Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: fmNGNvGLGPVgrIdjMnNiAKNWTZOLu+Iz503YzoRYD34=
Subject key identifier: E1:30:78:D1:7C:92:F2:A2:A7:4F:6E:40:A4:8F:AC:6B:59:18:5D:B3
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 498F7F63504D2FC7F62AFC567272C652D93AE20B
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214654.roa
Signing time: Wed 13 Nov 2024 09:08:45 +0000
ROA not before: Wed 13 Nov 2024 09:03:45 +0000
ROA not after: Wed 12 Nov 2025 09:08:45 +0000
asID: 214654
IP address blocks: 140.233.185.0/24 maxlen: 24
148.135.172.0/24 maxlen: 24
148.135.173.0/24 maxlen: 24
148.135.174.0/24 maxlen: 24
148.135.175.0/24 maxlen: 24
148.135.180.0/24 maxlen: 24
148.135.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8f:7f:63:50:4d:2f:c7:f6:2a:fc:56:72:72:c6:52:d9:3a:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 13 09:03:45 2024 GMT
Not After : Nov 12 09:08:45 2025 GMT
Subject: CN=E13078D17C92F2A2A74F6E40A48FAC6B59185DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:10:6b:7c:00:77:9f:e6:3a:d4:10:bf:f6:
bb:66:40:a9:63:d9:d9:f2:60:95:81:28:51:38:ff:
79:9f:2d:65:09:ef:d8:13:86:b9:29:85:d1:ab:dc:
cd:31:51:34:fb:32:84:8b:0f:ad:db:30:4e:4d:72:
f9:b5:df:57:2e:c9:ac:de:17:ff:12:33:05:69:72:
5c:e6:2d:51:b5:4f:87:5d:63:a9:6b:42:5b:a5:ea:
69:14:69:f1:20:51:a4:17:10:0b:1d:01:f6:30:c2:
92:e6:ba:9c:58:75:90:23:b0:97:bc:b5:14:8f:3c:
b3:52:5b:0c:e9:24:57:e1:22:43:df:24:7b:97:d1:
72:fe:f5:13:a0:44:d3:6f:22:d1:60:ac:e2:60:5d:
94:f8:6d:78:fa:0d:22:66:93:cc:75:07:97:aa:a7:
23:9d:17:35:6a:44:e7:5b:ce:e3:73:0b:df:3f:2f:
e5:d1:e1:ab:ba:c9:c4:97:35:4f:90:00:fe:da:46:
cd:75:f7:8b:34:00:96:24:a6:8e:62:dd:a1:51:56:
64:58:16:2e:4f:a9:ad:fe:cf:cd:69:69:4f:cd:72:
24:4b:18:0b:3a:6f:93:b3:61:cc:fa:dc:19:4b:a1:
de:22:07:2f:5c:7d:94:91:e7:8d:22:41:17:e3:6c:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:30:78:D1:7C:92:F2:A2:A7:4F:6E:40:A4:8F:AC:6B:59:18:5D:B3
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.185.0/24
148.135.172.0/22
148.135.180.0/23
Signature Algorithm: sha256WithRSAEncryption
74:d9:84:c3:32:aa:3a:d0:7d:9b:f6:a3:1e:f3:8c:d7:69:6c:
a3:7c:5d:96:38:d2:d5:5b:0d:3e:41:03:3d:9a:0f:25:ee:03:
99:ff:d8:ce:f2:12:c1:c3:74:d7:23:69:15:f3:4e:5b:73:0d:
b2:0a:25:ef:88:f0:4a:5d:9f:b0:d1:ee:16:01:84:d0:bc:1c:
40:46:c4:84:b0:3a:00:45:fd:8a:d2:58:c0:0d:a9:45:45:6d:
f5:9b:ac:18:f4:b4:1f:23:0c:bd:aa:b4:3d:f4:ac:16:4d:34:
27:a2:f3:95:37:49:c4:1b:db:85:b7:79:04:d5:3d:09:dd:a9:
f2:dd:fc:24:54:e4:f3:50:28:30:f2:a6:12:8a:2c:fa:ca:13:
51:92:40:fa:be:51:47:79:fe:0e:7b:e3:af:07:68:48:73:53:
f3:41:7c:d6:bc:eb:15:58:41:04:58:42:24:3f:5f:77:4c:e8:
32:d1:6a:00:a4:60:de:15:6d:8f:0c:3f:e8:e7:a0:47:e5:8c:
9b:ec:4a:da:46:61:18:1f:65:a0:59:5a:20:79:a8:94:4a:33:
25:65:0a:25:b7:d4:45:13:75:a4:ef:64:89:5e:e4:37:5e:76:
af:8b:a7:f5:2d:ac:3c:b3:27:81:ab:12:b7:56:59:7f:5f:b8:
16:ee:11:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:33 2024 by rpki-client on console-fra.rpki-client.org