Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215084.roa
File: AS215084.roa (raw, json)
Hash identifier: dZqt4L2vK11HOO6j5oO4iamg/BHOzwv1eRfOIhrbDNA=
Subject key identifier: 1E:3E:AA:26:1F:90:E0:59:FF:9C:42:6B:55:9A:42:4B:14:32:6C:C0
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 2EA3A758FC19B9604BAFAA727360C269BB1FD120
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215084.roa
Signing time: Tue 11 Jun 2024 00:16:53 +0000
ROA not before: Tue 11 Jun 2024 00:11:53 +0000
ROA not after: Tue 10 Jun 2025 00:16:53 +0000
asID: 215084
IP address blocks: 2a0f:85c1:3c4::/48 maxlen: 48
2a0f:85c1:80f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a3:a7:58:fc:19:b9:60:4b:af:aa:72:73:60:c2:69:bb:1f:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: Jun 11 00:11:53 2024 GMT
Not After : Jun 10 00:16:53 2025 GMT
Subject: CN=1E3EAA261F90E059FF9C426B559A424B14326CC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:ec:56:97:f4:ef:52:a1:d6:3c:95:f9:23:
98:f1:a2:f5:e2:92:fd:d3:a3:c2:56:2e:df:86:0f:
61:6f:26:8c:7c:08:60:4a:14:a2:2a:77:30:06:2d:
08:37:f0:f9:e8:4d:32:99:4a:35:96:bb:a8:d9:9b:
14:c9:9f:49:97:58:1c:53:4e:ab:97:cd:18:f1:cc:
7d:a3:ef:27:d8:c5:8f:18:92:12:1b:27:e6:14:c7:
d1:0a:7e:bb:43:d4:be:6e:e4:c2:b6:58:8f:f1:da:
32:4e:97:c3:4f:2f:ae:25:4d:f5:2d:e3:8e:6f:b1:
17:09:bc:1e:10:5f:eb:18:ce:ac:1a:05:5c:aa:f6:
73:5c:67:dc:5d:29:6f:2c:90:cf:86:5f:80:24:db:
17:36:20:b4:35:9d:74:aa:2a:e3:72:a8:1e:ab:6b:
4d:97:74:4b:10:e3:8c:b2:c1:66:60:5f:c0:c2:a4:
a9:a2:a8:13:54:b0:72:c8:1f:ab:63:aa:3f:de:5f:
4f:99:76:45:78:60:c7:19:b8:c4:d8:c9:8c:40:06:
5e:99:fd:6b:ce:8a:a4:af:7f:cb:aa:7b:1c:90:68:
7e:1a:cd:10:2f:c5:58:fc:b4:2f:a1:bf:24:6f:9d:
21:2f:16:b6:5d:0c:70:59:78:ff:09:92:03:f2:0c:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3E:AA:26:1F:90:E0:59:FF:9C:42:6B:55:9A:42:4B:14:32:6C:C0
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215084.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c4::/48
2a0f:85c1:80f::/48
Signature Algorithm: sha256WithRSAEncryption
30:e1:41:4f:75:c4:ad:ca:73:52:f2:a2:a7:42:2b:ff:39:24:
bc:ed:16:78:04:81:84:0b:39:80:87:16:a6:d1:16:0c:8b:7e:
de:1f:be:60:19:58:64:c3:ee:f9:d4:24:d1:ad:b0:1e:29:a5:
4a:fb:bf:80:df:ee:62:e0:fa:f3:f5:eb:86:1e:87:a8:5e:de:
55:a8:83:0c:1d:7b:0f:3b:85:19:f1:b8:f8:5e:e7:cf:02:ff:
24:02:84:6a:8c:33:95:e5:d1:a8:96:75:af:e7:83:d5:67:b2:
fa:89:a5:d9:81:0d:80:1a:29:af:14:a7:16:e2:5b:da:f8:0d:
51:e9:f8:fa:87:bb:d8:e1:95:b4:78:03:8b:7e:84:ab:65:c2:
c5:43:df:3a:c6:53:62:de:5c:b1:6c:ef:e1:14:0c:bc:b9:93:
f6:03:4e:30:2f:6e:9e:f0:63:a7:5d:2d:2c:77:b3:51:e3:97:
01:86:a4:d5:10:42:f0:91:ec:7e:32:75:7e:df:91:29:90:2a:
df:05:a0:ba:a8:14:1a:b7:d3:a3:20:f9:35:b7:68:9e:31:29:
84:1f:9b:83:f2:3a:a4:49:32:f9:27:be:ff:b4:98:47:1c:a8:
1f:90:2c:a0:3e:ae:ec:6a:39:d0:fa:5b:e2:84:74:fa:28:d9:
b7:64:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:31:24 2024 by rpki-client on console-ams.rpki-client.org