Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262191.roa
File: AS262191.roa (raw, json)
Hash identifier: K1AdeKcLlUOmfpz0CTHXZZx+VmmrDJlv5ZBmNJN4ke8=
Subject key identifier: E1:6B:83:B7:B3:09:9C:3E:EF:F3:0C:77:10:BC:CE:AE:47:26:21:F5
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6278823158D309027B51279EBA21D026D58155D4
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262191.roa
Signing time: Wed 14 Feb 2024 21:00:23 +0000
ROA not before: Wed 14 Feb 2024 20:55:23 +0000
ROA not after: Wed 12 Feb 2025 21:00:23 +0000
asID: 262191
IP address blocks: 181.215.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:78:82:31:58:d3:09:02:7b:51:27:9e:ba:21:d0:26:d5:81:55:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 14 20:55:23 2024 GMT
Not After : Feb 12 21:00:23 2025 GMT
Subject: CN=E16B83B7B3099C3EEFF30C7710BCCEAE472621F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bb:5e:3b:1b:12:8e:3b:79:d3:31:88:60:aa:
28:70:26:2e:8e:80:93:f6:ce:21:84:37:87:a9:87:
ea:8f:2a:7f:0b:9a:43:d5:72:9a:a8:92:06:d0:c7:
58:56:5f:0f:cb:8e:7a:a7:5a:2f:6c:7b:eb:9b:df:
0a:bc:ec:ba:4e:75:0a:d9:25:fd:f7:2e:55:b1:2f:
e8:67:37:1e:3d:90:91:0f:96:27:06:2c:16:51:44:
30:ae:8d:bf:5a:c7:7f:8a:f0:1d:47:54:ed:65:d8:
2a:a9:ca:85:71:06:a9:b9:03:b5:4a:40:76:59:ea:
6f:34:37:f7:f8:41:6b:6a:64:ba:9b:99:56:88:ff:
da:52:f4:bd:dc:1d:94:d4:58:dd:e7:fe:c5:3c:69:
38:3c:b3:b0:a0:3c:a7:c7:62:2b:e3:59:b5:2a:de:
49:99:5a:14:27:3a:56:6f:44:a6:f2:91:42:12:cc:
13:1c:5f:8e:38:63:f2:01:b4:5d:47:a3:e4:e9:01:
bf:9a:a5:46:da:6a:bc:7e:12:f9:35:13:be:9e:23:
47:02:3c:05:7e:f1:3b:2a:87:37:ba:e4:43:ae:ac:
59:b6:39:24:30:bd:b4:38:b6:99:b8:4d:0b:35:e3:
0b:06:e8:76:76:99:90:a4:0d:9a:14:9c:6b:4a:aa:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6B:83:B7:B3:09:9C:3E:EF:F3:0C:77:10:BC:CE:AE:47:26:21:F5
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262191.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.197.0/24
Signature Algorithm: sha256WithRSAEncryption
48:13:5e:bf:e7:47:3e:73:4d:73:12:a9:3b:58:04:ac:03:a0:
b9:15:b5:47:ad:75:25:11:8e:b6:98:8a:71:f7:07:e3:3f:5c:
ec:ae:db:a0:0e:3e:aa:02:71:9b:fd:52:31:47:33:54:72:57:
2c:00:77:c0:f6:c9:b3:90:06:fa:b6:a9:52:14:94:95:b2:91:
72:cc:4b:59:bf:e3:28:09:67:63:c3:6f:3c:f3:f5:2e:f7:4e:
4a:1f:db:f0:8f:20:97:f9:07:f1:71:3d:d7:45:c7:55:a1:df:
ea:db:37:6f:e6:c0:ab:2b:fb:63:79:03:fc:f6:3f:60:fd:0e:
ce:6c:4e:ae:11:7b:5c:88:d1:a4:94:bd:b0:5a:24:42:41:49:
ef:9c:54:7b:19:9c:38:c4:06:9a:fe:a6:10:bd:ff:8b:c7:95:
7f:3e:27:38:2b:b6:5f:e8:b6:c7:cb:e7:e7:4e:e9:13:c4:76:
3c:68:c6:5c:9c:39:fc:8d:84:a6:23:f3:8b:b9:b7:10:e6:fa:
89:7f:87:02:b6:19:ea:eb:6f:3a:86:28:63:e0:c1:5e:12:54:
45:e4:b8:62:ff:c3:14:02:bd:45:fa:bb:e4:16:a3:34:e4:01:
63:9e:c6:3e:ec:d7:14:56:c3:40:da:d3:66:23:47:3b:8e:c2:
f7:15:b5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:13:45 2024 by rpki-client on console-fra.rpki-client.org