Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216221.roa
File: AS216221.roa (raw, json)
Hash identifier: vGvZ8X3sIwAg0EWGtvdD5SpFTF8WFD47n0yyMiDvWbw=
Subject key identifier: E4:23:99:F9:FA:C4:BE:7A:6A:C1:39:7B:D9:AE:7F:3F:0F:A4:13:E2
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 04F40EA4AE4092CAFF0F5552D3A45CE00BC23065
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216221.roa
Signing time: Tue 07 Jan 2025 18:28:01 +0000
ROA not before: Tue 07 Jan 2025 18:23:01 +0000
ROA not after: Tue 06 Jan 2026 18:28:01 +0000
asID: 216221
IP address blocks: 179.61.181.0/24 maxlen: 24
191.96.140.0/24 maxlen: 24
191.96.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 19:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f4:0e:a4:ae:40:92:ca:ff:0f:55:52:d3:a4:5c:e0:0b:c2:30:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 7 18:23:01 2025 GMT
Not After : Jan 6 18:28:01 2026 GMT
Subject: CN=E42399F9FAC4BE7A6AC1397BD9AE7F3F0FA413E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:85:c9:08:ef:c4:89:ac:55:08:a6:a8:07:
9d:30:22:16:19:66:ff:d3:23:b2:27:0f:aa:4f:87:
e1:77:3c:e3:75:af:01:0f:1a:f9:4c:a5:58:d3:f7:
de:3c:f6:01:d4:66:34:52:e4:db:77:4b:36:c7:ac:
35:6e:b2:96:7a:9f:6e:fc:ca:bb:78:04:28:e2:a2:
f0:4d:81:10:7a:34:de:11:d7:9d:db:b0:a9:95:d3:
c3:4f:74:ec:11:a1:51:80:81:1e:1f:d2:f7:eb:06:
35:e7:7a:d3:6a:2d:f7:91:6e:59:c5:ea:7a:db:97:
0b:33:27:ee:44:ff:ba:4f:3f:a4:61:1c:f6:78:ee:
9a:51:8c:3f:18:63:a8:6e:59:6d:bd:29:c0:f6:bd:
53:fc:d4:e3:79:88:06:03:eb:28:83:7f:b2:b8:76:
bd:f1:2a:c4:72:dd:5f:e5:06:98:94:1d:0d:e2:45:
8e:f0:14:44:20:76:97:cb:22:5e:49:59:ba:a6:99:
f8:87:70:ab:e6:aa:7f:ea:c1:54:44:bb:39:2d:f9:
34:45:dc:0b:bb:ed:c9:20:0f:22:35:3b:d6:82:56:
10:b8:b9:df:24:42:12:5c:ff:d8:d4:d1:59:4f:a4:
cb:ec:f7:3b:50:ae:53:0d:9d:c9:cc:fe:fd:78:c9:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:99:F9:FA:C4:BE:7A:6A:C1:39:7B:D9:AE:7F:3F:0F:A4:13:E2
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.181.0/24
191.96.140.0/24
191.96.180.0/24
Signature Algorithm: sha256WithRSAEncryption
84:36:f7:3e:c4:c3:f8:27:48:29:41:2c:82:d1:b1:1f:f4:b1:
2c:ff:3d:e7:f6:c1:41:1a:b8:7e:49:01:ca:11:e2:41:eb:1d:
0c:08:ad:0d:10:21:3b:98:12:95:fd:15:c4:33:aa:9f:b1:09:
75:21:3a:62:6d:50:7f:b1:34:2a:ba:2c:c0:50:e6:f2:ca:ab:
3c:d3:b6:39:b7:ff:a3:b4:0e:ec:86:78:d1:cc:32:06:ef:fc:
03:67:d1:5f:66:a3:a0:43:08:6b:06:b9:93:bc:cb:5b:da:8f:
b1:fb:8d:a3:58:a2:56:e7:21:90:91:4f:fc:ba:63:42:78:35:
65:88:f3:bd:cb:9d:40:73:66:ab:23:30:01:0b:d8:62:95:07:
40:1c:8c:78:8a:d1:37:10:92:58:9f:e9:63:8c:fb:50:56:e0:
e1:df:00:77:42:0d:52:6e:b1:78:e7:7b:ed:58:73:ec:53:53:
5c:0b:5a:5f:a0:44:fc:5f:51:7d:f9:d7:4f:bb:76:81:a5:60:
a2:88:42:52:ba:75:64:94:90:4e:05:08:c9:01:4e:2a:d0:18:
f0:21:fc:39:ff:c6:6c:0a:4d:e7:ad:3e:3f:36:ec:9d:33:76:
dd:df:b6:a9:d1:b5:0a:7f:05:9a:87:73:c2:de:6e:5c:78:ea:
2c:9d:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:45:18 2025 by rpki-client