Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272662.roa
File: AS272662.roa (raw, json)
Hash identifier: w6MIjg72aMX/SCbyh0asbAGjHbz6HU22eO9EXKTdZ6w=
Subject key identifier: B5:C7:23:47:47:C9:9B:0D:AD:77:0D:EE:7A:C4:22:37:B3:49:70:BB
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 7C01E0EEA0270E4814AA5BF6CD1E8542BEFB23EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272662.roa
Signing time: Sat 06 Apr 2024 11:09:31 +0000
ROA not before: Sat 06 Apr 2024 11:04:31 +0000
ROA not after: Sat 05 Apr 2025 11:09:31 +0000
asID: 272662
IP address blocks: 146.103.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 18:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:01:e0:ee:a0:27:0e:48:14:aa:5b:f6:cd:1e:85:42:be:fb:23:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 6 11:04:31 2024 GMT
Not After : Apr 5 11:09:31 2025 GMT
Subject: CN=B5C7234747C99B0DAD770DEE7AC42237B34970BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:b1:3a:ea:f4:16:6e:b5:ba:f4:73:58:3a:
73:73:a5:c8:fc:d3:62:36:c1:48:5b:69:b8:10:98:
9d:cf:4f:e0:a4:19:72:9c:ea:7a:e2:4c:6f:94:7f:
17:95:2b:15:88:1c:4f:dc:93:c6:b8:da:9c:3c:ac:
fe:9c:7e:5c:9e:23:f3:47:6b:33:41:05:16:bc:d4:
42:a2:16:09:1c:e0:e7:fb:a4:42:2a:fa:24:90:cf:
de:d6:c9:31:aa:92:4d:c3:e9:8f:ad:51:64:77:3e:
99:b0:89:f1:f8:35:58:dd:57:4d:34:84:27:dd:7b:
16:ec:bc:73:ff:75:73:74:87:94:3d:b4:05:9d:a5:
05:2f:3f:a8:9f:e1:e8:2f:5b:03:ec:a7:5b:59:43:
17:09:c9:a4:6d:f1:d1:1e:47:9f:3a:a5:14:b7:11:
d6:b9:d0:ff:49:93:ea:96:a2:b6:50:04:2e:bb:d0:
25:ff:8b:d0:f4:62:ff:e8:cc:de:99:5a:7d:58:9f:
ab:34:b3:13:ef:98:8b:9d:d0:67:af:75:7b:c3:1a:
a3:ef:81:13:67:0a:51:d2:d7:0f:da:b2:6d:40:dc:
50:59:e6:4a:c3:1b:40:40:d2:58:d2:71:d1:ac:9a:
01:e2:67:a8:d5:9d:00:40:da:bc:67:9d:cb:1d:55:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:23:47:47:C9:9B:0D:AD:77:0D:EE:7A:C4:22:37:B3:49:70:BB
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS272662.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.103.34.0/23
Signature Algorithm: sha256WithRSAEncryption
36:ad:cf:20:24:5f:25:d9:ce:d3:98:d2:1b:11:78:91:45:a6:
59:04:e1:17:29:3d:68:c9:7b:24:78:34:eb:71:c5:df:c9:47:
8a:4a:eb:a6:b9:7a:5a:e6:0f:16:83:98:86:03:ee:c4:af:74:
40:a8:6f:2f:37:16:53:52:0a:78:d1:0a:f1:8c:5b:fa:d0:89:
fe:e8:5a:e0:96:57:f3:81:44:da:f9:0b:31:b6:41:43:18:1b:
41:e2:b1:14:20:88:f5:0d:58:d9:ba:a3:7d:82:f2:55:6f:ba:
77:35:eb:6d:4e:15:e7:a9:7e:0c:d2:1e:1a:25:20:87:f8:64:
b5:17:e7:d4:10:a6:ff:f7:4d:d6:67:a5:67:35:44:52:57:98:
f6:2d:b1:4a:d0:60:c0:1e:17:ad:8b:dc:5c:83:83:ff:59:0f:
02:de:ae:21:12:6c:4b:c6:85:89:98:0a:6f:a6:f3:19:3a:e3:
a4:e6:bf:eb:c4:01:fd:e2:ff:02:f2:5b:90:05:a4:49:3d:91:
5d:f5:65:99:74:53:fe:fe:6d:c4:80:87:96:c7:06:c9:49:ed:
da:97:81:7b:25:1d:7b:c5:d3:64:75:53:21:83:cf:71:6a:ab:
65:ae:b1:a7:50:31:5a:1e:f6:8d:fe:fc:5e:5a:64:f9:67:c2:
f8:2a:20:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 01:33:17 2024 by rpki-client on console-ams.rpki-client.org