Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa
File: AS202673.roa (raw, json)
Hash identifier: bBWm7lCQsvphVYPlLgB78pFr8wjNnSF9TcIwg5vnJ+k=
Subject key identifier: B9:8E:87:72:E4:FB:7F:34:82:E7:AA:A5:FB:4B:D9:AB:4F:24:D3:C3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 512AF536CDE8ED81EFFC8669230990E8A8FADA68
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa
Signing time: Thu 11 Apr 2024 09:25:51 +0000
ROA not before: Thu 11 Apr 2024 09:20:51 +0000
ROA not after: Thu 10 Apr 2025 09:25:51 +0000
asID: 202673
IP address blocks: 147.79.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 May 2024 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2a:f5:36:cd:e8:ed:81:ef:fc:86:69:23:09:90:e8:a8:fa:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 11 09:20:51 2024 GMT
Not After : Apr 10 09:25:51 2025 GMT
Subject: CN=B98E8772E4FB7F3482E7AAA5FB4BD9AB4F24D3C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:9c:41:e7:89:cb:29:df:4c:df:52:04:0e:
9c:3f:56:90:a1:56:c5:2c:4a:01:4e:48:d5:44:ea:
82:97:d9:e4:04:f3:c2:9a:4b:b4:49:fb:2f:72:56:
a1:42:3c:de:eb:10:b9:5c:e3:e1:49:75:ad:fd:78:
e7:bf:18:45:f7:8e:fe:12:44:bb:92:6f:13:b0:07:
92:d8:75:6f:91:3b:8f:98:97:df:ee:c7:eb:28:7d:
35:cd:da:ab:b1:60:19:e6:18:84:96:3c:00:4e:a2:
87:9e:b7:ec:bb:2f:33:6a:09:68:a9:4f:32:3c:68:
c7:51:47:fc:ae:d9:8e:2a:3a:6f:0e:55:40:d4:b5:
bf:e5:bc:3a:ab:59:82:88:5a:82:98:fa:57:11:08:
f7:3c:39:1f:7c:a2:54:b4:17:60:a3:c0:98:be:93:
84:55:35:a9:d8:65:01:e2:9e:cb:28:7e:39:ef:3b:
09:27:0d:a3:e0:fa:5b:eb:ea:3f:75:c8:d8:97:c1:
33:cd:81:1a:69:38:35:59:37:09:84:4a:2a:5c:4c:
42:92:42:08:97:ce:a5:26:57:0f:76:3d:e7:f7:b0:
89:5c:a0:2c:1f:01:6b:88:10:7e:bb:d6:20:d0:40:
97:a1:4e:a1:34:05:67:0b:ea:93:f5:f9:19:34:d3:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:87:72:E4:FB:7F:34:82:E7:AA:A5:FB:4B:D9:AB:4F:24:D3:C3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS202673.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.30.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e4:65:a1:4c:e3:87:ac:a1:cf:c2:ed:65:de:30:aa:80:69:
22:b9:ce:cc:c2:1a:d1:6c:b9:1f:ce:ff:24:09:95:a9:2e:52:
8f:5a:95:4d:d9:d5:c0:b1:19:dd:3b:45:88:5b:36:22:8a:de:
19:cd:26:d9:71:fd:f0:d0:2c:cc:a7:e0:66:3f:30:e5:07:ef:
69:29:eb:58:32:e3:15:6d:ea:79:ee:a7:e4:d2:09:6e:f5:ec:
59:82:89:3b:37:fb:2c:47:70:2e:2d:f7:5b:f3:a5:07:e9:12:
28:35:8f:ed:08:7a:db:4c:5a:52:d3:ff:03:38:f0:04:26:73:
a4:9e:45:37:91:ee:8b:db:7b:4e:a3:88:8e:40:dc:09:d3:1e:
8f:2b:4c:19:f7:e5:e5:91:3f:06:70:bd:d4:55:06:da:8f:da:
9a:20:da:fe:ac:86:35:ab:b0:f3:2d:d7:e7:67:c3:d6:16:1d:
85:31:36:ff:be:63:a3:dd:56:14:a6:64:7c:26:aa:8f:2e:c4:
aa:cf:38:47:52:fd:24:9b:7a:ba:26:e2:5a:e9:f2:27:58:ba:
55:1d:fb:4f:06:f4:38:ab:74:88:50:0a:ba:98:85:02:33:67:
c2:d4:b2:1c:25:3d:bc:95:97:16:ff:a7:bc:20:4e:39:16:96:
69:32:db:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:59:43 2024 by rpki-client on console-fra.rpki-client.org