Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142617.roa
File: AS142617.roa (raw, json)
Hash identifier: sQ+j8KrCgTGlEtwiLoDASyfrdwzF5KJ+1HUMIbjGmS4=
Subject key identifier: B2:EF:46:06:25:3C:36:26:4B:4C:1F:8F:73:3C:04:D2:36:F4:A6:58
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 360486CD01072B0B7F2087C7E383C37C596ACBD4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142617.roa
Signing time: Wed 31 Jan 2024 08:05:08 +0000
ROA not before: Wed 31 Jan 2024 08:00:08 +0000
ROA not after: Wed 29 Jan 2025 08:05:08 +0000
asID: 142617
IP address blocks: 181.214.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:04:86:cd:01:07:2b:0b:7f:20:87:c7:e3:83:c3:7c:59:6a:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:08 2024 GMT
Not After : Jan 29 08:05:08 2025 GMT
Subject: CN=B2EF4606253C36264B4C1F8F733C04D236F4A658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:96:08:52:c7:9e:1e:b9:aa:c5:a5:e9:a5:40:
de:bd:8f:64:15:70:89:45:60:b2:2d:64:04:38:4c:
a3:d9:87:ca:97:7f:6a:ec:a6:07:e2:ac:10:8e:f9:
80:c4:08:d8:23:93:42:d7:4c:e2:53:d0:0c:3a:12:
ef:0c:f3:05:eb:73:6d:e8:63:65:47:3d:d1:85:6f:
b1:b0:67:c6:36:c7:00:39:22:f0:91:f0:e3:1c:70:
60:ed:b9:35:6c:98:82:22:03:80:bb:59:37:cb:c9:
40:7b:f2:2a:85:ab:c3:24:9b:64:73:43:16:41:bf:
4b:f8:15:7e:56:91:84:d2:46:34:ee:70:5e:88:bf:
09:89:ce:19:98:0d:74:22:98:4c:8b:13:ec:ae:4e:
0e:06:30:33:5f:e8:14:16:bc:7a:74:8f:45:80:3b:
cc:80:8f:12:fc:f7:20:ad:cf:11:37:9e:ae:64:f3:
7c:a0:4a:b8:99:f7:fa:d0:47:4b:92:28:4d:5f:06:
df:89:fa:a7:f7:c3:fa:90:7f:2c:97:d4:a6:21:97:
96:76:5c:f5:93:40:da:bb:b2:2a:fa:ad:d0:e6:f3:
cd:39:93:97:1d:2a:38:06:34:0f:1c:72:44:4c:8d:
8a:38:67:5c:cd:c4:fd:56:d5:67:70:36:d2:54:c6:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:46:06:25:3C:36:26:4B:4C:1F:8F:73:3C:04:D2:36:F4:A6:58
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS142617.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.73.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e4:f4:d4:93:50:ba:88:b9:32:31:6d:78:8c:73:d3:7e:d9:
2c:6d:35:61:ba:39:d4:94:f4:3d:22:eb:16:c3:52:b3:07:4f:
f2:12:07:5f:27:3e:39:a6:7a:ca:b3:da:5c:74:d8:0b:c6:dd:
0f:ab:91:ea:34:37:16:83:2c:ba:5f:aa:fb:a6:9a:93:d6:1a:
e6:f7:91:12:c4:4c:6e:8b:89:03:f2:05:15:16:98:c1:7f:eb:
03:f0:28:2d:9a:9a:78:8a:c4:29:78:cd:7b:78:d0:16:85:27:
4c:15:87:cb:35:29:59:da:9b:2f:b1:5e:30:d0:09:72:41:c7:
43:49:11:d4:1c:b6:7a:cc:2e:76:4a:2e:b0:36:7a:2e:6c:e2:
f1:f7:6f:0d:af:e2:85:9f:4c:de:d2:7f:5c:12:d5:ab:3c:89:
02:f3:38:c6:ef:bf:d5:68:c3:5e:ac:30:12:97:04:0b:93:ba:
47:b2:65:f4:7b:90:42:32:5c:77:10:0f:65:0e:e6:e9:35:3c:
b8:74:50:ac:e6:0d:d9:c8:e6:19:d3:4e:dc:eb:54:a0:8d:55:
0e:88:dc:d4:ad:dc:f9:ee:17:af:d0:f5:78:54:07:4c:fc:17:
06:44:c9:b7:20:8e:35:ef:b0:da:4c:d6:6e:8b:4a:d7:f8:d4:
4e:1b:8c:60
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUNgSGzQEHKwt/IIfH44PDfFlqy9QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAxMzEwODAwMDhaFw0yNTAxMjkwODA1MDhaMDMxMTAvBgNV
BAMTKEIyRUY0NjA2MjUzQzM2MjY0QjRDMUY4RjczM0MwNEQyMzZGNEE2NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlghSx54euarFpemlQN69j2QV
cIlFYLItZAQ4TKPZh8qXf2rspgfirBCO+YDECNgjk0LXTOJT0Aw6Eu8M8wXrc23o
Y2VHPdGFb7GwZ8Y2xwA5IvCR8OMccGDtuTVsmIIiA4C7WTfLyUB78iqFq8Mkm2Rz
QxZBv0v4FX5WkYTSRjTucF6IvwmJzhmYDXQimEyLE+yuTg4GMDNf6BQWvHp0j0WA
O8yAjxL89yCtzxE3nq5k83ygSriZ9/rQR0uSKE1fBt+J+qf3w/qQfyyX1KYhl5Z2
XPWTQNq7sir6rdDm8805k5cdKjgGNA8cckRMjYo4Z1zNxP1W1WdwNtJUxn1zAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUsu9GBiU8NiZLTB+PczwE0jb0plgwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQyNjE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdZJ
MA0GCSqGSIb3DQEBCwUAA4IBAQCA5PTUk1C6iLkyMW14jHPTftksbTVhujnUlPQ9
IusWw1KzB0/yEgdfJz45pnrKs9pcdNgLxt0Pq5HqNDcWgyy6X6r7ppqT1hrm95ES
xExui4kD8gUVFpjBf+sD8Cgtmpp4isQpeM17eNAWhSdMFYfLNSlZ2psvsV4w0Aly
QcdDSRHUHLZ6zC52Si6wNnoubOLx928Nr+KFn0ze0n9cEtWrPIkC8zjG77/VaMNe
rDASlwQLk7pHsmX0e5BCMlx3EA9lDubpNTy4dFCs5g3ZyOYZ007c61SgjVUOiNzU
rdz57hev0PV4VAdM/BcGRMm3II4177DaTNZui0rX+NROG4xg
-----END CERTIFICATE-----
Generated at Fri May 10 02:01:21 2024 by rpki-client on console-ams.rpki-client.org