Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215638.roa
File: AS215638.roa (raw, json)
Hash identifier: XGI1p3Nt5pMbh+3i99aa2R+vs4t2zZULYj0NqZNh5iM=
Subject key identifier: 9F:8F:76:37:F4:30:A0:19:8D:42:78:02:F9:11:E3:0E:FB:38:29:18
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7F9CA83A60FB377F8949E6B65EE239D6EED35359
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215638.roa
Signing time: Tue 13 Feb 2024 14:35:18 +0000
ROA not before: Tue 13 Feb 2024 14:30:18 +0000
ROA not after: Tue 11 Feb 2025 14:35:18 +0000
asID: 215638
IP address blocks: 191.101.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9c:a8:3a:60:fb:37:7f:89:49:e6:b6:5e:e2:39:d6:ee:d3:53:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 13 14:30:18 2024 GMT
Not After : Feb 11 14:35:18 2025 GMT
Subject: CN=9F8F7637F430A0198D427802F911E30EFB382918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:91:f6:47:2a:60:5a:43:a7:a2:26:a0:f5:
af:7d:b6:62:95:48:a3:68:89:cb:e0:c2:b4:8a:7b:
8a:71:74:2b:72:43:d6:a1:86:d9:ba:27:d3:67:54:
22:20:75:b6:bc:d4:ef:e8:33:4d:14:40:44:f8:59:
e7:94:08:19:e8:09:1b:f7:1e:f6:de:ec:b9:df:dd:
19:37:52:f2:a1:fe:28:1a:a9:c4:1c:60:5a:1c:0a:
4a:4d:05:3d:c7:0a:0a:d5:c9:0a:b5:bf:ab:d6:b1:
6c:c6:11:df:23:5c:e6:fc:79:c2:46:c2:5e:90:bf:
98:04:fb:a5:ee:eb:41:e7:19:a5:6c:01:67:8c:18:
9f:a4:55:1a:9b:1c:dc:f9:dd:a9:91:c8:7f:b6:a4:
de:d0:63:d2:2f:58:8f:2e:93:84:4f:e3:e6:19:9e:
78:bd:43:fc:ef:4c:4b:d5:27:ad:bd:07:8e:fd:e8:
08:47:cc:95:0f:b6:aa:f2:e6:f6:b2:c4:2b:d1:ef:
46:d0:c7:3c:b3:30:0f:0b:0b:41:05:2b:03:f4:c4:
8a:8c:77:1c:56:17:e8:86:b1:3a:3d:8b:b5:f2:b7:
f8:9c:3e:21:bd:cd:cb:f4:ac:36:2b:f3:0f:1a:77:
50:81:8b:ee:0b:d2:c3:25:e8:37:fa:25:d0:1d:59:
ec:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:76:37:F4:30:A0:19:8D:42:78:02:F9:11:E3:0E:FB:38:29:18
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.29.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ec:97:f5:c5:c6:45:df:1f:da:91:d0:dc:8b:bf:6b:fd:e6:
ff:db:25:ab:22:2f:82:5f:b6:24:7f:84:93:5c:88:1c:29:3e:
35:22:89:64:b0:f2:44:13:b6:54:83:aa:eb:dd:36:fa:07:1c:
b7:06:d8:ae:b6:27:ce:af:a7:be:79:0f:31:ec:99:34:57:e5:
87:3f:3a:dd:1f:8a:51:9a:bf:ef:ad:e9:1b:9e:48:92:bd:b1:
ab:39:44:21:5f:90:f8:4d:e8:c6:3e:13:da:58:bf:15:dc:be:
af:a3:90:ec:92:e8:20:e5:ed:9f:55:7c:3f:01:e5:fc:d6:fc:
1e:46:28:d1:a6:64:c6:a6:dd:4d:02:49:3a:84:7f:6f:73:ec:
32:9b:bb:44:f7:aa:c2:34:84:42:61:0a:cc:92:9b:7f:97:f2:
97:79:2c:0b:e2:9d:fa:d7:d3:5f:81:68:1d:7d:43:e0:83:a0:
cc:0a:6c:72:2a:0b:2a:37:6a:19:11:5a:6c:12:2d:df:23:e9:
5f:72:f4:4e:6d:7a:98:02:9c:bc:ef:c9:0a:aa:97:43:19:73:
43:af:f2:4f:90:d5:c4:a2:5f:05:5c:24:63:2e:c7:10:fe:84:
24:af:0f:1b:a6:5c:6b:21:ae:d9:cb:30:06:9f:e9:cc:d4:08:
8d:0a:00:05
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUf5yoOmD7N3+JSea2XuI51u7TU1kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAyMTMxNDMwMThaFw0yNTAyMTExNDM1MThaMDMxMTAvBgNV
BAMTKDlGOEY3NjM3RjQzMEEwMTk4RDQyNzgwMkY5MTFFMzBFRkIzODI5MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CZH2RypgWkOnoiag9a99tmKV
SKNoicvgwrSKe4pxdCtyQ9ahhtm6J9NnVCIgdba81O/oM00UQET4WeeUCBnoCRv3
Hvbe7Lnf3Rk3UvKh/igaqcQcYFocCkpNBT3HCgrVyQq1v6vWsWzGEd8jXOb8ecJG
wl6Qv5gE+6Xu60HnGaVsAWeMGJ+kVRqbHNz53amRyH+2pN7QY9IvWI8uk4RP4+YZ
nni9Q/zvTEvVJ629B4796AhHzJUPtqry5vayxCvR70bQxzyzMA8LC0EFKwP0xIqM
dxxWF+iGsTo9i7Xyt/icPiG9zcv0rDYr8w8ad1CBi+4L0sMl6Df6JdAdWexbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUn492N/QwoBmNQngC+RHjDvs4KRgwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE1NjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAv2Ud
MA0GCSqGSIb3DQEBCwUAA4IBAQA57Jf1xcZF3x/akdDci79r/eb/2yWrIi+CX7Yk
f4STXIgcKT41IolksPJEE7ZUg6rr3Tb6Bxy3BtiutifOr6e+eQ8x7Jk0V+WHPzrd
H4pRmr/vrekbnkiSvbGrOUQhX5D4TejGPhPaWL8V3L6vo5Dskugg5e2fVXw/AeX8
1vweRijRpmTGpt1NAkk6hH9vc+wym7tE96rCNIRCYQrMkpt/l/KXeSwL4p3619Nf
gWgdfUPgg6DMCmxyKgsqN2oZEVpsEi3fI+lfcvRObXqYApy878kKqpdDGXNDr/JP
kNXEol8FXCRjLscQ/oQkrw8bplxrIa7ZyzAGn+nM1AiNCgAF
-----END CERTIFICATE-----
Generated at Fri May 10 18:20:16 2024 by rpki-client on console-ams.rpki-client.org