Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215817.roa
File: AS215817.roa (raw, json)
Hash identifier: hZLfwkj54nP/TCfJ/jPvUYlQAoyXhBJ3r3AtHNRsj/g=
Subject key identifier: 32:17:EE:7F:00:06:D3:14:1E:87:BC:F6:DE:A8:25:FA:85:D1:12:BA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 24D7AA5142577D54A20DF659B7AB7A3EA2BCF180
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215817.roa
Signing time: Tue 25 Jun 2024 06:33:29 +0000
ROA not before: Tue 25 Jun 2024 06:28:29 +0000
ROA not after: Tue 24 Jun 2025 06:33:29 +0000
asID: 215817
IP address blocks: 179.61.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:d7:aa:51:42:57:7d:54:a2:0d:f6:59:b7:ab:7a:3e:a2:bc:f1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jun 25 06:28:29 2024 GMT
Not After : Jun 24 06:33:29 2025 GMT
Subject: CN=3217EE7F0006D3141E87BCF6DEA825FA85D112BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:18:19:0a:6e:9a:b4:d0:0a:f9:64:5e:ad:
31:fd:c6:5e:d0:d8:7b:d2:8c:3b:74:54:cc:1d:5d:
d9:c2:db:a8:44:a0:f0:2d:a8:85:f2:d8:be:e1:3e:
54:71:d5:85:12:e5:76:9b:ab:b8:32:d0:30:f2:8d:
5c:f9:06:b4:7e:47:89:c4:c2:c5:de:04:a7:6d:c7:
06:40:6c:55:1b:79:c8:39:0f:73:34:20:5a:0d:e9:
9f:25:aa:18:ce:14:97:68:a9:fa:0a:80:5f:50:dc:
58:32:44:f0:a0:a2:86:d8:3a:2d:08:99:c8:cb:cd:
6d:30:f7:69:b7:cc:33:21:e3:6b:21:58:e0:db:79:
9f:a9:c3:2d:85:bd:69:2e:81:c9:65:43:10:04:af:
66:3a:67:1b:b5:d8:cc:73:e0:fa:6b:01:ce:67:cf:
40:72:3d:f3:d3:17:18:fb:e9:84:a2:b3:6f:ec:e2:
31:2c:60:41:1f:4d:8d:81:12:19:19:61:e2:ba:bf:
08:f4:f1:9f:92:97:12:15:3e:13:16:93:3a:c0:fc:
a1:0b:61:5a:60:98:e2:c3:3a:ac:0f:1a:26:14:ec:
7e:d2:d9:43:ce:08:52:fa:ab:fd:fb:a7:28:29:61:
b1:dd:16:21:c3:34:dd:c6:c3:a3:4f:0f:57:fc:54:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:17:EE:7F:00:06:D3:14:1E:87:BC:F6:DE:A8:25:FA:85:D1:12:BA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS215817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f9:3f:f6:2c:b8:0c:3c:4b:e8:24:ab:e7:a2:b5:27:c7:a4:
53:d3:50:49:b3:0b:46:78:46:e6:eb:60:7b:b7:e6:52:9f:81:
81:27:be:b5:7b:fd:9f:90:d7:27:28:ad:b5:74:a2:48:48:dd:
db:ef:ed:78:4f:ab:24:7c:80:9a:a8:19:41:4f:fc:7f:91:a9:
88:f9:9c:a8:04:7e:c3:d2:c1:be:4d:22:d3:fe:1a:d7:bb:22:
76:25:7c:12:a2:9c:6e:19:4e:4f:36:54:be:e9:76:77:7a:fc:
38:ce:3b:90:5b:09:ed:44:c6:d9:96:98:41:9e:d3:ed:9e:c7:
2b:31:f4:69:7b:24:cd:6b:68:70:c4:5f:6c:6e:21:43:e3:f5:
55:29:4d:a5:aa:42:e2:cc:58:78:2a:47:51:d9:99:d5:25:fd:
92:d9:3e:02:f6:8b:34:59:ce:4c:66:95:f4:2f:bf:81:c6:66:
bd:d6:1c:e3:cb:95:95:1f:26:c4:e0:d4:df:fb:a4:7b:ed:2b:
43:e9:02:d0:6c:dc:68:b8:01:ae:2c:21:80:66:0c:36:d7:34:
4f:c7:a8:89:59:f1:de:bd:62:38:9d:f2:13:b0:a4:a2:ee:c7:
b0:be:2e:78:e0:1e:e9:3f:fd:81:ff:9a:70:75:8c:9e:23:13:
25:86:a9:03
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUJNeqUUJXfVSiDfZZt6t6PqK88YAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA2MjUwNjI4MjlaFw0yNTA2MjQwNjMzMjlaMDMxMTAvBgNV
BAMTKDMyMTdFRTdGMDAwNkQzMTQxRTg3QkNGNkRFQTgyNUZBODVEMTEyQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmRgZCm6atNAK+WRerTH9xl7Q
2HvSjDt0VMwdXdnC26hEoPAtqIXy2L7hPlRx1YUS5Xabq7gy0DDyjVz5BrR+R4nE
wsXeBKdtxwZAbFUbecg5D3M0IFoN6Z8lqhjOFJdoqfoKgF9Q3FgyRPCgoobYOi0I
mcjLzW0w92m3zDMh42shWODbeZ+pwy2FvWkugcllQxAEr2Y6Zxu12Mxz4PprAc5n
z0ByPfPTFxj76YSis2/s4jEsYEEfTY2BEhkZYeK6vwj08Z+SlxIVPhMWkzrA/KEL
YVpgmOLDOqwPGiYU7H7S2UPOCFL6q/37pygpYbHdFiHDNN3Gw6NPD1f8VMpdAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUMhfufwAG0xQeh7z23qgl+oXRErowHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjE1ODE3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz2M
MA0GCSqGSIb3DQEBCwUAA4IBAQA7+T/2LLgMPEvoJKvnorUnx6RT01BJswtGeEbm
62B7t+ZSn4GBJ761e/2fkNcnKK21dKJISN3b7+14T6skfICaqBlBT/x/kamI+Zyo
BH7D0sG+TSLT/hrXuyJ2JXwSopxuGU5PNlS+6XZ3evw4zjuQWwntRMbZlphBntPt
nscrMfRpeyTNa2hwxF9sbiFD4/VVKU2lqkLizFh4KkdR2ZnVJf2S2T4C9os0Wc5M
ZpX0L7+Bxma91hzjy5WVHybE4NTf+6R77StD6QLQbNxouAGuLCGAZgw21zRPx6iJ
WfHevWI4nfITsKSi7sewvi544B7pP/2B/5pwdYyeIxMlhqkD
-----END CERTIFICATE-----
Generated at Fri Jun 28 23:14:39 2024 by rpki-client on console-fra.rpki-client.org