Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263702.roa
File: AS263702.roa (raw, json)
Hash identifier: kWHhHFx3RB3e0WzhKgQeHuLwRurNFQozIVTd6lAG+8s=
Subject key identifier: 21:3E:C4:0D:F3:48:E7:2A:90:C3:78:A9:2D:6F:BB:11:77:E9:D3:0F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0EA6CE1ECF54BF8E182D945FCAF9FF7E0CD91C5C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263702.roa
Signing time: Wed 31 Jan 2024 08:05:10 +0000
ROA not before: Wed 31 Jan 2024 08:00:10 +0000
ROA not after: Wed 29 Jan 2025 08:05:10 +0000
asID: 263702
IP address blocks: 179.61.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a6:ce:1e:cf:54:bf:8e:18:2d:94:5f:ca:f9:ff:7e:0c:d9:1c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:10 2024 GMT
Not After : Jan 29 08:05:10 2025 GMT
Subject: CN=213EC40DF348E72A90C378A92D6FBB1177E9D30F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:ff:28:72:f8:ac:1c:95:81:75:9a:15:97:
61:87:ce:ac:b3:ec:60:e8:ef:21:33:08:f9:ac:2d:
47:bb:78:65:2b:6c:5b:e3:6f:60:b6:e0:f0:e6:8d:
a9:69:ec:08:64:48:13:f3:a5:54:4c:be:2c:65:e7:
1c:d3:61:47:8a:dc:1d:88:c9:a1:2b:29:d0:eb:f9:
94:0e:21:f8:56:f8:e8:f3:ec:97:4d:3a:eb:5e:3b:
d3:74:e3:52:17:28:dc:9e:8a:32:b5:90:cc:a5:58:
f8:cc:19:8f:dc:fc:ff:ae:14:af:64:18:57:8b:8b:
57:e5:20:ad:34:69:75:ca:6f:8e:a3:6f:2d:40:1a:
9e:f4:5c:80:2a:44:0c:d1:ea:a9:ea:eb:81:e4:54:
92:9e:23:bd:fe:af:4b:3e:0a:10:80:7f:ab:3d:73:
4c:2e:e4:9a:73:76:61:c0:c0:4e:a4:32:ea:cb:df:
b7:cc:c8:8e:e1:99:bc:f5:aa:92:c1:00:fa:d4:20:
29:bc:3c:11:ba:bb:b6:ce:33:6e:49:4e:d9:0b:3e:
12:d7:10:65:e5:32:4c:64:b4:b7:24:4c:8e:b3:4c:
0b:5c:47:30:0d:e7:89:e3:5b:2e:e8:e3:d6:d5:72:
9f:56:83:46:0f:9f:b2:bb:07:e3:25:c2:ff:3a:09:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:C4:0D:F3:48:E7:2A:90:C3:78:A9:2D:6F:BB:11:77:E9:D3:0F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS263702.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e3:93:c3:a3:d8:4b:9c:13:0f:3e:cb:54:55:57:53:1a:6f:
2b:29:2f:6c:89:fc:19:b5:6b:f3:d5:4f:7a:52:ab:06:d4:94:
f6:5f:50:5a:f5:dc:e9:3b:4c:bd:d3:a1:c3:13:7f:e6:f8:14:
9b:17:a1:c8:02:2d:3f:45:c9:40:ab:99:8c:e7:29:d8:ec:32:
60:ad:5e:cd:b5:1a:de:67:70:7f:53:6c:04:6d:dd:09:13:da:
f0:eb:ff:e6:3e:ca:3a:06:69:d5:c7:14:9f:15:73:1f:a5:68:
98:17:5a:66:47:a4:80:6e:d5:a4:8b:b3:db:e8:7d:61:84:d3:
87:ce:b7:a4:79:45:35:c6:fe:17:c9:b7:3b:b1:af:5f:08:fe:
de:3b:b9:3c:a3:cf:12:a4:b2:97:ee:4a:4b:3c:5c:27:ae:86:
b0:4a:22:5a:f2:4f:51:92:cd:27:56:62:61:8a:d5:c1:a1:35:
1b:32:65:6b:3c:c0:6a:44:73:c3:4d:43:cd:f1:25:22:5d:46:
e0:ea:8c:a8:b7:c7:24:03:3c:8d:a3:7b:de:01:8e:25:10:cb:
5c:4f:42:bb:5f:a3:a2:a4:0d:b5:de:0c:7e:86:db:ac:cc:82:
e0:7e:d5:1e:43:33:ca:06:a8:1c:da:07:21:b7:1b:ae:72:ea:
f0:e6:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:47 2024 by rpki-client on console-fra.rpki-client.org