Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
File: AS262287.roa (raw, json)
Hash identifier: U3tTksxzJBjqECUb4YXrea8Wtm/2TJ1JZ2HtFt3YOlk=
Subject key identifier: 62:40:23:7C:8E:E1:31:20:13:7F:4D:C6:22:72:A1:70:6F:41:C2:8A
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 78A7BF06380423AEA7FC3CDC8DF50D43C0253313
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
Signing time: Wed 31 Jan 2024 08:05:08 +0000
ROA not before: Wed 31 Jan 2024 08:00:08 +0000
ROA not after: Wed 29 Jan 2025 08:05:08 +0000
asID: 262287
IP address blocks: 181.214.150.0/24 maxlen: 24
181.214.151.0/24 maxlen: 24
181.215.172.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a7:bf:06:38:04:23:ae:a7:fc:3c:dc:8d:f5:0d:43:c0:25:33:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:08 2024 GMT
Not After : Jan 29 08:05:08 2025 GMT
Subject: CN=6240237C8EE13120137F4DC62272A1706F41C28A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:3b:8c:c0:9d:5a:9c:a4:fb:21:6f:46:a5:
78:4d:8a:80:69:08:a1:33:3a:b1:f8:1f:88:9f:a9:
0b:98:e4:41:55:d5:4b:f5:86:a6:df:d0:83:7e:6d:
dc:0d:3f:c6:f3:76:4d:48:68:a7:47:1b:9b:65:d6:
6c:9b:68:62:fc:c6:ef:4c:a1:5d:bb:1c:28:e8:a8:
ca:04:0e:92:7a:e2:84:d2:9a:b3:18:25:a4:3e:8c:
d2:3b:50:4b:0b:71:e0:9d:c2:68:b3:aa:70:91:b9:
65:e5:52:d9:6a:5d:32:2e:3b:3a:94:80:30:d2:71:
a3:c9:78:95:71:26:3c:65:15:de:53:11:28:23:df:
89:f3:8e:68:61:09:f6:6e:c7:f0:5c:39:26:35:9d:
86:55:1d:4f:8d:70:c9:9b:95:6b:17:85:7c:06:83:
8b:e7:22:92:6d:be:3c:54:0c:f0:32:f2:30:3c:1c:
eb:db:59:a3:a7:5f:ac:34:8d:03:c7:d8:57:fb:20:
15:93:62:19:d8:11:e9:96:60:fd:67:70:8f:02:40:
b0:04:43:14:18:c0:9b:74:1f:1f:f7:57:fd:94:15:
de:4e:14:3f:2c:fa:b6:4e:5b:f3:99:70:7e:c6:d9:
aa:52:2c:e9:6f:29:30:7a:9c:bb:c0:ce:e4:d5:a5:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:40:23:7C:8E:E1:31:20:13:7F:4D:C6:22:72:A1:70:6F:41:C2:8A
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS262287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.150.0/23
181.215.172.0/24
181.215.195.0/24
191.101.240.0/24
Signature Algorithm: sha256WithRSAEncryption
91:11:f9:75:41:c4:bb:0a:15:f2:08:30:ca:44:fb:77:2e:cb:
49:35:80:89:88:bf:fb:1b:77:89:9d:b3:a3:7c:be:41:b8:68:
d0:e1:7e:31:09:b8:ac:d2:4f:9f:be:ce:ee:bd:92:73:cd:92:
65:79:75:57:4d:bc:95:24:62:9a:7a:b1:4f:44:76:62:02:c7:
c7:9f:e4:8c:26:d6:80:c1:78:5a:bb:79:57:1d:8c:e0:91:04:
3f:92:22:87:44:c5:61:65:7a:41:ad:94:2a:c7:45:65:00:6a:
f7:b1:6a:e9:d0:bd:d5:3f:41:40:69:9c:fc:2e:b2:8f:85:1f:
16:0e:00:5d:76:bb:dc:bc:f5:76:ed:d6:fc:45:b8:c5:93:c8:
28:19:e7:a8:02:2d:bd:b1:ff:c0:5d:07:0a:50:67:03:4e:53:
1d:2a:b8:e0:a2:d3:f6:cb:2d:e7:23:0e:dc:f2:a7:81:79:69:
f7:09:0d:59:a7:30:62:b9:10:53:c7:ed:6e:c9:4b:b5:81:47:
f1:d3:09:8c:99:b2:47:da:f2:49:3a:23:60:1d:68:2f:37:97:
70:72:98:ce:b7:87:bd:12:5e:9e:d7:26:2b:6e:98:94:f4:22:
90:d9:c5:8b:4c:3d:ed:83:da:97:37:d9:1f:0d:07:d0:8a:2f:
61:8b:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:23:44 2024 by rpki-client on console-fra.rpki-client.org