Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
File: AS211061.roa (raw, json)
Hash identifier: 2r2DOmXAAIysG4Mf8tqWWw1sEOnKZhsychdZkD3sBUo=
Subject key identifier: 43:D1:F6:6C:C7:5E:AC:9A:CB:3B:91:76:95:95:A7:AD:FA:CB:09:EC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0918CDCF5D86BF9C1A9C85FAC8F106D72D164815
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
Signing time: Wed 26 Jul 2023 19:02:08 +0000
ROA not before: Wed 26 Jul 2023 18:57:08 +0000
ROA not after: Wed 24 Jul 2024 19:02:08 +0000
asID: 211061
IP address blocks: 92.242.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:18:cd:cf:5d:86:bf:9c:1a:9c:85:fa:c8:f1:06:d7:2d:16:48:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 26 18:57:08 2023 GMT
Not After : Jul 24 19:02:08 2024 GMT
Subject: CN=43D1F66CC75EAC9ACB3B91769595A7ADFACB09EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:5f:65:5a:67:52:b6:af:23:6c:b5:91:98:
de:ce:02:b0:61:d6:42:ba:86:a1:28:0b:0f:05:53:
19:fe:f3:4c:a4:a8:24:be:4d:df:41:2e:cb:7a:ac:
ab:06:c1:dc:b5:4d:d7:4b:92:77:28:60:59:a2:c6:
eb:61:18:97:06:91:8a:c1:58:2e:aa:b7:31:77:0f:
8c:2c:f7:23:3f:03:e8:67:6f:62:f6:6f:e7:e5:c9:
e4:e8:2b:dd:5b:74:1f:8b:76:4a:f6:ff:57:61:4d:
71:52:f2:e1:a9:40:96:08:92:2f:6a:87:e7:b0:71:
30:4e:d7:9b:8b:73:36:e9:a4:66:b6:c7:39:0a:0d:
0d:09:e5:96:53:31:40:4a:bd:31:51:bf:9c:7f:4a:
07:0c:0f:f2:02:cc:ff:ac:66:27:4e:f1:83:62:70:
98:6e:32:d6:28:bd:22:16:c2:44:2b:1f:45:dc:b0:
98:6c:fb:57:cc:6f:3e:79:33:ff:f2:1b:68:16:96:
86:2b:95:8e:12:ab:fa:2f:01:be:3b:75:69:9a:a7:
14:9b:47:a3:de:f8:ad:06:98:51:98:85:1d:50:c1:
ae:2f:f3:b8:1a:e3:d9:76:06:9e:ba:13:05:59:06:
1c:38:70:36:57:54:f8:cc:0c:3b:54:db:4d:2c:81:
b6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D1:F6:6C:C7:5E:AC:9A:CB:3B:91:76:95:95:A7:AD:FA:CB:09:EC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211061.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4f:fd:d2:ac:ed:1c:dc:50:63:6a:85:c3:59:20:1e:d0:71:
cc:91:a4:52:17:5b:f6:27:d6:2d:15:84:87:85:cd:ce:27:3d:
67:75:11:0a:21:e9:67:47:4f:12:41:5c:fd:84:fe:c4:c5:86:
1a:21:74:48:1e:79:23:9a:04:cb:42:c7:3d:15:48:3a:3b:94:
c1:a9:3e:4a:40:a9:03:f9:52:fc:71:03:ca:3f:9f:ac:2c:24:
46:2a:a4:34:11:00:be:98:18:26:df:bf:2f:5c:7c:6b:bb:ac:
e5:bc:1c:27:18:05:20:03:b7:95:cb:2e:ef:6f:f4:dd:bf:ef:
25:e2:b7:8d:4d:92:b0:6b:30:20:82:cc:1d:48:26:5e:1c:67:
17:3a:8b:51:7f:f1:1a:c3:bf:0a:27:fb:dc:1e:de:49:71:3c:
ca:56:89:57:01:b9:37:77:c1:32:d7:21:1a:01:d5:1f:3b:c8:
fc:7f:57:b0:69:6f:36:49:74:6a:9f:45:2f:a7:bd:3b:d4:e1:
e4:11:ec:ab:0d:9e:6d:c9:7d:cc:5e:89:f0:c4:d3:45:9d:30:
02:54:7e:fb:ae:98:5b:1f:4e:4e:2b:49:a2:2d:f1:a5:92:3c:
69:ce:e7:5d:ba:e1:ae:32:f1:71:dc:02:d3:48:ca:de:e6:31:
62:c0:58:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:14:30 2024 by rpki-client on console-ams.rpki-client.org