Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142146.roa
File: AS142146.roa (raw, json)
Hash identifier: an/dkLtlzoVzZQRiiM5/a3Y72inSxlRxq/CdxPbe9mo=
Subject key identifier: 4D:97:1C:16:6C:7D:3A:F0:4A:C5:44:68:12:44:5C:39:BA:CD:49:07
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 27ACCD9ED74A5D257ED1CBBFD79F77240E577444
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142146.roa
Signing time: Mon 19 Aug 2024 00:01:59 +0000
ROA not before: Sun 18 Aug 2024 23:56:59 +0000
ROA not after: Mon 18 Aug 2025 00:01:59 +0000
asID: 142146
IP address blocks: 179.61.176.0/24 maxlen: 24
191.101.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Nov 2024 02:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ac:cd:9e:d7:4a:5d:25:7e:d1:cb:bf:d7:9f:77:24:0e:57:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 18 23:56:59 2024 GMT
Not After : Aug 18 00:01:59 2025 GMT
Subject: CN=4D971C166C7D3AF04AC5446812445C39BACD4907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:53:02:3c:ab:89:e9:55:ee:d3:52:23:65:
ec:ba:55:8c:d4:97:73:9c:54:b3:5e:c3:06:5b:f3:
03:65:10:5d:b0:9d:8f:66:42:b5:c1:35:0a:4c:6e:
3c:b6:c2:e8:2b:96:4c:f1:b6:e4:bc:93:5a:8c:61:
f8:70:47:4f:a8:25:61:9a:5b:46:d7:10:5d:13:34:
fa:48:e3:9a:0d:14:6d:55:b1:9a:79:3b:d5:1f:34:
d6:3a:98:01:2e:ae:f4:e3:07:a4:3d:00:b6:ed:91:
93:65:fd:f9:a3:ed:31:2f:99:bd:f5:e5:3f:62:fe:
21:8b:33:9a:2e:35:14:d6:ba:34:f9:8a:10:a7:fe:
f6:f9:13:65:21:bd:9b:b8:27:18:ec:da:b4:5a:a4:
d9:d1:95:79:bf:2b:b5:6f:f2:31:ce:f2:6a:15:59:
e6:f6:55:9a:9f:15:ed:40:58:8c:19:8a:a5:89:0a:
2a:79:e6:da:c9:41:da:c4:11:9b:7a:5f:e7:ea:54:
b7:d7:45:d9:2e:4b:6b:f5:2b:a9:f2:87:87:dc:26:
72:bb:7f:3f:77:cd:49:4f:db:74:f8:f9:47:9f:0c:
c7:48:4c:3d:cf:ee:20:45:5b:5d:36:e0:b5:33:f1:
ca:1f:b2:49:04:ad:f4:2e:04:9c:c1:b8:9b:13:39:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:97:1C:16:6C:7D:3A:F0:4A:C5:44:68:12:44:5C:39:BA:CD:49:07
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142146.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.176.0/24
191.101.126.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:4b:c2:8c:93:42:eb:90:d4:23:4c:a3:fd:05:31:05:78:32:
3d:bf:de:83:0b:53:94:af:34:0c:b4:ce:a7:e7:72:e0:a7:7a:
f8:6e:43:7c:ee:f3:8e:7f:f0:49:b1:5c:18:e0:24:bb:64:3d:
01:71:f0:e5:16:9f:a0:9c:a9:9a:24:9e:57:00:c8:50:d0:d1:
47:3a:ab:22:cc:e2:2f:4f:b2:a4:df:6d:e4:e2:bb:ff:12:bb:
fc:94:a3:92:60:2d:a7:0c:8b:2c:5c:85:82:77:10:db:f0:42:
91:de:90:52:c6:79:96:e8:f4:65:84:4a:2f:9a:f5:23:2c:4d:
f7:fa:2b:52:6e:a0:3b:3c:e9:7a:f0:d1:10:0a:8f:f2:ed:a2:
d0:4d:11:88:8f:e8:42:c7:c3:41:bc:3e:6b:f0:61:b7:8d:b6:
88:63:f8:37:55:92:df:2b:c2:15:ec:b6:02:a1:ca:da:2c:c3:
6d:0d:28:4a:40:57:b0:e2:8a:36:23:eb:a3:fa:ac:77:b4:6d:
cf:2f:6d:ac:0e:26:bb:12:ee:ab:ad:b1:00:b9:c3:44:be:7c:
c7:e8:12:b1:73:2b:ff:96:76:87:db:22:d1:db:d3:f2:02:97:
8e:30:44:97:f8:91:9e:28:ad:33:49:09:9e:d7:16:26:52:8e:
71:1f:59:76
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUJ6zNntdKXSV+0cu/1593JA5XdEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA4MTgyMzU2NTlaFw0yNTA4MTgwMDAxNTlaMDMxMTAvBgNV
BAMTKDREOTcxQzE2NkM3RDNBRjA0QUM1NDQ2ODEyNDQ1QzM5QkFDRDQ5MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUW1MCPKuJ6VXu01IjZey6VYzU
l3OcVLNewwZb8wNlEF2wnY9mQrXBNQpMbjy2wugrlkzxtuS8k1qMYfhwR0+oJWGa
W0bXEF0TNPpI45oNFG1VsZp5O9UfNNY6mAEurvTjB6Q9ALbtkZNl/fmj7TEvmb31
5T9i/iGLM5ouNRTWujT5ihCn/vb5E2UhvZu4Jxjs2rRapNnRlXm/K7Vv8jHO8moV
Web2VZqfFe1AWIwZiqWJCip55trJQdrEEZt6X+fqVLfXRdkuS2v1K6nyh4fcJnK7
fz93zUlP23T4+UefDMdITD3P7iBFW1024LUz8cofskkErfQuBJzBuJsTOa0xAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUTZccFmx9OvBKxURoEkRcObrNSQcwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQyMTQ2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsz2w
AwQAv2V+MA0GCSqGSIb3DQEBCwUAA4IBAQBMS8KMk0LrkNQjTKP9BTEFeDI9v96D
C1OUrzQMtM6n53Lgp3r4bkN87vOOf/BJsVwY4CS7ZD0BcfDlFp+gnKmaJJ5XAMhQ
0NFHOqsizOIvT7Kk323k4rv/Erv8lKOSYC2nDIssXIWCdxDb8EKR3pBSxnmW6PRl
hEovmvUjLE33+itSbqA7POl68NEQCo/y7aLQTRGIj+hCx8NBvD5r8GG3jbaIY/g3
VZLfK8IV7LYCocraLMNtDShKQFew4oo2I+uj+qx3tG3PL22sDia7Eu6rrbEAucNE
vnzH6BKxcyv/lnaH2yLR29PyApeOMESX+JGeKK0zSQme1xYmUo5xH1l2
-----END CERTIFICATE-----
Generated at Sat Nov 9 08:24:13 2024 by rpki-client on console-ams.rpki-client.org