Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14445.roa
File: AS14445.roa (raw, json)
Hash identifier: UDQVabbXQ4OY3Lfgametci/Rp9UXpIW5pDnyDxmPJOk=
Subject key identifier: DB:82:6A:78:F4:AF:82:24:67:03:35:11:9C:D1:F1:6E:95:CC:1C:B9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1D174651363E86085330C607DDBD9440AED1877E
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14445.roa
Signing time: Tue 01 Oct 2024 18:58:45 +0000
ROA not before: Tue 01 Oct 2024 18:53:45 +0000
ROA not after: Tue 30 Sep 2025 18:58:45 +0000
asID: 14445
IP address blocks: 140.233.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:17:46:51:36:3e:86:08:53:30:c6:07:dd:bd:94:40:ae:d1:87:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Oct 1 18:53:45 2024 GMT
Not After : Sep 30 18:58:45 2025 GMT
Subject: CN=DB826A78F4AF8224670335119CD1F16E95CC1CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:a5:26:53:13:c6:68:a1:14:94:b2:19:91:
d7:fe:8f:f4:88:e7:4e:07:f5:1a:e5:60:29:72:87:
a1:30:6d:a0:4e:ee:5b:41:0e:5d:71:57:cf:d1:43:
94:99:cf:ab:82:a5:0f:60:4c:93:78:b5:46:23:ed:
9a:d4:e3:60:38:46:a0:c7:1e:a8:f2:47:a6:91:af:
e5:f1:f4:a9:fe:7f:9a:37:2c:b8:2d:41:a4:a7:83:
ea:98:26:b1:7b:e7:97:3a:37:4c:74:eb:45:cc:a8:
5a:c7:c5:d7:20:f1:cb:8d:da:2a:99:12:cb:07:b3:
1d:5a:58:82:e3:18:fc:48:08:d3:68:da:2a:a0:71:
29:7f:97:b8:8b:ca:85:08:15:9d:1e:02:1a:07:15:
ca:97:10:06:bc:9e:42:5c:b3:e3:91:50:2b:80:11:
41:a8:7f:2e:c3:b2:4a:e5:94:a7:08:2e:56:48:68:
18:52:60:75:5e:9b:b6:3b:cf:4f:ac:e4:8b:d3:d3:
74:a3:e5:c7:43:0a:21:73:42:74:7a:20:1f:37:27:
fe:f5:09:07:ba:8f:46:24:fc:14:f1:72:67:45:5a:
05:d3:03:a8:d2:3a:e1:9a:3b:f2:8d:cc:05:b0:f4:
bd:cc:1e:74:9e:95:c1:d5:73:93:9a:f9:a2:6d:2d:
7d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:82:6A:78:F4:AF:82:24:67:03:35:11:9C:D1:F1:6E:95:CC:1C:B9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS14445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.167.0/24
Signature Algorithm: sha256WithRSAEncryption
27:fe:3d:b7:00:a3:7d:62:ad:5b:17:50:0d:9a:c6:87:4b:b5:
1e:12:f4:26:9b:c5:97:b5:da:7d:f4:7d:87:da:40:73:aa:bf:
2a:5a:d8:42:83:7f:7c:e0:2e:b0:3d:39:bd:c3:f7:a5:12:c3:
38:d2:43:81:4d:5b:47:76:37:6e:15:ee:94:02:12:ea:7c:a4:
ad:4f:e9:8f:66:a5:22:b7:74:a0:d6:2e:a7:8c:0a:06:1f:41:
b9:82:23:c3:9c:bc:2d:1f:63:11:e9:ba:c5:51:71:2f:e2:11:
24:0f:60:f4:69:3b:62:7b:79:51:5d:2b:89:c0:6e:b9:3c:f3:
4c:7e:7f:2a:a5:7d:04:f8:9b:3b:45:07:78:7a:8d:54:14:ad:
8f:6b:df:00:83:f0:df:51:f9:53:38:ff:b1:4b:af:a4:83:ef:
81:4f:72:8f:dc:99:c8:3e:be:34:62:9f:65:e5:f4:63:2d:03:
65:97:7e:56:b4:e5:da:98:ae:90:12:73:c9:8e:91:a3:6b:f3:
ac:26:2e:fb:85:2b:d1:96:e8:a1:e2:7d:c4:bb:68:41:3b:1b:
3e:05:b5:ff:f4:a4:74:64:7e:c7:b5:ff:c0:6a:30:fc:ac:21:
89:f2:59:9f:3e:8c:cd:ed:2d:f6:4d:1e:30:2b:fd:4f:bd:67:
38:b9:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:50:40 2024 by rpki-client on console-ams.rpki-client.org