Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS945.roa
File: AS945.roa (raw, json)
Hash identifier: Ts+tENe1SWiSvd88qQd+X0pIeLs2ynQe0MhqqjOLGo4=
Subject key identifier: 9F:6F:BD:4C:27:26:D7:54:55:81:09:02:BD:2A:77:42:4E:E7:3C:42
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 6D8AEFAAE43B16AAD98BA4D9C0C8EF3B7D02E6BF
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS945.roa
Signing time: Tue 19 Nov 2024 19:28:47 +0000
ROA not before: Tue 19 Nov 2024 19:23:47 +0000
ROA not after: Tue 18 Nov 2025 19:28:47 +0000
asID: 945
IP address blocks: 148.135.216.0/23 maxlen: 24
148.135.218.0/23 maxlen: 24
148.135.224.0/23 maxlen: 24
148.135.226.0/23 maxlen: 24
148.135.232.0/23 maxlen: 24
148.135.234.0/23 maxlen: 24
148.135.240.0/23 maxlen: 24
148.135.242.0/23 maxlen: 24
148.135.248.0/23 maxlen: 24
148.135.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8a:ef:aa:e4:3b:16:aa:d9:8b:a4:d9:c0:c8:ef:3b:7d:02:e6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Nov 19 19:23:47 2024 GMT
Not After : Nov 18 19:28:47 2025 GMT
Subject: CN=9F6FBD4C2726D75455810902BD2A77424EE73C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:15:eb:96:2b:69:12:d6:16:74:84:b4:ca:
2f:25:52:c2:74:d5:dc:83:e1:ed:16:4f:83:db:f1:
64:88:8a:37:92:21:0a:48:1d:a2:d7:99:51:f2:5a:
ac:ff:97:7c:0d:c9:ea:ea:a8:88:57:36:ed:90:2c:
7a:38:31:df:a9:11:51:1c:f0:8d:2f:c9:c6:fb:a1:
52:d9:ce:d1:30:57:10:c6:aa:45:d8:d2:19:7d:b6:
11:4c:71:11:ae:45:38:93:e4:af:18:fa:c0:16:c9:
95:49:98:e6:72:9e:6a:ff:77:45:0d:61:0e:3b:41:
2f:0f:71:7d:b8:09:ee:a7:56:e2:37:19:99:83:45:
63:8b:f1:73:20:58:2b:70:86:a0:0a:bf:35:8c:4f:
ee:5d:d5:81:46:35:3c:b5:e2:b3:15:fb:ba:19:5b:
fa:b0:47:d2:1b:51:fd:34:43:9a:2c:37:35:2f:1b:
71:83:79:f6:2c:c7:01:7e:45:0f:ae:01:d4:42:c7:
6f:a0:49:92:3b:ec:2d:f4:96:0e:ce:16:1d:bd:5d:
8a:0d:8c:45:16:b3:ed:1b:4c:77:f8:b3:f7:fb:46:
79:29:90:52:34:30:39:12:0b:a8:f2:22:30:d2:29:
21:af:c6:fa:9a:c7:20:92:61:35:ea:fb:43:b6:f9:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:BD:4C:27:26:D7:54:55:81:09:02:BD:2A:77:42:4E:E7:3C:42
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS945.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.135.216.0/22
148.135.224.0/22
148.135.232.0/22
148.135.240.0/22
148.135.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:7a:24:7f:c8:a8:c9:5d:18:ca:30:0f:9e:e2:30:79:f8:01:
3d:fd:3a:02:db:ea:5a:76:4e:2a:b5:23:17:9c:da:e5:c3:37:
ef:b9:e9:38:db:9b:91:a2:15:a5:d1:e8:98:56:33:44:98:8d:
3e:9a:6b:a3:38:60:32:37:46:ad:a4:ab:51:06:8d:5e:f7:b0:
0e:78:9e:36:f5:47:35:dc:74:dc:94:6d:7e:92:b8:65:8a:5a:
50:4d:61:0e:71:4f:6d:f3:73:e2:af:55:d5:b3:cb:f6:c0:ae:
9b:6e:f3:65:5b:1e:a8:7a:f8:4f:9c:d0:18:09:eb:fe:93:cc:
13:8c:b1:c4:74:00:e7:5f:13:12:0c:23:b9:ab:fb:de:b3:1e:
9b:1c:ff:58:6d:c7:ff:67:07:1d:6e:ee:b1:91:d0:cc:9c:63:
16:b9:fa:50:0f:e4:82:0a:3b:c6:c0:04:2a:85:3d:90:a4:0a:
7d:c9:07:05:54:f3:de:41:47:5a:7e:a4:e5:2f:fe:af:4d:67:
78:e0:cf:c1:a1:9a:03:21:fa:bc:5f:e0:b1:22:db:fe:83:13:
d2:77:2c:94:e1:95:ff:2c:4b:71:06:8b:25:62:18:8d:76:a7:
fc:5f:75:8d:d5:bf:08:80:c4:be:9e:cc:25:8a:2f:a4:ec:ad:
9b:bd:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:19 2024 by rpki-client on console-ams.rpki-client.org