Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
File: AS216147.roa (raw, json)
Hash identifier: Nr9/6XXp9H7TUYeaku0CGyib1bx4Gfl1olgZHNvzr+Y=
Subject key identifier: 36:DA:35:23:F0:CD:6A:11:55:E6:4B:DD:7B:31:D0:F5:87:AC:54:10
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 09E6405CAFC5788C04931370217DFBF1B8409BA1
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
Signing time: Sat 20 Jul 2024 11:11:08 +0000
ROA not before: Sat 20 Jul 2024 11:06:08 +0000
ROA not after: Sat 19 Jul 2025 11:11:08 +0000
asID: 216147
IP address blocks: 147.79.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e6:40:5c:af:c5:78:8c:04:93:13:70:21:7d:fb:f1:b8:40:9b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 20 11:06:08 2024 GMT
Not After : Jul 19 11:11:08 2025 GMT
Subject: CN=36DA3523F0CD6A1155E64BDD7B31D0F587AC5410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:c6:4e:b6:f5:d4:7d:d0:5a:cc:7d:e2:ae:
81:53:c7:c5:65:8e:d1:11:98:84:4d:e8:e6:e7:37:
c2:de:b5:b4:43:fb:4c:b0:eb:cb:fa:9c:79:16:6b:
88:b5:11:08:d4:f2:72:06:41:dc:85:00:7b:9a:77:
4e:24:69:c2:b2:b8:90:eb:9e:81:ac:7f:7f:3c:34:
bc:bb:1d:41:9d:7e:fd:70:a7:8d:19:3f:51:3a:51:
49:ee:5d:39:23:bd:2d:b7:6c:33:d6:6c:b4:88:28:
a2:fd:e2:08:39:67:7a:7d:05:e4:35:47:b8:ed:1e:
7b:37:7d:a2:7a:d7:8a:2c:09:5e:1f:a9:c6:11:fa:
e9:44:d1:9c:a6:2c:d1:f4:a5:e2:98:77:19:33:b9:
61:e9:fa:7e:01:32:fe:d3:99:49:72:b1:91:55:3b:
8b:3b:27:0a:4c:7d:64:18:7d:05:f5:26:4c:0c:35:
65:8d:a1:04:6a:a5:ab:82:9e:f7:b8:1e:88:ee:92:
23:bf:99:3b:88:c9:19:f5:3e:26:e6:c9:12:8d:8b:
a7:b1:74:63:8b:c3:18:f9:3f:e5:a8:28:ce:38:3a:
fd:f2:30:c8:e4:42:32:3b:d0:1e:dd:81:e4:5c:d5:
62:dd:d3:83:cb:fd:e6:ed:5a:81:45:e9:98:42:58:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:35:23:F0:CD:6A:11:55:E6:4B:DD:7B:31:D0:F5:87:AC:54:10
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS216147.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.79.21.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5d:63:d3:73:3a:80:6b:e9:81:66:b6:ff:d7:54:59:26:45:
ff:d2:19:d7:2f:62:02:c5:89:56:27:2e:5d:66:89:be:cf:5f:
72:0d:54:d3:98:71:de:5e:e4:3e:cb:81:6e:48:2f:24:79:95:
a9:94:da:ea:f8:75:b4:75:d5:4a:d2:9f:89:ef:db:50:98:2e:
89:07:dd:31:e7:93:64:9c:65:37:3a:ce:f2:ac:90:2e:38:fe:
f3:25:26:25:c5:49:17:de:7d:72:91:73:ba:15:41:4a:39:e3:
22:be:a0:05:f3:90:8f:fc:89:a4:bf:95:0c:7e:3e:ec:85:2d:
7d:70:5b:5a:d2:5c:83:0b:88:37:c3:f4:b3:ad:84:7b:8d:89:
14:b5:c0:67:ac:9f:54:0b:96:64:71:ca:23:83:13:2e:b9:3e:
6b:58:24:02:eb:79:16:f1:5d:50:56:62:44:a8:4e:a9:bd:2a:
c3:5a:79:68:54:0e:0e:31:fc:0f:d9:1e:7b:04:63:ff:6a:66:
d9:83:ef:32:3c:e8:77:2e:49:24:96:65:c3:42:b2:46:8b:40:
73:fb:80:0c:ae:7e:80:28:1a:08:f9:c0:37:61:54:5a:5a:91:
69:5d:53:df:90:cb:e7:94:e2:af:49:da:58:03:f5:6b:21:d9:
fe:37:ce:ba
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUCeZAXK/FeIwEkxNwIX378bhAm6EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGZjMzM2YmY5ZjNkZTVjZTQxNDE0YmQxOTcxOTQ1ZjRi
MjQ2YmZjYzAeFw0yNDA3MjAxMTA2MDhaFw0yNTA3MTkxMTExMDhaMDMxMTAvBgNV
BAMTKDM2REEzNTIzRjBDRDZBMTE1NUU2NEJERDdCMzFEMEY1ODdBQzU0MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9K8ZOtvXUfdBazH3iroFTx8Vl
jtERmIRN6ObnN8LetbRD+0yw68v6nHkWa4i1EQjU8nIGQdyFAHuad04kacKyuJDr
noGsf388NLy7HUGdfv1wp40ZP1E6UUnuXTkjvS23bDPWbLSIKKL94gg5Z3p9BeQ1
R7jtHns3faJ614osCV4fqcYR+ulE0ZymLNH0peKYdxkzuWHp+n4BMv7TmUlysZFV
O4s7JwpMfWQYfQX1JkwMNWWNoQRqpauCnve4HojukiO/mTuIyRn1PibmyRKNi6ex
dGOLwxj5P+WoKM44Ov3yMMjkQjI70B7dgeRc1WLd04PL/ebtWoFF6ZhCWHcdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUNto1I/DNahFV5kvdezHQ9YesVBAwHwYDVR0j
BBgwFoAUT8M2v5895c5BQUvRlxlF9LJGv8wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDliZTNhYWUtYWVhMS00MWRjLWIxYjktOTVhYzU5MTgy
NDRkLzAvNEZDMzM2QkY5RjNERTVDRTQxNDE0QkQxOTcxOTQ1RjRCMjQ2QkZDQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1Q4TTJ2NTg5NWM1QlFVdlJseGxGOUxK
R3Y4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzA5YmUzYWFlLWFlYTEt
NDFkYy1iMWI5LTk1YWM1OTE4MjQ0ZC8wL0FTMjE2MTQ3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk08V
MA0GCSqGSIb3DQEBCwUAA4IBAQBEXWPTczqAa+mBZrb/11RZJkX/0hnXL2ICxYlW
Jy5dZom+z19yDVTTmHHeXuQ+y4FuSC8keZWplNrq+HW0ddVK0p+J79tQmC6JB90x
55NknGU3Os7yrJAuOP7zJSYlxUkX3n1ykXO6FUFKOeMivqAF85CP/Imkv5UMfj7s
hS19cFta0lyDC4g3w/SzrYR7jYkUtcBnrJ9UC5ZkccojgxMuuT5rWCQC63kW8V1Q
VmJEqE6pvSrDWnloVA4OMfwP2R57BGP/ambZg+8yPOh3LkkklmXDQrJGi0Bz+4AM
rn6AKBoI+cA3YVRaWpFpXVPfkMvnlOKvSdpYA/VrIdn+N866
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:33 2024 by rpki-client on console-fra.rpki-client.org