Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS11426.roa
File: AS11426.roa (raw, json)
Hash identifier: fD+iUzDIJCsloVL5fiR6GHa9BwbPaJfLdMIwZ3/sBro=
Subject key identifier: 95:40:91:8C:C1:63:17:25:1D:29:46:AA:30:49:94:6D:85:51:B0:F1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1F328758D9DC47CADE7B015AA1FB7B87A0C4ED17
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS11426.roa
Signing time: Mon 15 Apr 2024 00:02:01 +0000
ROA not before: Sun 14 Apr 2024 23:57:01 +0000
ROA not after: Mon 14 Apr 2025 00:02:01 +0000
asID: 11426
IP address blocks: 181.214.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:32:87:58:d9:dc:47:ca:de:7b:01:5a:a1:fb:7b:87:a0:c4:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 14 23:57:01 2024 GMT
Not After : Apr 14 00:02:01 2025 GMT
Subject: CN=9540918CC16317251D2946AA3049946D8551B0F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:47:d3:ff:08:53:e7:16:25:01:73:b2:9e:
a5:e0:3c:f0:b9:1d:ed:c5:5b:63:d1:ab:01:57:a6:
b3:29:27:3e:06:0f:83:6b:15:5c:27:0d:8f:a4:61:
af:70:bb:a7:75:85:48:fc:7e:c1:6b:ac:e4:e6:3a:
ed:c6:01:6a:d9:68:f9:c2:01:62:14:d6:89:db:6d:
ac:43:b2:31:cb:a9:35:2c:9d:3f:e7:26:1b:55:fb:
2f:01:3f:45:a7:ff:5a:c1:96:1c:2d:a6:37:bc:0b:
e2:b9:f8:de:d2:56:da:cc:32:6d:74:14:85:80:10:
99:4a:33:17:14:1c:46:80:19:3a:b0:91:cb:c0:85:
62:5c:c7:a8:a0:85:e5:94:55:9c:cd:2f:cd:4f:d2:
bc:8a:f4:6e:8f:4f:3b:d4:9d:5c:41:c6:28:08:8d:
03:90:42:dd:64:4b:31:ae:0a:48:f3:23:21:e7:4f:
8d:1a:9a:0b:14:b3:a8:3c:37:b5:cd:84:c2:f3:30:
e4:4d:72:fa:28:1e:4e:e2:04:78:38:7f:e6:55:4d:
b3:7b:74:ed:17:e2:4c:41:0b:2c:3a:5a:e7:f5:d9:
77:e0:77:9b:2e:e8:00:84:61:38:e6:3e:7d:e3:4f:
ff:39:33:20:ce:d3:e0:1e:e2:7c:41:a2:6c:97:53:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:91:8C:C1:63:17:25:1D:29:46:AA:30:49:94:6D:85:51:B0:F1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS11426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.13.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9c:25:33:f0:0e:e9:68:c6:41:40:66:9b:c8:b2:84:c9:01:
d6:a4:83:c8:cf:03:65:04:49:7f:f6:55:29:de:6e:e3:31:b1:
a0:3b:8f:06:58:c6:33:f4:3f:50:66:73:66:fd:fb:bf:c6:bd:
f1:ac:5f:49:5f:e8:fc:2f:a7:66:ad:26:2a:1e:6a:6c:ce:16:
f2:7c:70:40:82:73:0b:32:a8:f0:26:03:5c:9d:61:32:3f:ea:
14:48:5a:9d:bc:59:6c:1f:ed:e8:cc:f8:78:69:e8:08:d3:b4:
39:97:b9:c1:8f:30:1a:ad:fd:7e:7e:b9:1c:41:c1:e4:1a:e6:
29:4b:6c:c1:3a:1d:16:27:85:68:cf:7e:20:64:57:a4:e7:31:
fe:33:0b:12:da:8e:51:dc:d2:b1:b7:66:cb:d0:da:c2:8b:5b:
d3:86:2a:e1:3f:99:d2:b0:cf:11:2d:2e:c0:ea:95:65:98:45:
19:92:50:c2:3a:74:99:30:50:d4:a1:93:0e:92:cf:b6:4c:ac:
ee:92:7f:31:65:8c:a0:19:ed:eb:ba:b5:34:a6:3d:51:ae:a7:
38:01:53:d0:11:ee:54:5e:88:28:32:51:92:79:76:3e:fd:7d:
2d:99:a1:ea:2b:3b:fd:50:60:db:28:95:b0:23:6d:3e:e0:0f:
64:5e:02:9c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUHzKHWNncR8reewFaoft7h6DE7RcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA0MTQyMzU3MDFaFw0yNTA0MTQwMDAyMDFaMDMxMTAvBgNV
BAMTKDk1NDA5MThDQzE2MzE3MjUxRDI5NDZBQTMwNDk5NDZEODU1MUIwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAUfT/whT5xYlAXOynqXgPPC5
He3FW2PRqwFXprMpJz4GD4NrFVwnDY+kYa9wu6d1hUj8fsFrrOTmOu3GAWrZaPnC
AWIU1onbbaxDsjHLqTUsnT/nJhtV+y8BP0Wn/1rBlhwtpje8C+K5+N7SVtrMMm10
FIWAEJlKMxcUHEaAGTqwkcvAhWJcx6igheWUVZzNL81P0ryK9G6PTzvUnVxBxigI
jQOQQt1kSzGuCkjzIyHnT40amgsUs6g8N7XNhMLzMORNcvooHk7iBHg4f+ZVTbN7
dO0X4kxBCyw6Wuf12Xfgd5su6ACEYTjmPn3jT/85MyDO0+Ae4nxBomyXU44PAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUlUCRjMFjFyUdKUaqMEmUbYVRsPEwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTE0MjYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC11g0w
DQYJKoZIhvcNAQELBQADggEBADWcJTPwDuloxkFAZpvIsoTJAdakg8jPA2UESX/2
VSnebuMxsaA7jwZYxjP0P1Bmc2b9+7/GvfGsX0lf6Pwvp2atJioeamzOFvJ8cECC
cwsyqPAmA1ydYTI/6hRIWp28WWwf7ejM+Hhp6AjTtDmXucGPMBqt/X5+uRxBweQa
5ilLbME6HRYnhWjPfiBkV6TnMf4zCxLajlHc0rG3ZsvQ2sKLW9OGKuE/mdKwzxEt
LsDqlWWYRRmSUMI6dJkwUNShkw6Sz7ZMrO6SfzFljKAZ7eu6tTSmPVGupzgBU9AR
7lReiCgyUZJ5dj79fS2ZoeorO/1QYNsolbAjbT7gD2ReApw=
-----END CERTIFICATE-----
Generated at Mon Apr 29 14:29:24 2024 by rpki-client on console-ams.rpki-client.org