:86:e4:9d:4d:b7:cc:0d:0d:33:c3:2d:
0d:06:d0:4d:95:a5:0e:4a:3a:7a:f5:41:b6:4f:17:
ec:fb:29:0a:9e:ca:79:72:19:8d:b2:d1:26:c9:ce:
b4:4f:5a:78:df:e1:31:e3:03:94:1d:c3:ff:5b:4f:
03:14:52:fd:5f:aa:da:c3:cd:93:1e:e9:df:9b:cc:
ff:c3:81:7a:9f:1f:83:2c:76:07:cb:7b:bb:3e:6d:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:69:EF:A2:4D:03:B4:73:7E:62:77:1D:2D:7D:AA:E0:4D:BB:9C:7E
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS141892.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c6::/48
Signature Algorithm: sha256WithRSAEncryption
86:9b:1a:dc:9d:6e:ce:27:a8:97:ab:93:e5:d9:3e:42:76:a0:
f8:97:e0:c2:eb:a1:bc:49:a1:e2:f8:2e:a0:dd:2d:d6:fc:a0:
b0:93:e5:72:1b:10:87:f2:5c:b7:53:40:c1:b1:26:f0:f9:ce:
75:fd:42:b8:6c:23:c2:ca:88:32:95:76:df:bf:37:0b:02:f6:
ac:27:b2:89:25:19:c5:82:fb:3e:4a:c4:cb:c9:81:7d:16:d3:
4b:7a:75:26:ae:63:32:f1:11:80:5b:49:08:46:6c:26:7b:0d:
32:eb:29:8b:a3:2e:0f:3d:cc:71:29:4a:db:96:2a:4a:e1:e7:
78:98:cb:f1:ba:98:20:60:59:56:e2:e4:6c:a0:ae:97:2a:49:
15:60:92:d8:e1:53:91:e8:15:96:3f:76:60:b4:d6:2b:a3:87:
1e:db:ee:cf:fd:23:6b:3a:cf:e7:66:0f:8f:fa:ac:4c:03:ec:
30:6d:3c:3b:f0:a8:5f:60:af:6d:fc:c5:93:23:b8:d0:3c:fb:
d5:51:a7:10:3d:76:a2:45:33:12:d2:7e:ab:69:e9:2b:80:19:
61:40:15:b7:13:63:31:94:8c:c9:73:c2:53:4c:c9:f2:6a:a7:
ff:14:32:bd:cc:d7:7d:94:bb:0c:4e:57:22:e5:14:dc:64:e6:
a5:40:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:31:23 2024 by rpki-client on console-ams.rpki-client.org