Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215207.roa
File: AS215207.roa (raw, json)
Hash identifier: A3Mt3/++Cn2M/4pRRuhOVqjlT88FDe3S30SHV0eVlu0=
Subject key identifier: 30:EE:3E:93:F5:76:47:ED:9F:A8:20:87:BB:58:97:65:04:72:EE:FC
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 2585F72384BC541F7077C32FBB619C2120C47A26
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215207.roa
Signing time: Thu 23 May 2024 16:49:09 +0000
ROA not before: Thu 23 May 2024 16:44:09 +0000
ROA not after: Thu 22 May 2025 16:49:09 +0000
asID: 215207
IP address blocks: 2a0f:85c1:3aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:85:f7:23:84:bc:54:1f:70:77:c3:2f:bb:61:9c:21:20:c4:7a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: May 23 16:44:09 2024 GMT
Not After : May 22 16:49:09 2025 GMT
Subject: CN=30EE3E93F57647ED9FA82087BB5897650472EEFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1e:75:d5:36:54:36:98:bd:75:e1:33:8f:7a:
af:2d:13:1d:10:30:2b:59:00:e3:f7:7d:fa:ee:3e:
78:7d:e5:fd:1d:e2:c0:e6:6d:3e:46:b6:de:14:c1:
e2:26:a2:e7:43:9d:84:15:63:1d:fa:18:7a:7f:a7:
d7:f3:d7:8c:37:d1:bd:e8:ec:06:8b:75:31:5e:ba:
5f:e5:39:40:61:30:68:6d:f8:40:eb:a1:39:6c:04:
1c:bf:60:f0:4e:b8:9a:29:ac:4d:e6:39:55:36:45:
5a:60:9a:04:36:5a:4c:28:c8:56:2e:81:c9:4b:bc:
d0:da:8e:e7:1d:4e:da:2e:46:84:06:c8:96:dd:a4:
52:4b:e4:51:80:fe:65:ed:c0:cc:e0:d7:9a:b5:4a:
58:2a:27:57:54:19:34:c9:e9:7c:bf:47:76:96:fe:
42:43:ce:55:1c:a7:aa:7d:ea:09:2f:05:65:7b:7b:
e2:32:42:d5:3d:91:91:ca:ab:c1:c6:8e:b4:9a:61:
11:ca:24:3d:04:3e:b4:67:8c:08:7c:88:de:dc:a4:
89:0f:c4:e1:57:e2:04:e9:76:74:29:c5:06:61:0c:
a7:fc:49:0d:17:31:0b:1c:c6:8e:dc:d5:24:74:2c:
47:10:6a:dd:3a:8b:39:1c:27:a9:41:2a:81:08:76:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:3E:93:F5:76:47:ED:9F:A8:20:87:BB:58:97:65:04:72:EE:FC
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215207.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3aa::/48
Signature Algorithm: sha256WithRSAEncryption
22:82:99:77:45:0e:56:82:50:4e:f6:1c:b4:1e:19:d3:17:3f:
fd:a6:62:7e:55:16:6d:7e:06:2f:e7:c8:b8:e0:a8:e0:bf:74:
b9:a3:6c:63:da:54:f0:57:01:d2:53:e8:c3:6c:e3:d8:b4:1b:
73:83:a4:f3:61:9e:e3:bf:83:ed:73:58:08:c9:29:36:15:ed:
3f:49:7a:7b:a9:c7:02:4d:51:89:c2:b1:91:56:5b:3c:2a:ca:
02:f8:d5:bd:1e:8a:e9:a6:e9:d3:18:ab:2c:bf:23:0b:09:33:
da:c5:06:d0:9c:db:d9:4e:d1:45:b9:a6:db:c3:4b:b8:d3:9e:
a6:4b:12:66:2d:68:30:8f:bc:ce:d4:86:a7:db:3c:d6:7e:4b:
a3:92:93:99:37:10:4e:01:96:bd:46:79:36:a0:9f:69:05:35:
96:f1:f6:8a:6a:53:d2:7d:c3:a4:2c:61:b0:a8:5b:e6:9b:f0:
95:17:67:b1:01:d4:6f:e0:51:8b:d3:45:c0:21:68:58:03:27:
da:33:01:27:65:5b:01:79:e9:20:9c:cb:d4:7f:a5:19:5f:fa:
93:08:8d:f2:28:21:46:f6:f0:8d:ff:a3:0f:9b:33:6d:e1:89:
78:f7:99:3f:c1:e8:03:88:5e:92:ac:73:cf:36:e5:4c:c9:90:
b1:ec:8a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:31:25 2024 by rpki-client on console-ams.rpki-client.org