Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.roa
File: AS207841.roa (raw, json)
Hash identifier: Nem9sVLQ6gvv6jcWy4mLHw0EytzWsI9WqmIr+odFJOs=
Subject key identifier: 22:C6:81:D4:05:E9:9E:B5:9E:AC:A6:E7:D5:51:F4:4C:42:28:3B:D6
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 3E584932061FE421469392019BFE32E6934FA195
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.roa
Signing time: Thu 23 May 2024 16:49:08 +0000
ROA not before: Thu 23 May 2024 16:44:08 +0000
ROA not after: Thu 22 May 2025 16:49:08 +0000
asID: 207841
IP address blocks: 193.57.144.0/24 maxlen: 24
193.57.159.0/24 maxlen: 24
193.57.167.0/24 maxlen: 24
193.57.168.0/24 maxlen: 24
2a0f:85c0::/48 maxlen: 48
2a0f:85c2::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:58:49:32:06:1f:e4:21:46:93:92:01:9b:fe:32:e6:93:4f:a1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: May 23 16:44:08 2024 GMT
Not After : May 22 16:49:08 2025 GMT
Subject: CN=22C681D405E99EB59EACA6E7D551F44C42283BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:1a:8e:17:4d:78:6f:34:6d:99:6b:47:7b:
60:44:8d:fd:95:04:fe:b4:ff:55:f9:6b:cf:5a:80:
c1:c3:f1:be:34:a6:06:b6:76:c1:e1:f3:2f:62:2b:
d9:c1:d3:a4:c8:65:06:f6:90:91:ca:14:53:82:a8:
89:d7:12:a1:e2:38:5b:a4:74:96:25:86:7b:ed:9f:
a3:73:2c:cf:1a:86:0d:83:b3:8e:7b:9c:a5:21:dd:
12:75:6a:2e:f4:46:0c:33:c1:90:72:96:84:0d:02:
14:31:68:64:7e:78:58:04:76:c0:4d:47:b5:93:8f:
f0:4b:d6:e8:59:4d:3b:0c:56:cf:ce:01:82:88:7c:
a3:64:31:9f:fc:8a:26:5f:88:c6:a8:56:98:70:24:
0c:bc:29:d6:7a:44:8c:f1:54:da:7f:23:dc:57:6f:
c2:51:b5:45:52:fb:28:d1:7a:f6:26:9c:fd:a4:dd:
3e:60:ed:82:06:01:fa:1a:3c:58:45:f5:f0:2c:45:
4f:21:a4:57:66:80:5a:7e:6a:ef:61:27:52:d7:fd:
8b:88:99:41:0a:dc:bd:bf:e1:8b:32:5a:c8:48:a2:
1d:d8:ae:0f:16:e6:b9:c7:83:2e:c0:96:5c:6e:2d:
f0:ea:cf:6d:67:b1:6c:1c:db:d8:c6:ab:af:53:88:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C6:81:D4:05:E9:9E:B5:9E:AC:A6:E7:D5:51:F4:4C:42:28:3B:D6
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.144.0/24
193.57.159.0/24
193.57.167.0-193.57.168.255
IPv6:
2a0f:85c0::/48
2a0f:85c2::/32
Signature Algorithm: sha256WithRSAEncryption
0f:ce:03:77:3e:dd:de:0a:98:58:e1:c0:96:25:cc:69:8a:9b:
25:90:bb:2d:3d:16:d6:61:2b:cc:bb:96:8b:eb:ca:2d:f6:f5:
6b:e9:01:eb:e2:ae:a7:da:7d:c9:96:9a:03:b4:38:73:d8:7b:
ca:4d:8d:33:72:d5:87:c8:81:e7:60:9c:ec:2e:be:d7:c6:75:
80:07:91:bf:52:18:58:ad:bc:b4:60:25:e7:17:4a:72:b2:08:
99:2b:a5:5a:19:76:72:13:aa:27:e5:8f:c0:82:b0:e6:43:44:
1e:2d:d9:5f:1a:b6:a4:4a:2e:7f:7f:9f:35:68:74:9a:b0:e7:
0c:cd:5a:0e:8e:1e:3b:cc:e7:dd:8d:66:53:8b:37:37:58:b2:
41:3a:b5:b0:a3:0e:09:a7:f6:c6:9f:ca:96:49:b1:00:fc:65:
db:6e:c4:a6:bc:44:85:e4:1d:4f:d7:43:6c:7b:f9:9a:9c:7b:
6a:b1:e4:1d:5f:bb:ae:1f:4a:03:51:35:94:1e:c4:fe:67:79:
d0:90:13:fc:9c:4f:83:6a:10:4b:c8:b7:db:b2:dd:90:d2:3a:
4e:0a:6e:48:e8:4f:d4:5c:e8:22:b4:e0:14:9d:7a:f9:be:f6:
11:2d:59:c7:d2:27:05:03:b0:8d:dc:3b:14:35:9c:63:d5:09:
21:0c:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:31:23 2024 by rpki-client on console-ams.rpki-client.org