Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201364.roa
File: AS201364.roa (raw, json)
Hash identifier: fF89+hIX4l0dLueMPXl/dQWpM06/b861NU1uyBCFgSw=
Subject key identifier: C6:86:87:A4:B7:AE:F6:A6:BD:5C:CB:02:C6:A2:FF:C1:68:3F:9A:D9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 1A039E78C5D123EFA0C89C0E333D87357A263CDC
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201364.roa
Signing time: Wed 06 Dec 2023 10:03:56 +0000
ROA not before: Wed 06 Dec 2023 09:58:56 +0000
ROA not after: Wed 04 Dec 2024 10:03:56 +0000
asID: 201364
IP address blocks: 181.214.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:03:9e:78:c5:d1:23:ef:a0:c8:9c:0e:33:3d:87:35:7a:26:3c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 6 09:58:56 2023 GMT
Not After : Dec 4 10:03:56 2024 GMT
Subject: CN=C68687A4B7AEF6A6BD5CCB02C6A2FFC1683F9AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:4e:66:5a:80:75:95:aa:09:31:a3:56:c5:
d0:7c:13:b3:c0:af:69:d1:c3:a2:34:e4:fb:2e:c6:
96:79:a5:6b:7f:57:31:8d:81:38:d0:15:5c:51:43:
43:9b:7a:99:8c:db:75:df:96:53:a1:9c:19:93:3c:
9c:16:4c:27:1f:20:c1:35:c8:91:b7:66:ee:2f:ae:
bd:db:f2:7b:ef:1f:2f:c4:64:dd:7a:2a:be:75:f2:
17:63:39:26:fb:49:6a:16:e1:71:ef:ed:98:66:58:
b4:7a:2f:0b:ab:41:2d:1d:e1:53:cb:f7:d8:51:ae:
23:5c:29:99:10:bb:d3:c9:68:85:f4:c7:e7:b3:6a:
6e:ab:bd:5a:1b:eb:70:df:8e:46:b9:58:20:bc:a9:
0d:90:d8:84:21:6f:58:ae:f1:c8:f5:bf:52:69:14:
7a:4b:9e:bc:53:40:c0:6c:3a:16:22:6f:eb:e2:f1:
51:24:e3:f0:b4:db:c7:33:1b:55:9e:32:45:20:7f:
f9:eb:f0:fb:10:09:d4:df:32:e8:fe:6e:c4:37:59:
7a:7a:dc:bc:cb:c4:3e:d9:bd:b7:cc:3d:8a:89:de:
e8:5b:6a:a8:f0:e1:a0:99:dd:41:16:b7:5c:ba:69:
08:d0:03:6b:4a:f9:b5:c2:a4:88:87:07:1f:f7:76:
1f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:87:A4:B7:AE:F6:A6:BD:5C:CB:02:C6:A2:FF:C1:68:3F:9A:D9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201364.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.223.0/24
Signature Algorithm: sha256WithRSAEncryption
87:62:c3:8b:19:ef:41:3e:83:27:19:15:d8:68:63:bf:fd:43:
27:52:86:4c:97:d2:47:c7:64:c2:3b:a6:ff:fc:05:47:13:a1:
e9:7e:fd:10:76:96:4d:79:c4:e9:2b:4e:3c:de:1d:df:df:8a:
fc:ae:3e:93:9c:87:8e:de:f4:c2:ed:8a:dd:66:81:17:ea:ff:
7d:00:86:fe:c4:2a:fb:26:ed:ab:c3:0a:7b:f4:54:81:f2:5d:
09:cc:a5:68:96:44:1b:18:ce:57:8a:e7:28:cc:ae:85:97:6d:
5e:80:7d:59:c8:d3:6a:a5:d5:2f:43:c7:a8:d9:4b:cf:15:21:
ed:3d:f4:39:cf:aa:82:c2:b3:2a:ac:4a:76:78:7a:c2:06:a4:
fa:ad:95:90:e5:f5:9a:12:48:ef:70:01:7e:37:95:3d:47:d8:
42:9e:18:72:f6:e5:52:83:21:db:59:7c:e5:44:9f:a4:d8:22:
45:69:9c:ea:79:15:e9:af:05:29:9d:81:96:15:97:87:ea:07:
26:9f:8e:b0:34:90:3c:e8:b6:dc:dd:8b:fc:27:84:27:2c:1e:
ed:27:9c:e5:ff:16:c8:e9:23:c7:fd:15:50:27:4f:bb:75:b9:
08:15:ac:c3:00:68:b7:92:8a:0d:48:79:9c:59:6e:b7:1f:e8:
6d:9e:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:14:30 2024 by rpki-client on console-ams.rpki-client.org