Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
File: AS138997.roa (raw, json)
Hash identifier: V6bbFZzCqkwaTNt2Xq3CeXS75dcWlnYKuaURG2I5p1s=
Subject key identifier: F4:FB:72:EF:88:4D:0D:58:EA:B0:86:FD:FA:B1:25:5D:42:32:29:BB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 573DA25F592486A95FA7AC42467A60D33FA0F677
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
Signing time: Tue 16 Jul 2024 14:02:24 +0000
ROA not before: Tue 16 Jul 2024 13:57:24 +0000
ROA not after: Tue 15 Jul 2025 14:02:24 +0000
asID: 138997
IP address blocks: 146.103.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3d:a2:5f:59:24:86:a9:5f:a7:ac:42:46:7a:60:d3:3f:a0:f6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 16 13:57:24 2024 GMT
Not After : Jul 15 14:02:24 2025 GMT
Subject: CN=F4FB72EF884D0D58EAB086FDFAB1255D423229BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8d:f5:53:26:5f:0d:51:85:5d:0f:fa:21:ca:
74:ff:c0:f7:b4:fd:fa:15:79:aa:52:11:ed:ec:4b:
49:d4:3a:1a:f5:e3:ad:3e:29:68:a2:3e:95:29:2a:
89:d0:8d:c5:88:ab:9b:5f:da:62:93:f5:fb:eb:3e:
06:b4:4d:c3:57:d2:6e:16:34:ac:94:35:74:c3:c1:
63:12:5d:60:d5:8c:a6:8a:6e:b1:00:20:34:85:0b:
9c:97:20:51:fd:84:7e:4e:5e:97:bd:67:19:6a:a4:
54:0e:85:66:2a:0a:d1:e4:9c:6d:ce:d5:48:90:8a:
29:ca:59:da:dd:30:64:a8:c3:3f:88:84:e7:e1:22:
2d:99:2e:97:7a:7c:37:72:0a:4a:70:4d:81:8f:6f:
28:64:77:c5:16:7b:0d:85:3b:09:95:76:8d:d8:ef:
7c:ba:7a:56:a0:81:0e:9e:6e:fd:06:30:31:28:4c:
a5:c4:0d:01:42:65:20:60:0d:d5:81:b0:59:11:bb:
cd:c8:4a:fb:91:e2:bf:cc:e3:28:cc:cf:a1:cf:b5:
2b:99:2a:2f:c5:84:48:cc:83:e5:e6:5a:b9:3e:3f:
ab:63:ac:12:a8:4d:2b:4e:41:45:7c:16:67:55:89:
52:a4:87:59:69:c5:6d:03:89:81:67:e9:cd:8e:a6:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FB:72:EF:88:4D:0D:58:EA:B0:86:FD:FA:B1:25:5D:42:32:29:BB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS138997.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.16.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:7e:ba:4d:b7:69:1e:b5:44:56:48:24:99:fc:db:d4:8b:c1:
77:10:cc:7a:0d:e2:bc:b7:bc:ef:cf:ed:5a:0a:f7:ec:a6:36:
3f:c1:7b:e2:9e:97:55:4d:b7:4b:25:60:1c:a7:49:41:b1:01:
94:d7:f2:52:63:0a:4a:ca:e7:b5:65:b3:11:40:85:e4:48:30:
ee:78:73:f7:d8:59:25:05:ab:a0:ab:a6:bf:9e:30:9d:4f:72:
e0:d1:14:cf:4f:75:92:f1:6c:f5:e7:a4:b5:82:bc:51:f6:55:
62:c9:94:f4:31:9f:cd:21:d1:1b:86:5b:40:a0:e0:cb:f9:92:
77:11:ba:8f:e3:ae:59:c6:45:73:ca:ab:69:07:e0:72:5e:7c:
66:3c:cc:91:83:35:52:26:41:a2:59:d4:7f:96:70:f6:66:60:
d5:94:3d:10:1c:9e:c4:ed:fe:84:d3:04:de:ea:8c:e5:47:ad:
3d:2e:3b:14:51:b4:3e:24:55:6f:c4:8e:cb:d0:58:bd:eb:30:
43:02:33:f7:0a:f6:1b:b6:dd:5b:60:09:be:77:68:d6:75:75:
2d:16:94:83:fb:4a:05:37:43:69:29:ae:d3:ec:44:9a:ae:52:
3b:f0:48:05:02:4c:ae:9e:24:4a:a9:1f:79:5c:48:28:51:96:
02:c6:68:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVz2iX1kkhqlfp6xCRnpg0z+g9ncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA3MTYxMzU3MjRaFw0yNTA3MTUxNDAyMjRaMDMxMTAvBgNV
BAMTKEY0RkI3MkVGODg0RDBENThFQUIwODZGREZBQjEyNTVENDIzMjI5QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQjfVTJl8NUYVdD/ohynT/wPe0
/foVeapSEe3sS0nUOhr1460+KWiiPpUpKonQjcWIq5tf2mKT9fvrPga0TcNX0m4W
NKyUNXTDwWMSXWDVjKaKbrEAIDSFC5yXIFH9hH5OXpe9ZxlqpFQOhWYqCtHknG3O
1UiQiinKWdrdMGSowz+IhOfhIi2ZLpd6fDdyCkpwTYGPbyhkd8UWew2FOwmVdo3Y
73y6elaggQ6ebv0GMDEoTKXEDQFCZSBgDdWBsFkRu83ISvuR4r/M4yjMz6HPtSuZ
Ki/FhEjMg+XmWrk+P6tjrBKoTStOQUV8FmdViVKkh1lpxW0DiYFn6c2OpiPzAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU9Pty74hNDVjqsIb9+rElXUIyKbswHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMTM4OTk3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkmcQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB/frpNt2ketURWSCSZ/NvUi8F3EMx6DeK8t7zv
z+1aCvfspjY/wXvinpdVTbdLJWAcp0lBsQGU1/JSYwpKyue1ZbMRQIXkSDDueHP3
2FklBaugq6a/njCdT3Lg0RTPT3WS8Wz156S1grxR9lViyZT0MZ/NIdEbhltAoODL
+ZJ3EbqP465ZxkVzyqtpB+ByXnxmPMyRgzVSJkGiWdR/lnD2ZmDVlD0QHJ7E7f6E
0wTe6ozlR609LjsUUbQ+JFVvxI7L0Fi96zBDAjP3CvYbtt1bYAm+d2jWdXUtFpSD
+0oFN0NpKa7T7ESarlI78EgFAkyuniRKqR95XEgoUZYCxmgt
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:33 2024 by rpki-client on console-fra.rpki-client.org