Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211975.roa
File: AS211975.roa (raw, json)
Hash identifier: TslmTPcwe7zZWbvuSDeAgi/QufY6qFb0Vn0Cw4HZDEM=
Subject key identifier: AC:43:76:80:59:6B:5D:BF:67:80:9C:8B:4D:7D:90:9A:1C:48:B9:7F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6BFE0B1553CCF9B290A01E9DC3097541312A880D
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211975.roa
Signing time: Sat 20 Jan 2024 17:19:07 +0000
ROA not before: Sat 20 Jan 2024 17:14:07 +0000
ROA not after: Sat 18 Jan 2025 17:19:07 +0000
asID: 211975
IP address blocks: 191.96.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:fe:0b:15:53:cc:f9:b2:90:a0:1e:9d:c3:09:75:41:31:2a:88:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 20 17:14:07 2024 GMT
Not After : Jan 18 17:19:07 2025 GMT
Subject: CN=AC437680596B5DBF67809C8B4D7D909A1C48B97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:0c:a8:5f:37:5b:90:54:63:d9:da:62:6e:
83:7f:76:fb:ee:e8:d9:f5:0e:21:34:9c:5a:2e:5c:
be:d3:8a:78:cd:91:8e:23:85:2f:48:1c:d4:42:1e:
23:fd:4f:95:ca:ae:cd:d3:c5:c5:97:45:97:84:0e:
7f:1c:6a:5a:98:7b:dd:8c:4f:01:8f:f2:b3:cf:67:
1d:b1:18:09:ef:e2:f4:00:2e:85:7a:39:32:c7:da:
e4:fc:c7:72:6f:b1:4a:2d:91:fb:9c:1f:8f:8f:28:
34:05:7f:17:87:dd:8b:bd:76:de:c9:96:1f:76:d1:
0d:b2:c9:24:87:22:49:74:1c:0f:40:fe:0f:5e:f2:
b3:d0:e7:38:66:5d:2e:23:87:dc:ee:a8:94:3d:71:
bf:82:7f:1f:2a:1f:94:0f:39:e0:70:c1:d4:21:91:
b9:66:7b:b4:bb:50:74:b3:42:e8:ac:fe:d3:c4:f6:
fb:9f:3e:84:b9:a9:97:65:af:ff:cb:99:c5:76:3f:
92:31:7f:52:30:46:b1:ea:87:aa:c6:3a:f2:19:f3:
17:e8:f6:d7:3d:58:08:74:09:52:2b:9d:8d:71:f1:
a3:8a:c1:8d:3f:4b:7f:34:1d:40:ad:45:3a:63:51:
41:9f:ef:76:f3:dd:e1:ed:3b:18:d1:ba:06:0e:5e:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:43:76:80:59:6B:5D:BF:67:80:9C:8B:4D:7D:90:9A:1C:48:B9:7F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS211975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.231.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6d:10:87:50:11:fd:23:28:c8:b3:08:f6:84:a9:d3:27:d3:
01:38:2f:b2:10:eb:dd:7d:71:d1:61:77:4b:87:23:cc:9e:6f:
23:12:09:08:2d:6a:8c:dc:ac:59:0e:87:c3:a8:8f:ae:81:dc:
03:ec:56:d6:cf:71:75:b4:99:d3:94:87:55:24:13:2b:bf:20:
a2:9e:5e:e5:dc:67:4e:56:25:bd:c2:d3:ad:ac:c8:3f:3c:d5:
1a:b8:0d:17:37:65:c7:de:ac:b2:2a:63:55:95:7a:ad:69:42:
a1:00:50:8c:2b:42:d7:d1:c6:df:3f:c8:ee:b5:c4:81:7b:7e:
1a:2b:14:b8:42:f0:c8:8b:1b:5d:a1:75:d2:84:84:72:94:b6:
7e:47:36:d5:d9:15:eb:8b:9e:6c:f7:43:bc:0b:3a:27:70:a4:
94:c3:c4:1d:8d:97:2d:e7:e1:f5:51:57:95:22:51:da:12:25:
05:3a:39:d4:24:a4:56:4d:ba:f6:64:74:b5:75:d5:a5:a5:b5:
71:fc:b4:c1:b3:f8:9a:ce:13:f4:02:19:48:02:26:36:e4:e4:
f9:55:c8:10:de:2e:d7:f3:cc:a5:9d:c6:8f:42:95:ee:b8:36:
dc:0b:85:6e:31:aa:43:77:b1:e4:e2:b3:39:6d:96:0a:0f:6c:
4c:f5:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:13:44 2024 by rpki-client on console-fra.rpki-client.org