Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
File: AS207994.roa (raw, json)
Hash identifier: +X0fWxtMXN8lnK9fVnwbBeEMcOYg3GKz42ZmQI+wMLQ=
Subject key identifier: 1B:B9:81:A3:71:3F:71:49:A3:5E:69:D9:AC:CB:EE:C0:81:FA:D8:6A
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 73B39645ECE233EC00FFA3F88136470CA07E99B7
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
Signing time: Tue 09 Jul 2024 19:02:11 +0000
ROA not before: Tue 09 Jul 2024 18:57:11 +0000
ROA not after: Tue 08 Jul 2025 19:02:11 +0000
asID: 207994
IP address blocks: 146.103.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b3:96:45:ec:e2:33:ec:00:ff:a3:f8:81:36:47:0c:a0:7e:99:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 9 18:57:11 2024 GMT
Not After : Jul 8 19:02:11 2025 GMT
Subject: CN=1BB981A3713F7149A35E69D9ACCBEEC081FAD86A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:51:be:62:b4:e9:1c:dd:47:5f:8c:9c:25:
99:f4:ea:08:ed:d6:0a:3a:0f:2f:8a:3d:c7:ae:54:
b7:ca:71:a0:1c:f4:55:d3:8d:48:fd:a0:a6:0a:c8:
02:6c:6e:e5:c5:2b:00:e5:55:65:b3:0f:7b:77:73:
3e:b0:fc:7d:74:fc:9a:70:af:d2:c5:76:ea:6f:68:
b3:57:18:db:53:90:51:c1:91:3f:83:28:5e:f0:0f:
d5:03:4c:77:18:68:09:c1:b4:7b:0e:dd:27:cc:6e:
1d:27:17:ac:4f:ad:58:3b:20:36:b1:80:40:43:af:
1c:41:92:f5:24:a7:2a:b2:55:26:88:e8:26:f1:82:
8b:de:85:8c:78:44:67:5b:a9:54:58:69:97:de:2d:
e8:29:b3:4b:4d:78:33:bc:8c:8b:6e:63:75:a6:68:
ff:0b:93:11:68:bd:c8:a1:b2:19:70:21:ab:08:a8:
c8:be:d3:f5:00:bc:c6:21:c2:19:79:d6:c9:3f:8a:
e6:32:72:07:6e:0f:5f:6d:61:24:8d:4f:3f:4e:2c:
8f:e0:6e:e6:1a:49:89:4d:dd:84:ac:81:c6:95:53:
4e:96:2e:52:6b:f6:83:44:db:72:1b:d2:37:b7:de:
59:26:74:b1:a9:b2:cd:9a:2e:f8:0a:78:44:2c:66:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:81:A3:71:3F:71:49:A3:5E:69:D9:AC:CB:EE:C0:81:FA:D8:6A
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS207994.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:fd:0a:1d:e6:37:fc:5b:e4:6b:26:9c:0d:bf:62:c6:80:da:
f1:51:49:83:67:3e:92:30:ee:ba:23:5a:3c:c6:97:f3:f8:e8:
44:16:b1:a9:d2:f6:c2:14:92:30:1a:3a:53:b1:a1:d9:40:0a:
ce:0b:e8:59:84:49:89:c1:a6:6b:6e:36:e1:d3:09:d2:15:b1:
a0:85:c4:c0:f5:57:8b:0a:dd:5f:c1:5c:98:a3:e2:25:d3:98:
d8:ad:26:0d:4a:7a:07:81:c3:79:b7:a9:23:f7:17:01:00:b5:
e3:ff:85:14:2f:1b:29:5d:c7:9e:07:e0:46:45:d4:2e:85:ab:
2e:bc:1f:af:fb:b0:d4:9c:a1:c7:93:b9:d3:fb:0b:18:b2:75:
8e:d6:95:8f:86:9a:27:8c:6b:f9:bb:09:a5:a3:88:4f:a4:fd:
55:b5:75:18:71:e1:f9:d3:5d:4e:78:55:c3:c0:05:69:e1:29:
13:a1:6c:2c:03:3d:c5:6c:20:3e:58:c4:b5:6e:86:fc:26:af:
0d:2d:9d:9f:27:db:98:fc:d9:07:61:b0:7e:0e:cd:d2:ab:4b:
43:b3:bb:13:03:60:27:9d:ee:f5:e2:42:cb:b8:20:cc:b9:45:
ce:ae:28:1a:91:cd:4b:e6:13:4b:78:26:9d:be:78:1b:2a:f2:
da:31:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:19 2024 by rpki-client on console-ams.rpki-client.org