Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214024.roa
File: AS214024.roa (raw, json)
Hash identifier: TqapkijYIlQdlOgbFTGUp8mlsJp6QNBuLnvZJOqysdE=
Subject key identifier: 75:AD:E1:91:C2:C5:0C:25:86:8B:6A:43:8A:11:6B:9F:A5:7F:FF:62
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 28823F24987DC2245072344A6784479FEF073360
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214024.roa
Signing time: Mon 21 Oct 2024 07:38:14 +0000
ROA not before: Mon 21 Oct 2024 07:33:14 +0000
ROA not after: Mon 20 Oct 2025 07:38:14 +0000
asID: 214024
IP address blocks: 179.61.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:82:3f:24:98:7d:c2:24:50:72:34:4a:67:84:47:9f:ef:07:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 21 07:33:14 2024 GMT
Not After : Oct 20 07:38:14 2025 GMT
Subject: CN=75ADE191C2C50C25868B6A438A116B9FA57FFF62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:b1:30:33:55:80:b5:1f:13:6b:20:e0:8a:
38:e4:bb:92:04:e1:fa:96:3f:da:db:97:4b:07:5c:
44:78:bc:c1:76:6f:49:53:85:22:1a:35:24:f4:3e:
cf:34:6a:6f:45:1a:f3:f8:f0:d5:4d:d8:fd:9d:f7:
8b:64:fa:3a:a7:93:4e:5d:f8:7c:67:94:68:dd:f8:
27:8d:01:7b:4b:04:60:ce:4c:c3:93:5e:e7:bd:9e:
89:d1:4d:67:f8:8c:2a:5f:c7:81:09:6b:9a:ff:d0:
fe:1e:9b:fc:d2:fd:ce:ca:94:b0:76:d9:94:6b:81:
3a:6a:6c:93:17:a9:c4:da:56:08:83:a7:d3:44:8d:
ef:40:6c:87:b4:89:f7:54:30:af:8d:50:71:a7:86:
ba:15:a9:c2:93:97:71:14:d2:c2:22:c8:3d:2b:47:
a1:40:e7:0a:78:8b:73:06:95:57:32:59:5c:33:69:
b9:cd:2b:a7:2d:66:f4:f1:72:b6:d4:70:2c:9c:40:
2d:cc:0e:9a:1a:92:ce:13:4d:ed:e1:b3:ea:6c:78:
39:e2:29:9d:6f:81:ba:08:77:38:c3:49:9f:a0:5f:
76:ef:d2:8b:72:1b:f9:a6:73:7c:f5:8f:98:c4:c9:
14:02:41:58:5a:5a:46:a6:f6:7f:ca:b8:bc:d3:b8:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AD:E1:91:C2:C5:0C:25:86:8B:6A:43:8A:11:6B:9F:A5:7F:FF:62
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS214024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:40:43:9d:e5:2c:43:aa:73:7d:ab:aa:7d:52:71:ac:1c:d8:
63:e0:d9:27:0a:51:1f:31:89:f8:32:0a:2c:03:51:0b:31:e9:
3b:43:a0:00:e6:25:9a:76:c3:1b:84:1e:10:00:2d:51:a8:fc:
79:66:f7:be:9d:aa:4d:4a:98:e4:7f:a2:e5:9a:60:6e:88:40:
9e:d3:54:1d:24:c7:ca:e4:48:31:41:0f:3a:69:65:cd:a1:95:
c3:63:8c:13:92:af:cb:7f:f3:91:98:09:f4:7d:d3:94:48:59:
43:7b:c5:a4:b0:b7:a4:c3:fc:54:bb:d8:42:34:23:65:c3:5c:
e7:52:c2:41:06:02:1c:83:9c:c6:38:b6:69:40:8a:77:85:2b:
1c:c0:58:42:51:09:d4:b4:25:70:ea:02:ed:17:1d:73:7d:02:
f9:43:ec:17:6e:fd:4a:ad:55:c0:b4:fd:b6:90:76:66:6a:9b:
b2:dc:1f:70:d3:32:1b:03:67:bd:5b:37:56:ac:f9:e5:72:da:
a9:17:1a:69:25:ab:95:c4:4a:d3:3a:7e:ee:54:e1:10:78:6b:
8a:b1:cd:ba:a2:4d:ca:5a:21:bd:b0:9e:1d:ed:21:61:3c:a9:
79:ff:0e:38:c9:74:6b:8d:bc:69:fe:fe:dd:11:9d:68:a2:ee:
be:21:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:46 2024 by rpki-client on console-fra.rpki-client.org