Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: r5p3pJ0hzaW1lSJ0hoywoHQqBtpy+WUbCZAEGjh5k8c=
Subject key identifier: 5D:69:FE:E3:6C:14:8F:15:7C:61:FD:FA:08:ED:6D:09:A1:AE:E5:B2
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 3B3AC1B74B0BC707D0F679B5C39E32F34958983C
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS1239.roa
Signing time: Wed 10 Jul 2024 14:05:31 +0000
ROA not before: Wed 10 Jul 2024 14:00:31 +0000
ROA not after: Wed 09 Jul 2025 14:05:31 +0000
asID: 1239
IP address blocks: 146.103.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:3a:c1:b7:4b:0b:c7:07:d0:f6:79:b5:c3:9e:32:f3:49:58:98:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 10 14:00:31 2024 GMT
Not After : Jul 9 14:05:31 2025 GMT
Subject: CN=5D69FEE36C148F157C61FDFA08ED6D09A1AEE5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:08:34:4f:b5:bb:18:78:d1:9b:69:9e:a0:
48:b2:e7:9c:80:25:fe:48:a8:a3:b4:9a:ab:4e:e7:
fe:a0:eb:59:9d:bd:9b:5f:b8:23:f3:3e:2d:dd:71:
0e:17:6b:5a:75:33:fa:b0:94:98:07:7d:c7:69:c2:
cd:8c:ed:c6:3f:cb:ca:8f:d5:08:e2:ce:02:bf:f4:
2c:17:e2:92:22:a4:e7:7b:a2:ed:29:80:46:86:4a:
ad:eb:cc:59:d4:46:2d:07:5c:85:0b:26:f2:dc:eb:
f2:49:6a:46:63:70:15:6b:3e:4b:bf:0d:bd:93:55:
f0:f2:7a:2a:c2:84:c9:f3:c0:83:e1:23:ff:d3:15:
54:f8:b1:a3:25:11:d3:cf:a4:fc:62:74:48:7b:46:
6a:de:b5:0e:1f:25:a8:e2:3d:94:e3:10:00:53:b7:
b9:5b:95:f9:d8:eb:96:f1:a4:60:25:1f:d0:49:f2:
8c:f2:6b:7b:88:72:04:1f:30:a4:a3:14:a4:6f:04:
64:8f:00:60:02:10:bc:88:a3:72:6e:52:58:99:1e:
f5:ae:1f:e0:08:5f:bf:77:94:c7:7c:a8:30:9d:2b:
6f:f5:4a:8a:c9:4d:86:3f:c4:99:91:78:73:f0:9a:
30:dc:9d:13:dd:f2:a4:de:19:83:d2:c0:b8:db:71:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:69:FE:E3:6C:14:8F:15:7C:61:FD:FA:08:ED:6D:09:A1:AE:E5:B2
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.51.0/24
Signature Algorithm: sha256WithRSAEncryption
89:85:57:16:7e:30:0b:0c:df:62:93:6e:af:68:b1:78:2b:7a:
17:0a:ce:cd:24:9a:3f:2c:ff:52:81:89:71:7a:d3:ad:88:06:
c5:65:7a:7e:8d:2c:de:3b:02:f6:18:2d:07:97:6d:28:bf:06:
1c:df:1d:82:c1:13:44:53:ff:48:7a:3f:87:b2:1a:db:9a:c3:
a1:54:ae:4c:3b:0a:b0:d4:5c:ee:ba:d1:c5:7c:4e:95:34:7f:
0c:82:f5:18:09:6f:06:8b:b3:53:79:4f:80:15:45:f7:3f:d3:
10:99:ae:5c:26:a6:50:f5:21:64:da:07:b9:11:ea:02:f1:c8:
9f:08:82:9c:77:a3:91:cd:bc:2d:16:59:aa:ad:90:4d:cc:4c:
17:ef:66:1f:c6:c6:c1:9a:36:52:c9:1c:1e:41:31:b2:e3:92:
61:38:3b:8e:fb:f0:f6:e0:0f:2b:b8:c4:ec:54:f4:0d:60:33:
e7:7d:d1:fb:55:74:c5:d0:05:67:d3:c9:c7:0d:19:4d:29:36:
66:f3:86:c0:9c:4c:39:12:c8:e3:ea:95:ee:33:c2:d4:25:45:
09:b7:c3:28:65:5f:43:a6:06:57:24:09:34:5c:e0:75:70:75:
f9:81:64:88:9c:68:95:4e:1b:ef:df:43:b6:68:84:d0:32:19:
e8:df:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:43 2024 by rpki-client on console-ams.rpki-client.org