Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212177.roa
File: AS212177.roa (raw, json)
Hash identifier: V19LbpziKlLPxh1k0dmiNRCYA/n18R8r//YY78RF0Qo=
Subject key identifier: F9:81:51:1C:2A:0A:41:76:10:09:75:83:81:89:A4:8E:5F:E5:B2:F2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 57A8720F803DA373E5EF0A677125B7274D95E104
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212177.roa
Signing time: Wed 31 Jan 2024 08:05:08 +0000
ROA not before: Wed 31 Jan 2024 08:00:08 +0000
ROA not after: Wed 29 Jan 2025 08:05:08 +0000
asID: 212177
IP address blocks: 181.215.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a8:72:0f:80:3d:a3:73:e5:ef:0a:67:71:25:b7:27:4d:95:e1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:08 2024 GMT
Not After : Jan 29 08:05:08 2025 GMT
Subject: CN=F981511C2A0A4176100975838189A48E5FE5B2F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:c8:dc:61:85:c1:c4:4a:ce:cb:a7:30:8d:
bc:49:67:99:3c:33:ed:21:3d:c2:8e:a2:f3:4c:8b:
e8:43:2c:be:52:24:92:08:c9:f1:43:2d:73:34:a1:
5a:05:cc:b6:4d:46:83:f6:ec:6c:bb:04:48:74:ef:
4b:a0:2c:4e:97:58:d4:00:83:dc:1a:16:57:43:e1:
5f:ef:40:ce:be:13:db:29:fc:5e:74:9d:f7:6a:9e:
d0:73:6a:8c:45:dc:a6:8d:56:5c:9d:4e:82:ea:90:
c6:4d:d8:4b:70:10:69:02:74:4a:0d:04:04:90:44:
a9:6d:e7:16:bd:87:25:f2:50:0a:ed:06:38:8a:1c:
74:dd:0b:a9:10:91:88:d3:23:c2:4d:55:88:d6:ea:
5f:c7:e1:68:a2:8b:53:92:b4:ed:e6:50:40:98:c8:
05:0b:ea:69:de:6b:13:e9:f4:8e:d6:1e:35:1c:c6:
46:cc:4f:38:c6:32:d2:a3:df:e8:46:ec:4a:33:b9:
db:db:a7:71:4a:c8:be:54:7d:f0:03:e9:f5:d7:04:
48:63:7b:cf:0a:35:cc:2f:34:b1:61:d8:49:10:77:
e0:fc:a4:36:76:19:af:e7:d6:2b:0c:bc:35:e2:da:
bc:a6:ab:b7:ab:7a:ff:48:2a:dc:92:3a:a1:07:91:
ac:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:81:51:1C:2A:0A:41:76:10:09:75:83:81:89:A4:8E:5F:E5:B2:F2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS212177.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d5:a6:63:cb:36:b4:07:2a:5d:f7:01:66:53:d0:ce:8e:72:
ed:34:8b:32:05:b9:04:6b:30:13:16:9e:f3:00:de:25:59:61:
c2:91:58:bf:29:eb:4d:c7:62:c3:3e:69:24:c8:20:d1:08:13:
b2:e6:e4:9f:d4:35:7b:5e:68:07:8a:b5:97:e5:a6:70:b1:66:
69:11:4d:0f:51:fe:82:0f:27:73:95:eb:24:4f:58:41:48:aa:
b7:a7:a7:96:ef:31:86:20:7e:19:68:75:95:b9:51:0f:4d:b7:
ce:6c:be:2f:c5:6f:b7:8e:50:c6:de:c3:79:16:6e:80:34:59:
2e:5f:27:bd:56:76:3d:5e:86:66:c4:50:62:f2:0d:6c:b1:c1:
16:78:f5:19:bc:94:63:2b:49:65:b2:b5:75:18:8e:ff:3a:9a:
57:24:f9:12:4c:5d:01:cd:05:35:ad:92:72:03:f6:a0:bd:0a:
0e:61:16:13:35:ee:f1:22:17:83:a4:2c:29:75:b5:f1:6f:b5:
9d:f3:3b:16:82:55:15:1c:f3:0b:e4:6e:f7:24:d6:7d:01:da:
06:9e:e5:3d:2b:da:cd:f7:7f:93:d7:f1:95:d2:3e:6e:1f:50:
c2:1b:90:26:f5:53:3c:a6:49:25:bb:df:90:fb:dd:f7:32:de:
a4:ff:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:20:16 2024 by rpki-client on console-ams.rpki-client.org