Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215809.roa
File: AS215809.roa (raw, json)
Hash identifier: jxbAM8Ubzh0C1fYSj6UZEsPziagts0dhToSCp7J6OiE=
Subject key identifier: 6F:74:D1:6A:DB:3C:79:1A:E9:FD:02:96:97:D8:9B:B5:ED:E1:61:D3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5A24075D296FB6E2E6E1079CC1CD059C25D5069B
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215809.roa
Signing time: Mon 26 Feb 2024 17:10:17 +0000
ROA not before: Mon 26 Feb 2024 17:05:17 +0000
ROA not after: Mon 24 Feb 2025 17:10:17 +0000
asID: 215809
IP address blocks: 179.61.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:24:07:5d:29:6f:b6:e2:e6:e1:07:9c:c1:cd:05:9c:25:d5:06:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 26 17:05:17 2024 GMT
Not After : Feb 24 17:10:17 2025 GMT
Subject: CN=6F74D16ADB3C791AE9FD029697D89BB5EDE161D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:98:37:c6:65:69:ca:d8:73:db:c0:45:af:
39:38:c0:b9:24:13:e6:cb:86:3c:17:f0:4d:f5:ca:
5a:3f:fd:f9:e7:5c:f1:78:d5:03:fc:a9:64:27:27:
6a:0a:20:cf:91:10:3a:d9:40:09:48:26:5a:66:09:
7e:03:a0:58:d1:dc:d1:4c:36:3d:d2:32:e3:5d:5d:
30:11:af:14:0c:02:56:b5:c8:08:da:8c:e6:c6:84:
7e:11:a0:96:61:9e:41:1f:db:08:40:a7:90:18:48:
e0:88:ba:31:9e:1a:d1:97:94:de:f4:c1:b0:5b:93:
51:4a:2e:a4:73:ae:6c:cc:d5:62:a2:07:7d:ab:58:
d7:ee:61:0e:ff:47:39:c0:e3:30:eb:cd:fd:d5:f3:
bd:85:dc:91:49:7b:98:66:db:e9:a3:0f:d9:e0:32:
a6:b6:2c:fc:1c:e8:ed:45:f3:3a:84:70:04:bd:3d:
57:cf:90:d5:7c:6b:4c:d6:9d:06:98:ba:f2:9f:c9:
de:18:9d:5d:c9:41:14:f9:3b:e9:47:ba:fa:9c:fb:
fe:a7:f4:5e:2f:99:db:fe:18:11:7f:7a:d7:dd:e1:
8d:c8:3d:c5:c1:f1:9a:a9:a7:68:ea:36:5c:be:bc:
d8:36:a2:f2:c1:20:ff:2d:6a:e3:28:4e:c5:39:1d:
80:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:D1:6A:DB:3C:79:1A:E9:FD:02:96:97:D8:9B:B5:ED:E1:61:D3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.226.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b8:82:ce:59:7d:a0:72:a5:bb:49:e9:67:89:2d:f5:bd:11:
8b:99:7f:80:a7:e7:31:2c:88:1c:5c:81:c1:b6:67:c2:5e:22:
db:47:a1:52:8c:e4:aa:e3:06:57:d9:c6:b8:9c:b8:78:ed:e7:
d4:91:37:23:53:91:19:8d:cd:20:43:c0:d6:1c:b9:e4:7c:83:
db:72:a0:11:f0:05:29:81:00:f8:11:da:1f:77:23:44:2e:14:
62:1d:12:44:e3:07:5b:6a:0f:e2:38:5f:c1:94:cb:99:bb:b2:
d7:2b:9b:6c:c8:ab:13:b5:65:8d:de:57:f4:77:0a:0a:90:5d:
7f:88:82:1b:69:fb:a9:0c:d0:7c:21:58:09:c9:e0:30:04:86:
2b:95:42:a6:61:89:5b:f0:e0:4f:4d:b8:72:06:36:77:e8:f2:
5a:09:d7:af:bb:a5:b3:da:ed:f6:b6:b9:db:51:8f:2e:d9:5b:
64:83:7e:02:5b:ad:16:e0:ca:7a:67:99:6f:56:87:3c:47:ff:
0b:7b:0a:a9:19:65:e5:a6:27:a3:ed:be:a6:36:6a:cc:1c:92:
4c:33:3d:49:f6:24:12:55:99:f0:cc:92:f4:ac:65:2e:ef:49:
b8:ca:c0:18:cd:1a:8b:94:7a:9b:32:03:db:ff:62:ef:d2:45:
1c:e9:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:14:31 2024 by rpki-client on console-ams.rpki-client.org