Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216354.roa
File: AS216354.roa (raw, json)
Hash identifier: vgFCzyj8VMLqYF5aMiM+nkYAUVdDcw2NGnHvocJsQxU=
Subject key identifier: 7E:4D:40:03:6C:D1:DA:23:D3:DD:5D:DD:E3:42:90:6B:86:08:AA:F4
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4235CCC313E790CC7F23AA70BE5303A2F844A8C6
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216354.roa
Signing time: Fri 15 Dec 2023 03:51:12 +0000
ROA not before: Fri 15 Dec 2023 03:46:12 +0000
ROA not after: Fri 13 Dec 2024 03:51:12 +0000
asID: 216354
IP address blocks: 181.215.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:39:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:35:cc:c3:13:e7:90:cc:7f:23:aa:70:be:53:03:a2:f8:44:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 15 03:46:12 2023 GMT
Not After : Dec 13 03:51:12 2024 GMT
Subject: CN=7E4D40036CD1DA23D3DD5DDDE342906B8608AAF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:0e:46:bc:59:50:e5:eb:40:a5:b4:ce:1b:
79:9a:19:50:cf:c0:95:92:e3:03:d8:47:ef:6d:1f:
45:2f:a7:76:0a:e0:fa:42:a5:38:6d:2c:7c:fd:ed:
5f:9c:4a:07:09:7c:d6:c9:9f:04:ec:27:0c:94:8b:
97:e1:52:c3:d2:60:d8:db:bf:68:f7:00:46:8e:2c:
83:e2:93:1a:8d:2c:d1:7f:8e:8e:d6:32:e4:8f:2b:
2f:ba:88:f1:e8:0e:2a:59:6e:d0:ce:90:8c:c9:48:
9f:40:61:09:6f:ac:3b:4a:d1:74:11:55:69:7a:de:
c3:b9:fe:d9:72:c1:81:dd:f2:11:f2:06:13:77:05:
4a:18:df:25:dd:21:ab:16:5a:38:76:cd:43:50:74:
b7:3b:55:dd:d5:09:75:0a:40:c8:bc:d4:bb:ac:b4:
64:8a:8b:3a:8f:5c:aa:0c:7d:59:16:d1:9c:1e:76:
4e:e4:b2:aa:ef:a3:c0:4e:ab:00:15:ad:6a:78:d6:
d5:25:15:db:7b:d7:ce:c4:4f:8e:e1:e6:5d:e2:17:
67:6d:f1:d0:12:57:a4:6e:89:fa:cc:6c:af:5c:48:
44:1a:ea:ff:e6:76:30:5d:18:10:9f:65:21:f0:9d:
7a:94:81:1f:cc:d4:01:2d:da:fe:32:45:0a:6c:b0:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:40:03:6C:D1:DA:23:D3:DD:5D:DD:E3:42:90:6B:86:08:AA:F4
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS216354.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.26.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f9:a9:dd:11:7d:ed:b7:1e:34:08:0c:5e:98:37:ba:eb:61:
d2:b0:f5:45:13:f5:6b:d1:e6:d1:7c:cd:dc:18:5c:96:81:91:
d9:c8:00:23:7b:15:5f:0b:ad:55:04:07:89:c6:33:0b:e0:43:
6c:79:c5:8f:36:20:66:9d:46:64:c2:a2:18:24:a7:97:38:34:
00:d1:2e:74:f1:14:37:fb:34:bb:23:8d:38:fd:04:e8:f5:48:
c2:e7:1f:23:1b:06:70:99:19:64:a4:0c:a9:04:ac:ec:31:8b:
ab:c7:35:ed:ac:3b:ad:ee:33:c8:80:ff:35:ec:7e:62:48:ba:
4e:a4:bd:44:b9:79:d7:1f:92:dc:39:75:07:2f:31:b5:bc:6b:
9d:cc:e6:7e:d9:43:85:85:84:6f:df:49:ca:59:21:ed:b1:11:
38:b0:0b:62:1c:f3:1c:f1:2e:44:0b:44:cc:59:ea:40:63:67:
d4:76:c7:10:64:7d:f9:c6:17:23:e3:e1:03:bb:e3:59:d0:6c:
87:bb:4b:0d:75:fa:b7:7e:ae:d5:10:7d:f3:24:6a:50:ad:ad:
c4:da:fc:86:64:2a:f8:07:3d:67:c1:65:1e:6b:a6:ec:2a:48:
f3:46:af:32:47:e9:f6:61:b2:13:14:b1:c1:ae:28:68:5a:a9:
f6:11:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 08:14:31 2024 by rpki-client on console-ams.rpki-client.org