Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
File: AS206092.roa (raw, json)
Hash identifier: NAXPoDb70lSjxY+kgaMM2gc+uMwy4ITL1v3Pqp/OwjQ=
Subject key identifier: E1:14:A0:F4:86:C7:1B:4B:42:44:97:ED:64:A8:A5:21:6C:EB:69:E9
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 5D7B0616D1B302DFCE707D9D829E919912B4AF90
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
Signing time: Mon 13 May 2024 04:36:20 +0000
ROA not before: Mon 13 May 2024 04:31:20 +0000
ROA not after: Mon 12 May 2025 04:36:20 +0000
asID: 206092
IP address blocks: 146.103.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:7b:06:16:d1:b3:02:df:ce:70:7d:9d:82:9e:91:99:12:b4:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 13 04:31:20 2024 GMT
Not After : May 12 04:36:20 2025 GMT
Subject: CN=E114A0F486C71B4B424497ED64A8A5216CEB69E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f6:f2:8f:bd:12:c2:4b:b6:5c:07:f0:5c:72:
86:b7:d1:87:50:b5:f9:d2:17:c6:83:7e:bf:fd:2a:
7e:02:73:19:ef:9b:90:a5:54:45:6d:4b:17:53:61:
98:98:c3:f8:77:b2:ee:db:04:65:49:5d:1c:67:53:
07:1f:12:ec:4c:eb:0b:9b:4a:90:6b:14:f1:6d:c7:
23:08:9f:81:cb:68:41:34:3e:5e:11:34:b8:8d:59:
f6:b8:0f:48:36:5c:dd:f7:62:78:34:c5:ad:c3:d2:
b9:d6:73:d5:36:9b:2c:54:e3:14:3c:9e:93:99:09:
4f:dd:01:2a:dc:f1:bd:5f:69:a6:8e:6c:bb:d0:3e:
a0:f8:0b:c4:04:0e:9e:bd:59:ec:bd:ff:8e:13:a7:
59:bb:4c:4a:92:35:f8:1a:6d:70:49:f9:28:73:a4:
87:b9:b4:a4:b2:65:03:ae:5a:71:6b:0d:0c:25:e1:
ed:e1:b0:83:81:22:72:a2:a8:02:b4:82:a8:d7:5f:
cb:2b:ff:b2:aa:98:d1:66:58:59:03:6d:e4:b1:9d:
46:c0:18:de:a8:c5:b3:d4:30:02:96:96:0f:3c:5e:
41:10:a0:96:66:da:a9:fa:bb:c6:92:94:36:5e:bb:
10:2e:ee:cf:74:8b:63:24:ed:64:48:c6:6b:af:ea:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:A0:F4:86:C7:1B:4B:42:44:97:ED:64:A8:A5:21:6C:EB:69:E9
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS206092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.39.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7f:d2:c3:32:47:0f:64:5f:96:1f:79:e6:91:5f:ef:6d:30:
ef:01:5e:54:32:52:5c:17:07:f7:ea:51:87:88:a4:68:03:a9:
03:12:de:c5:e6:09:31:77:03:1f:69:ff:51:00:61:57:4a:d7:
8d:ea:a1:c0:b6:87:22:29:26:03:45:62:a8:3e:9e:4b:48:94:
f6:fc:da:ac:37:50:a4:c3:f0:20:56:f1:05:b9:e6:45:63:5c:
9f:d3:fa:79:82:fd:23:3d:68:66:6a:35:2b:8e:5e:e5:99:79:
ae:6c:ee:f6:19:83:6a:47:ec:36:08:62:01:15:df:3a:4e:b0:
6f:f7:74:5e:db:cc:c2:ec:3c:ad:db:6d:f7:10:be:f4:af:4a:
d0:a2:88:59:3c:06:8a:23:33:ac:5d:d5:3d:ed:74:47:b8:29:
ed:d9:c4:59:8a:43:35:8b:1c:31:a4:89:38:2c:72:8e:e4:34:
c6:1b:a9:f3:b0:d2:53:52:b1:0e:e7:35:a0:5e:4e:58:27:b7:
25:af:9b:b7:7c:1c:d3:81:e4:f9:24:07:e7:c0:1c:a4:39:86:
ad:47:db:77:62:c2:d9:17:3e:50:63:08:e2:da:a3:98:1e:5f:
38:58:97:9b:e8:04:61:b1:a6:4e:a6:fb:76:a4:4b:30:5b:a5:
33:30:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:15 2024 by rpki-client on console-ams.rpki-client.org