Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215599.roa
File: AS215599.roa (raw, json)
Hash identifier: pK5u1kvt9HhOEmbtou7JXCvtp8DAYtijSHAY4icRCIk=
Subject key identifier: F9:EA:0D:63:5A:E3:52:0B:E7:65:5C:4D:BC:A4:56:B7:1C:D6:60:99
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 691281C94F1912A6CD61D620F126E976ED426978
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215599.roa
Signing time: Mon 13 May 2024 12:16:22 +0000
ROA not before: Mon 13 May 2024 12:11:22 +0000
ROA not after: Mon 12 May 2025 12:16:22 +0000
asID: 215599
IP address blocks: 147.79.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:12:81:c9:4f:19:12:a6:cd:61:d6:20:f1:26:e9:76:ed:42:69:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: May 13 12:11:22 2024 GMT
Not After : May 12 12:16:22 2025 GMT
Subject: CN=F9EA0D635AE3520BE7655C4DBCA456B71CD66099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:d5:49:21:e5:44:74:6a:38:fe:f2:1a:a5:
75:dd:11:2b:28:97:b4:1b:56:75:66:4f:14:d0:77:
11:d6:b5:77:50:8c:87:f5:5a:65:43:de:81:7d:e5:
18:d4:a9:17:45:9f:6e:f1:1e:c1:ad:23:59:87:73:
1a:7e:11:ff:f0:26:1f:f3:1f:17:38:5f:6f:d0:9e:
64:52:fe:bc:a5:08:6d:12:e5:48:99:15:e1:c6:54:
24:a5:c6:30:32:3a:79:b2:d8:aa:f2:1e:32:8a:d2:
38:22:92:c2:61:f9:55:60:3b:84:b2:2c:24:69:7e:
ca:c7:be:c6:3b:8a:25:2e:3c:00:ca:85:f2:31:47:
de:45:1c:71:de:58:30:4c:d4:b0:93:a1:9f:4d:cf:
b0:66:6c:d5:a2:bc:a5:99:04:d7:2d:b3:9a:b3:dd:
eb:6f:3b:a9:90:3c:24:39:be:93:2b:e9:78:1e:f7:
a2:38:38:fd:10:ed:63:2e:0b:21:4d:e0:a9:21:3f:
85:d9:7c:67:3d:3f:8c:2a:fa:05:9f:45:e8:24:d7:
e4:7f:80:dd:79:f6:91:e6:ac:e7:a8:e1:f3:d6:18:
79:dc:33:c8:3f:c7:73:ac:17:17:be:61:4f:40:1c:
ca:90:5e:07:9d:67:80:2f:dc:54:b0:59:d7:fe:8f:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EA:0D:63:5A:E3:52:0B:E7:65:5C:4D:BC:A4:56:B7:1C:D6:60:99
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS215599.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:32:07:76:88:15:d3:fa:2d:4a:b6:cc:87:d5:52:cc:c4:d2:
16:3b:09:95:c3:c2:f2:c6:e3:4b:b5:98:df:59:6a:6b:4f:6c:
f1:73:cc:ea:c3:f4:48:81:f2:d5:c2:10:39:31:f1:0d:80:4e:
65:6b:2e:28:88:97:3d:e8:04:5c:50:4b:f5:e7:02:ea:c1:d9:
39:f7:59:60:33:4d:73:8a:a2:2d:c3:13:48:66:c2:f9:36:69:
ef:42:03:d6:2c:f9:18:2e:31:92:23:0c:ee:34:01:fa:9a:9b:
d3:b6:90:96:79:e6:21:05:bc:63:e9:12:42:4f:76:2c:74:5e:
32:d9:69:df:2e:f3:29:48:d6:ab:fe:64:e2:3b:af:61:e7:76:
ff:32:34:cd:7d:37:77:35:92:5b:a8:86:f2:63:3c:4a:b5:97:
f5:3d:49:51:a2:79:5d:4b:9e:8b:ac:16:a2:9f:00:b9:f7:da:
c0:55:85:80:0c:88:26:51:8e:87:9b:7f:33:31:13:73:76:d4:
5b:5a:0d:58:eb:74:86:aa:2e:c1:34:5f:44:22:7f:f6:18:80:
d4:a7:d5:d8:ac:0d:cc:d4:ca:ce:d7:cc:7e:20:4a:20:a5:68:
f2:92:33:1e:1c:88:99:bc:34:0a:99:ed:47:cf:8b:ba:f1:2c:
ea:61:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:33 2024 by rpki-client on console-fra.rpki-client.org