Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
File: AS271799.roa (raw, json)
Hash identifier: eNqsufYLaRTGZI0ju7u5j2oLgQq+Aikdteo4z2dcqSo=
Subject key identifier: 6C:24:61:B6:B2:B2:E3:C3:0A:C5:16:36:AF:A3:2E:C7:CC:82:6F:56
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 736D34CEB855B0CCF4C049C09C6AD2FEFFD99619
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
Signing time: Wed 20 Mar 2024 13:12:19 +0000
ROA not before: Wed 20 Mar 2024 13:07:19 +0000
ROA not after: Wed 19 Mar 2025 13:12:19 +0000
asID: 271799
IP address blocks: 181.214.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:6d:34:ce:b8:55:b0:cc:f4:c0:49:c0:9c:6a:d2:fe:ff:d9:96:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 20 13:07:19 2024 GMT
Not After : Mar 19 13:12:19 2025 GMT
Subject: CN=6C2461B6B2B2E3C30AC51636AFA32EC7CC826F56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:fa:6b:50:98:60:7c:9b:2d:75:0b:5c:e9:
ee:92:aa:f4:c3:6c:2f:72:38:db:02:84:cd:62:35:
2d:3a:6f:ba:40:f1:32:c9:21:db:ed:93:1f:8a:1c:
a9:74:2a:13:38:3d:be:bc:d5:ef:f9:34:3e:1e:37:
75:da:77:5e:0c:bb:47:d3:d4:41:68:58:67:e5:e5:
a1:68:7a:00:2e:6c:1d:71:ef:fa:1c:17:d2:e2:30:
53:1d:cc:26:25:d6:cd:e9:05:9b:ac:96:ae:14:e6:
fb:0e:88:68:96:52:65:d0:2f:fa:98:f5:7b:a8:6d:
fd:86:47:46:e5:73:4c:b4:81:09:7d:80:32:33:54:
48:19:12:ca:93:87:13:ac:e4:01:ed:70:16:bc:9b:
8c:0a:f6:73:16:c3:de:dc:05:58:f7:1d:89:ff:54:
50:8d:95:b2:77:ca:e4:9d:8d:76:82:ac:1a:bd:16:
0e:ff:82:c8:41:29:05:44:b2:7c:fc:04:5c:c0:39:
6c:2e:b6:f6:16:51:af:01:e8:7d:d5:5d:f9:10:6a:
f6:f1:e0:8d:42:88:2c:5a:a0:ea:41:08:20:ac:f3:
e3:0b:b2:2b:0b:dd:5e:f0:c7:06:4e:a6:a8:ad:c0:
f9:4a:ea:6e:4e:62:b8:d0:f4:dc:65:34:3a:4e:e9:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:24:61:B6:B2:B2:E3:C3:0A:C5:16:36:AF:A3:2E:C7:CC:82:6F:56
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:58:9c:68:40:ef:c2:c8:f1:1f:b7:12:f0:8f:5c:95:f3:ed:
ae:eb:1c:b8:bb:32:4f:94:b7:dd:90:9c:af:bb:c4:e8:0b:6d:
4b:d3:d9:19:cc:5d:54:ef:8f:ee:2f:55:79:58:af:17:3d:86:
db:87:9b:c2:a7:61:a3:fe:f8:a3:9b:77:fc:da:a3:6a:ac:df:
6b:12:c7:4a:ac:dc:81:98:23:0e:60:cd:93:0d:e6:db:2f:f3:
f7:a8:18:b9:6e:37:6a:ca:f9:48:5d:bc:15:62:10:0a:62:72:
e6:4e:fc:37:31:18:0c:df:94:a3:81:bc:96:30:de:b4:3c:93:
36:f6:97:4f:88:00:c7:bb:bd:18:82:03:ab:f3:99:9a:cc:56:
5a:a6:e3:31:15:37:e9:df:1f:bd:25:43:0e:76:4d:f2:22:f6:
23:a7:86:94:a1:26:0e:8f:81:d5:d3:36:ed:5e:ff:50:d3:14:
78:8c:56:f5:e5:92:d1:6e:2d:c7:31:26:bb:7d:79:e3:af:5c:
10:68:8b:7b:f9:e9:dd:3d:5d:26:99:59:12:c4:06:fe:83:0a:
01:0d:77:4a:ba:ac:eb:a7:5c:6b:72:0b:b3:95:08:d3:b8:ca:
30:37:25:82:69:97:4b:b0:69:93:d0:37:01:ee:d6:9a:e2:7c:
f6:9b:21:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUc200zrhVsMz0wEnAnGrS/v/ZlhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAzMjAxMzA3MTlaFw0yNTAzMTkxMzEyMTlaMDMxMTAvBgNV
BAMTKDZDMjQ2MUI2QjJCMkUzQzMwQUM1MTYzNkFGQTMyRUM3Q0M4MjZGNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZvprUJhgfJstdQtc6e6SqvTD
bC9yONsChM1iNS06b7pA8TLJIdvtkx+KHKl0KhM4Pb681e/5ND4eN3Xad14Mu0fT
1EFoWGfl5aFoegAubB1x7/ocF9LiMFMdzCYl1s3pBZuslq4U5vsOiGiWUmXQL/qY
9Xuobf2GR0blc0y0gQl9gDIzVEgZEsqThxOs5AHtcBa8m4wK9nMWw97cBVj3HYn/
VFCNlbJ3yuSdjXaCrBq9Fg7/gshBKQVEsnz8BFzAOWwutvYWUa8B6H3VXfkQavbx
4I1CiCxaoOpBCCCs8+MLsisL3V7wxwZOpqitwPlK6m5OYrjQ9NxlNDpO6cwbAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUbCRhtrKy48MKxRY2r6Mux8yCb1YwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjcxNzk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtdYd
MA0GCSqGSIb3DQEBCwUAA4IBAQCbWJxoQO/CyPEftxLwj1yV8+2u6xy4uzJPlLfd
kJyvu8ToC21L09kZzF1U74/uL1V5WK8XPYbbh5vCp2Gj/vijm3f82qNqrN9rEsdK
rNyBmCMOYM2TDebbL/P3qBi5bjdqyvlIXbwVYhAKYnLmTvw3MRgM35SjgbyWMN60
PJM29pdPiADHu70YggOr85mazFZapuMxFTfp3x+9JUMOdk3yIvYjp4aUoSYOj4HV
0zbtXv9Q0xR4jFb15ZLRbi3HMSa7fXnjr1wQaIt7+endPV0mmVkSxAb+gwoBDXdK
uqzrp1xrcguzlQjTuMowNyWCaZdLsGmT0DcB7taa4nz2myGF
-----END CERTIFICATE-----
Generated at Sat May 4 03:15:26 2024 by rpki-client on console-fra.rpki-client.org