Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270764.roa
File: AS270764.roa (raw, json)
Hash identifier: Qc0jp1s6soqW8Bl+p64tUCSJuBOjqQl02Tu2642d4V4=
Subject key identifier: 37:39:97:DC:25:C3:8C:50:24:A8:86:C9:D1:96:FE:D2:FC:47:1D:23
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4D3CCDAB5BADA3ADAB7FBE5F9E5AEB794AC9D951
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270764.roa
Signing time: Thu 22 Feb 2024 02:05:13 +0000
ROA not before: Thu 22 Feb 2024 02:00:13 +0000
ROA not after: Thu 20 Feb 2025 02:05:13 +0000
asID: 270764
IP address blocks: 181.215.236.0/24 maxlen: 24
181.215.253.0/24 maxlen: 24
181.215.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3c:cd:ab:5b:ad:a3:ad:ab:7f:be:5f:9e:5a:eb:79:4a:c9:d9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 22 02:00:13 2024 GMT
Not After : Feb 20 02:05:13 2025 GMT
Subject: CN=373997DC25C38C5024A886C9D196FED2FC471D23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:61:0f:bd:7a:3e:4d:01:5b:2a:9b:b7:37:
c9:f1:1e:c6:ac:fa:ea:87:cb:77:30:d2:af:b9:db:
6d:93:7b:d5:2b:21:7c:97:dd:68:45:89:0b:13:b7:
07:8e:3c:cb:29:87:d3:94:8c:42:05:53:7d:a9:13:
97:ad:60:a5:2a:25:dd:49:02:9a:22:c0:0f:a3:fc:
b9:db:95:da:5c:19:15:9e:dc:13:b0:1f:9d:da:f6:
e2:91:3e:f4:0c:4f:1f:a3:96:f9:fd:d1:bb:11:ff:
08:c5:3c:8d:e4:5d:6b:71:62:f3:5d:35:4a:71:02:
67:b6:10:db:72:8b:e5:53:2e:68:d2:8f:74:2c:e4:
4a:76:3a:b2:6d:14:64:73:66:7c:f8:53:85:75:7c:
f3:75:6a:7c:79:21:a0:c3:ce:73:fa:37:c1:9b:bc:
ea:06:9c:59:62:a7:db:02:cf:16:cb:5b:85:08:99:
ce:83:37:a6:52:4d:a1:7c:93:98:51:7e:30:ee:87:
a7:91:72:80:d0:e9:4a:56:28:a5:a2:c7:f1:db:a8:
53:d9:3b:6a:a2:94:68:89:b5:8e:63:e4:ad:49:5d:
0a:5c:ef:d4:b7:76:15:94:ac:fb:1c:53:c3:18:02:
ed:84:5e:0c:72:1e:b5:92:2f:e7:7d:7d:57:3e:dd:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:39:97:DC:25:C3:8C:50:24:A8:86:C9:D1:96:FE:D2:FC:47:1D:23
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS270764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.236.0/24
181.215.253.0-181.215.254.255
Signature Algorithm: sha256WithRSAEncryption
a3:fb:e2:fa:7f:52:16:2a:07:b6:1b:4c:99:37:f3:a1:ba:15:
a3:4f:18:da:68:4e:15:72:b0:b8:eb:5b:1d:24:1c:b6:d6:56:
dd:9f:19:98:ba:e9:cf:59:7d:dd:05:27:3b:7e:3e:1e:8f:a5:
14:a7:06:55:90:ad:4d:dd:42:a5:1e:68:61:29:59:a0:95:f9:
00:b3:5d:e9:4d:b0:61:c1:10:88:b0:a8:c2:ce:eb:54:b7:c5:
57:56:db:d9:82:c9:46:fe:ba:2d:ab:e3:2b:53:f8:37:6e:46:
2f:29:ca:94:08:d6:d6:a5:72:aa:33:c7:5d:11:ed:77:b7:39:
3e:1c:70:7a:a0:13:97:1a:ea:77:7a:43:b3:7b:4d:7f:a3:56:
fc:a2:53:20:c7:5b:28:09:08:f5:6d:13:3a:f6:72:25:bd:6b:
ed:1b:ee:72:f1:1f:e1:9f:3c:52:33:e6:5c:76:90:f3:52:c5:
78:50:18:e5:80:c7:ca:47:66:6a:4c:77:2a:09:3a:b7:f3:1f:
8a:75:8e:c7:a7:5b:3a:8c:a4:d0:6d:ec:91:6b:2c:1d:a7:93:
f1:ae:d9:33:24:64:d0:68:05:71:59:32:06:ab:49:b7:1f:50:
4d:57:29:bb:e0:90:9a:1a:d5:60:52:82:f9:99:67:cc:1a:1b:
2d:ca:e3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:13:45 2024 by rpki-client on console-fra.rpki-client.org