Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214763.roa
File: AS214763.roa (raw, json)
Hash identifier: +6X9wT43/G6phn2D8EvYhE5U7hXNL2stOr2ULLcnk34=
Subject key identifier: 98:9E:2F:6C:BB:3F:CD:A2:29:AC:A4:86:BE:39:87:60:54:CC:08:B5
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 6ABE9704069ACACAE4C6F72523C2C02E83DE8AAB
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214763.roa
Signing time: Tue 11 Jun 2024 00:17:45 +0000
ROA not before: Tue 11 Jun 2024 00:12:45 +0000
ROA not after: Tue 10 Jun 2025 00:17:45 +0000
asID: 214763
IP address blocks: 2a0f:85c1:811::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:be:97:04:06:9a:ca:ca:e4:c6:f7:25:23:c2:c0:2e:83:de:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jun 11 00:12:45 2024 GMT
Not After : Jun 10 00:17:45 2025 GMT
Subject: CN=989E2F6CBB3FCDA229ACA486BE39876054CC08B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:d0:09:b2:c9:e4:b3:21:46:9e:6b:cb:8d:
56:64:6f:0a:da:a1:25:81:15:23:68:a0:62:d4:c3:
d8:e1:27:45:34:31:0a:93:72:8b:9c:ee:c3:5a:14:
95:47:5f:46:9b:37:e8:20:13:f7:43:d4:d4:c1:d0:
f4:5e:99:b6:ba:66:20:06:88:78:19:f0:73:d8:d1:
e8:f2:13:ad:14:21:76:25:1e:a5:7b:03:48:08:01:
f6:b5:5f:b2:b4:8e:ad:ce:94:5b:04:18:42:41:0c:
84:cf:57:5e:4d:a9:a4:23:dd:5c:7f:e7:b6:13:42:
c6:3a:6d:11:7d:6f:eb:82:ad:f6:b4:62:73:5a:00:
aa:ca:e0:b9:c2:d2:97:61:a4:1b:e9:98:94:5f:9c:
6a:d7:a1:43:03:3c:e7:11:ac:c6:33:e1:9b:75:6e:
1a:2a:13:eb:0a:c0:bb:29:19:60:4c:53:62:25:0d:
89:44:41:b8:d7:91:15:66:e0:01:e3:e2:1b:83:1e:
33:7b:71:f1:68:08:53:ca:d4:d7:30:4f:cd:6e:41:
0a:03:6d:bc:60:b1:5b:90:5b:e6:69:2b:47:42:a9:
b7:67:48:4e:41:9c:51:e8:b6:e0:70:80:7c:0a:dc:
e6:01:6c:87:25:a7:aa:c3:ad:9a:ca:18:e2:e3:0e:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:2F:6C:BB:3F:CD:A2:29:AC:A4:86:BE:39:87:60:54:CC:08:B5
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS214763.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:811::/48
Signature Algorithm: sha256WithRSAEncryption
7d:fd:8d:90:72:5e:5a:30:b8:b6:90:b2:3c:e4:34:da:1c:b8:
e3:72:e0:e4:b8:3c:56:d4:d1:f8:85:2b:37:3c:75:1d:93:4a:
ba:fc:7c:16:5f:79:cf:85:eb:29:51:02:b7:25:08:3d:bb:7b:
2e:a1:c0:9f:13:e7:d2:7e:8f:9f:9e:0d:d5:0b:5b:16:dc:d8:
b4:ed:37:c3:ea:3b:5f:87:85:0f:12:f4:66:2d:af:47:d2:96:
5e:37:1d:9e:0f:1d:ed:c6:38:48:a6:f6:ca:7d:9f:af:a6:df:
f0:0b:c1:ff:1d:fc:20:4b:b4:6e:c8:55:26:b0:ec:6f:d6:81:
68:e0:6f:d7:a9:9b:54:cd:a1:79:a2:ea:33:fc:7a:10:f9:1e:
8c:a4:1a:c6:6d:4c:ee:d3:9a:1a:88:30:70:8f:c4:bd:35:02:
06:d3:b2:8a:6c:7e:24:c0:37:5f:c0:4c:53:29:04:4e:c3:c2:
9c:5e:12:02:61:b5:0d:41:9e:fc:d2:1d:08:7a:6c:c1:8e:38:
fd:63:c6:12:d8:10:2e:22:32:cf:04:7e:e8:38:32:15:e2:ec:
dd:94:cc:12:3e:8d:7e:4a:3e:f0:61:d2:57:72:37:1d:d9:62:
ed:8c:b6:1b:c0:70:64:79:61:6d:4a:bf:97:81:9e:45:0e:53:
ba:b2:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:17:46 2024 by rpki-client on console-fra.rpki-client.org