Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201670.roa
File: AS201670.roa (raw, json)
Hash identifier: 7q6fA7y0HBQOj60EWYAZh87MD5ycmpc8vAdEyrV4FTA=
Subject key identifier: B0:9F:11:38:4D:B8:25:5C:49:47:61:26:33:F2:18:FE:F6:0E:21:6A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 45E76FAF886728A991B20887FA4AFD3FDF6303EF
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201670.roa
Signing time: Mon 22 Apr 2024 15:51:27 +0000
ROA not before: Mon 22 Apr 2024 15:46:27 +0000
ROA not after: Mon 21 Apr 2025 15:51:27 +0000
asID: 201670
IP address blocks: 181.214.58.0/24 maxlen: 24
191.101.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:e7:6f:af:88:67:28:a9:91:b2:08:87:fa:4a:fd:3f:df:63:03:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 22 15:46:27 2024 GMT
Not After : Apr 21 15:51:27 2025 GMT
Subject: CN=B09F11384DB8255C4947612633F218FEF60E216A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:17:58:9e:2a:11:76:9a:df:8c:5d:c5:25:
b2:b6:2c:90:21:13:4e:0e:7b:fd:89:2c:82:1c:94:
c6:c3:0d:f9:f4:f0:ea:92:24:73:4c:f8:3f:0c:64:
90:d9:23:fb:19:6e:de:cb:78:59:c0:51:7f:41:78:
81:38:f1:0c:e9:7a:dd:4e:e7:e0:56:7a:a8:b8:04:
c6:90:52:71:6f:e6:b1:0d:11:1f:db:51:97:35:aa:
4c:44:68:5a:43:53:fc:d6:1b:94:8c:2a:22:ec:39:
3d:d6:d1:23:8b:3d:a6:0e:f4:3c:8a:a6:0b:2d:0e:
e9:60:66:d4:29:07:30:11:3a:85:fc:14:27:0d:25:
50:a7:d4:2a:a6:5b:52:b7:e2:15:1c:de:14:af:3e:
4a:3b:bb:20:88:86:b8:df:9d:d0:4d:80:54:e6:e5:
30:97:91:e2:88:07:b3:7f:70:22:b9:f3:c2:d4:b1:
57:3a:18:73:16:e6:8e:15:5c:80:47:27:a2:fc:e4:
dd:c7:76:3d:c8:78:63:58:1e:64:d7:2d:8f:b0:51:
b7:48:6f:41:7b:e0:38:a8:38:c4:f3:0d:39:73:8d:
d9:10:a7:a9:84:75:43:1a:97:19:bf:a4:e1:6a:7a:
7f:52:0f:9c:37:8c:3e:55:72:c1:19:fb:b4:e6:3e:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:11:38:4D:B8:25:5C:49:47:61:26:33:F2:18:FE:F6:0E:21:6A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS201670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.58.0/24
191.101.227.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b5:ad:83:b8:92:88:65:d9:59:5a:7e:9c:bd:c2:d1:9c:0e:
86:95:ea:59:ec:be:7d:e3:71:04:1d:f9:d2:6b:6c:54:af:6e:
84:f7:af:a0:be:2f:dd:d3:fe:44:f2:28:02:f1:72:c9:4d:f5:
89:28:82:10:42:c6:45:a1:fd:e3:ac:7f:6b:5e:62:63:9b:59:
be:20:d0:29:64:1e:95:8b:b3:d9:c9:4f:f7:5b:8c:33:f6:28:
1f:4e:e0:6b:ff:fd:4b:5c:3c:6c:ad:26:bc:6c:3f:55:52:9c:
49:08:a0:ff:d9:17:c7:f2:c1:ca:1a:3f:76:b0:c7:76:58:11:
f6:12:3f:a1:79:46:36:cf:44:c1:06:ae:80:cb:fb:49:8f:25:
f2:4b:07:9e:38:ef:4e:84:55:45:8b:6f:80:45:05:31:c4:9e:
31:9a:6b:65:e3:ef:a8:e5:a1:56:ff:9f:7c:f9:04:90:8e:d5:
1d:3a:cd:a1:07:57:4e:8f:ee:4c:91:fc:26:a7:9e:f5:4c:e4:
be:03:93:8b:f4:57:54:07:3b:6d:6e:79:37:5c:e6:3f:6a:00:
c9:df:e5:f2:41:3a:d1:3c:e3:73:7b:b7:f6:47:1f:29:55:d2:
cf:5c:0c:1e:e9:79:07:51:a6:e6:4a:c5:0d:31:fc:e4:5f:fa:
73:fb:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 02:42:19 2024 by rpki-client on console-fra.rpki-client.org