Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138156.roa
File: AS138156.roa (raw, json)
Hash identifier: 48hL9KZ5BObQ1rhl12TRQX6aZEImhf1XqlFHeTJKKGI=
Subject key identifier: 92:D7:F1:2E:67:85:9A:09:CC:BA:58:BF:19:51:97:A1:9E:CA:07:25
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 28F34BD562CDCA1CD01C2B7DD6A8B38679BBA5BE
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138156.roa
Signing time: Fri 16 Aug 2024 13:58:22 +0000
ROA not before: Fri 16 Aug 2024 13:53:22 +0000
ROA not after: Fri 15 Aug 2025 13:58:22 +0000
asID: 138156
IP address blocks: 147.79.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f3:4b:d5:62:cd:ca:1c:d0:1c:2b:7d:d6:a8:b3:86:79:bb:a5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Aug 16 13:53:22 2024 GMT
Not After : Aug 15 13:58:22 2025 GMT
Subject: CN=92D7F12E67859A09CCBA58BF195197A19ECA0725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3f:a9:d2:63:75:b6:84:03:a1:53:58:54:af:
98:38:ab:a4:c3:af:98:28:49:c3:d2:97:f2:fd:01:
7d:42:f0:f1:5c:94:64:d8:50:38:60:d2:5c:c4:63:
37:aa:80:6d:54:ad:5e:5d:12:62:6f:e6:b6:7b:e7:
77:f5:21:a2:6c:e9:16:4c:d9:2a:74:0e:32:f5:3a:
09:9e:7f:46:56:fa:7e:1a:0a:46:90:9d:73:06:8e:
6d:9d:53:f3:c7:81:0e:8c:0c:07:66:4c:31:38:79:
20:a3:6e:31:86:ac:90:5e:ad:39:26:90:5a:97:e7:
78:ca:1b:e9:4d:c7:e3:68:30:ce:87:56:cc:83:5d:
cc:71:3d:2d:b5:f4:74:15:c2:c0:97:f2:fd:f0:e3:
12:16:70:7e:ff:b8:a5:a0:2a:fa:db:ea:34:d0:7b:
0d:a5:ac:17:e0:46:ff:10:90:d7:d3:13:11:f1:2f:
a6:54:78:69:c9:36:42:6e:7b:d5:d2:31:8a:14:dc:
73:6c:9a:10:97:78:f6:f5:e1:94:04:de:eb:3d:eb:
9c:db:ec:68:a5:be:e1:ea:92:e7:c4:d8:c6:36:ed:
1f:d8:c8:3e:89:33:b4:73:1d:0a:60:cf:0b:58:11:
f6:2f:1c:6c:1c:aa:b0:c3:48:31:d2:87:24:26:eb:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:F1:2E:67:85:9A:09:CC:BA:58:BF:19:51:97:A1:9E:CA:07:25
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138156.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.55.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a9:38:c3:b3:8e:7f:9c:4f:29:ff:5c:40:7e:02:22:df:81:
84:b9:7b:b5:a9:8f:e3:fa:84:f5:5b:7a:9f:d5:8f:2d:67:0a:
a2:3a:94:d9:3b:3b:4f:31:22:8b:c2:47:f4:1b:13:80:7f:b1:
19:75:67:f1:15:62:4f:76:7a:7b:f8:34:e6:59:bf:d7:f6:07:
d3:35:f3:b4:99:ec:49:68:a4:2c:c2:12:d7:88:9f:58:23:58:
5a:73:74:b0:c0:f5:3e:bb:28:03:fe:36:20:78:b7:91:0b:e3:
dc:e4:55:64:fd:3a:25:d2:88:7d:e5:cd:43:c5:b5:aa:7c:1a:
0d:8b:1f:08:da:4b:9d:ce:d1:ea:c2:82:a1:d6:99:f7:68:3d:
4c:c0:44:c4:95:5f:aa:37:d6:35:4a:2b:9c:a8:ff:77:70:32:
cd:fc:76:85:00:c8:a9:13:5c:04:40:89:d6:39:57:18:24:06:
4f:ad:c5:89:8c:09:9a:b1:06:60:d2:2c:64:50:7d:cc:be:18:
6b:0f:a8:29:c0:e0:39:a1:c8:f5:98:17:d9:5d:d5:3f:96:92:
65:5d:38:a7:c1:6e:2a:ca:ee:9d:9f:e4:9a:e3:cd:f4:ff:26:
dd:39:08:93:af:f2:a2:6d:20:ac:11:7b:4d:87:e6:66:96:2a:
b6:d0:53:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:15 2024 by rpki-client on console-ams.rpki-client.org