Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
File: AS215813.roa (raw, json)
Hash identifier: Omt+Kawb3qbkCp+N+8j0TnkcHD9oTWt5ebhQ2hm63ZY=
Subject key identifier: F7:BA:DC:11:53:F4:8D:99:38:10:0D:EF:19:14:16:3C:29:D8:61:65
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6AD9D45C6A02EEF2F59715467B84A592FB6239A5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
Signing time: Wed 25 Dec 2024 21:17:38 +0000
ROA not before: Wed 25 Dec 2024 21:12:38 +0000
ROA not after: Wed 24 Dec 2025 21:17:38 +0000
asID: 215813
IP address blocks: 179.61.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 19:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d9:d4:5c:6a:02:ee:f2:f5:97:15:46:7b:84:a5:92:fb:62:39:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 25 21:12:38 2024 GMT
Not After : Dec 24 21:17:38 2025 GMT
Subject: CN=F7BADC1153F48D9938100DEF1914163C29D86165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:15:cc:db:13:f7:a1:94:df:d7:74:62:a0:
26:ea:16:c1:46:bd:e3:e0:7b:58:a5:71:48:44:bd:
1f:55:ff:82:9e:e1:5d:0d:a1:3a:7e:d8:ef:39:12:
94:1f:c0:c9:da:bc:8a:88:6e:5b:11:dc:43:79:89:
b9:78:2b:33:1f:49:aa:ab:bd:08:7c:f7:6f:6b:31:
97:ae:a9:b3:eb:ae:ee:81:f0:ca:14:f5:9f:5e:65:
8d:84:97:80:53:c7:e0:f3:09:2c:53:af:e3:fe:8b:
6d:ba:eb:d9:7a:aa:86:81:1a:d7:33:a8:5a:f9:ab:
f7:7a:f6:1b:4f:ad:5f:97:52:97:4f:90:72:0a:c8:
6d:5e:04:a1:15:84:e4:88:94:d6:f1:14:7b:44:b1:
4d:e4:48:ad:b7:b2:00:02:6b:2f:3a:4e:bd:62:58:
e5:8e:38:b8:99:6e:33:89:1f:01:3d:40:1b:bc:4f:
a2:da:dd:ab:75:b4:04:ef:11:a4:d7:f3:6f:14:f4:
6d:df:93:8a:da:35:5c:5b:52:ec:2c:42:e9:e9:f9:
1c:c9:75:17:2b:b5:51:7c:30:2c:3a:d8:c8:af:08:
14:ab:f2:6a:57:7b:bd:dc:a0:9f:ce:0d:15:20:83:
fe:d2:3a:13:73:39:53:0d:5a:47:65:3d:57:5a:47:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BA:DC:11:53:F4:8D:99:38:10:0D:EF:19:14:16:3C:29:D8:61:65
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215813.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:f5:f3:85:69:ed:ee:2c:01:eb:12:96:35:33:a4:c6:90:b0:
d5:07:b0:f0:26:d1:c3:72:24:9e:81:02:91:cd:dd:56:90:9c:
2b:e2:b1:4a:9f:17:da:93:9c:ca:4c:ec:d5:b0:5e:e6:81:91:
c3:ba:01:68:2b:d5:00:d2:6d:5b:0b:c1:93:57:8f:66:1a:5d:
1a:4b:d0:0d:e0:e2:bb:03:a7:7b:8c:66:a7:20:ee:fb:56:df:
ad:f2:33:a8:76:ea:51:9f:15:58:f7:69:3a:26:2a:67:55:20:
67:a9:6f:9c:b7:fb:20:a3:11:b8:34:7d:ca:bd:7a:bb:bb:45:
a2:35:98:d8:e6:a2:15:9b:ea:f0:e2:41:42:f8:2a:e5:13:32:
ce:58:03:f0:56:34:a7:19:e2:8c:0e:7d:01:62:97:94:fd:12:
50:b0:02:12:9c:69:c6:15:5d:a1:4c:b5:50:16:57:d9:91:fd:
02:45:fe:7c:ed:0d:22:73:c7:d4:be:9e:11:fd:d2:dc:09:6f:
21:b9:c1:7a:c3:47:03:7a:37:cf:c9:d4:d9:b6:5d:07:6d:e0:
3a:c8:d5:c0:ee:fe:3c:29:3c:0e:4e:52:88:48:fc:89:60:4e:
68:99:a5:92:36:95:79:5d:5c:e5:e6:50:cb:9f:53:2d:c6:b1:
bb:53:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:54:35 2025 by rpki-client