Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210164.roa
File: AS210164.roa (raw, json)
Hash identifier: NPcXk4JoWjvAb+TyW2mZ1ODzYMxYcIEoWprbaCSV57s=
Subject key identifier: 02:AD:8D:B5:FE:C2:EE:E7:79:7C:87:D1:11:69:EE:BD:9F:C6:64:D1
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0161100D81D723825447CA8AEF2BE27F143AF974
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210164.roa
Signing time: Sun 28 Apr 2024 07:36:59 +0000
ROA not before: Sun 28 Apr 2024 07:31:59 +0000
ROA not after: Sun 27 Apr 2025 07:36:59 +0000
asID: 210164
IP address blocks: 45.93.44.0/24 maxlen: 24
181.214.4.0/24 maxlen: 24
181.215.45.0/24 maxlen: 24
181.215.205.0/24 maxlen: 24
191.96.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:61:10:0d:81:d7:23:82:54:47:ca:8a:ef:2b:e2:7f:14:3a:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Apr 28 07:31:59 2024 GMT
Not After : Apr 27 07:36:59 2025 GMT
Subject: CN=02AD8DB5FEC2EEE7797C87D11169EEBD9FC664D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:97:4c:d6:d9:b6:76:dd:ce:8a:e8:04:c0:
9f:86:d7:27:67:55:f1:d1:e9:f9:07:2e:41:cd:2e:
2b:d4:5e:56:15:a9:e1:8f:1d:de:1b:d6:b6:fa:84:
d2:96:bf:f3:30:c1:ec:6c:01:ce:28:e4:69:da:63:
08:fa:80:84:6a:7f:05:45:55:4c:9d:c0:86:ae:80:
45:07:89:ae:47:e7:84:47:c9:7e:fb:af:88:f3:9a:
d9:1b:bf:5a:69:db:a6:9b:4d:b4:1b:4e:90:81:44:
d3:99:9a:ca:47:a4:de:cd:43:81:0e:f6:c3:39:b0:
e5:0d:4b:d2:f4:66:b8:57:58:04:54:4f:b6:1b:87:
b6:36:5c:fc:10:db:a2:a6:c3:a6:da:fa:76:53:20:
8c:c5:30:0d:63:65:ba:be:f2:18:76:0e:69:d4:20:
50:1f:90:b3:9e:59:f0:59:0f:94:6e:c5:de:bf:1e:
ad:57:fd:be:3b:1b:e6:5f:b1:bd:18:46:8f:bf:14:
76:e9:c0:46:7f:2b:f2:e3:c7:b4:1b:b2:76:8c:a5:
73:26:20:14:1e:54:20:4e:38:8f:0e:88:73:29:27:
2a:bd:73:de:9a:ee:4d:8e:d8:7a:59:bf:8a:2b:8a:
79:d8:a2:b4:e0:d1:5a:4a:33:db:43:ac:54:34:a9:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:8D:B5:FE:C2:EE:E7:79:7C:87:D1:11:69:EE:BD:9F:C6:64:D1
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS210164.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.44.0/24
181.214.4.0/24
181.215.45.0/24
181.215.205.0/24
191.96.102.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e0:ef:97:85:ea:70:ec:9b:57:73:01:cb:eb:7a:e0:fd:93:
69:3f:33:57:b6:9c:d1:b6:37:2d:3d:6a:bb:e0:1f:09:be:8b:
73:9f:8a:f7:d2:7c:85:41:28:66:c1:f0:3c:f7:50:5d:73:54:
95:5a:3b:5b:1f:cb:50:64:2c:0f:cd:63:8e:93:34:7c:90:9e:
9b:ee:45:3f:82:46:24:65:d7:b9:2f:d9:99:95:43:62:1b:3a:
9b:f8:6f:3c:87:03:e9:18:e0:44:62:97:b9:52:b8:93:cb:51:
d0:6e:0a:78:64:20:7d:dc:a3:cb:e0:3b:fc:d6:12:f1:f0:11:
0d:e4:08:f3:4e:b5:3d:0c:86:d7:2e:a4:de:62:57:ce:cd:f4:
c9:e1:32:d3:08:3b:fc:0f:bd:2c:63:8d:20:5d:5e:d4:c2:87:
4c:6e:24:78:41:bf:3c:0f:45:a2:cb:5d:98:8d:1e:78:09:6d:
2f:7d:c3:ee:fc:a7:21:4b:27:da:b4:7e:86:1a:6b:0c:75:84:
7d:75:e1:d5:6c:7a:46:f8:0d:a6:72:03:c2:ac:38:c5:41:9e:
d9:ae:91:a1:d3:b5:61:43:04:68:3f:cb:37:e6:f2:50:cf:c3:
d1:8a:c7:6d:f7:a1:aa:3d:65:39:0c:81:24:4b:98:84:8c:07:
ce:40:15:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:14:30 2024 by rpki-client on console-ams.rpki-client.org