Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
File: AS272015.roa (raw, json)
Hash identifier: sj5q17/DjKs788MH8HBTANbLfJciIfEfg8jE/XyCMck=
Subject key identifier: B1:96:AA:58:84:D2:CA:DB:E9:25:09:8E:77:ED:82:D6:F1:AE:A3:88
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2E76D3F0830295311A8B34701A5FDC370C3FE1C5
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
Signing time: Wed 04 Sep 2024 19:05:20 +0000
ROA not before: Wed 04 Sep 2024 19:00:20 +0000
ROA not after: Wed 03 Sep 2025 19:05:20 +0000
asID: 272015
IP address blocks: 45.88.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:76:d3:f0:83:02:95:31:1a:8b:34:70:1a:5f:dc:37:0c:3f:e1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Sep 4 19:00:20 2024 GMT
Not After : Sep 3 19:05:20 2025 GMT
Subject: CN=B196AA5884D2CADBE925098E77ED82D6F1AEA388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:f8:de:ab:cb:15:c2:fd:e8:bd:a2:70:1b:
12:b2:1f:96:6b:2e:7d:f8:dd:12:a3:36:f7:6d:d5:
b6:57:3d:37:89:a2:03:e2:0b:5f:78:5f:76:37:84:
60:46:b6:de:07:5d:12:58:d0:7d:8c:e4:7d:a6:d3:
7f:c1:56:89:fa:1b:41:7d:f8:79:41:02:62:bd:c9:
ee:da:e1:d1:eb:20:93:91:d7:a5:1e:26:a8:47:41:
a6:ed:d1:43:46:f3:76:30:38:1e:7d:f7:03:d8:14:
ca:25:7e:7a:8e:a2:01:f5:c9:8f:3b:5a:0f:22:ee:
6c:8a:1e:06:35:f3:03:62:4c:9b:63:fb:60:7a:d9:
18:c8:fc:26:13:6c:7e:c1:c3:5f:ae:28:37:a5:a3:
49:17:98:49:db:1b:f6:3b:ea:85:f1:74:ac:20:6f:
84:4b:e3:df:5f:31:b6:89:8e:53:22:f4:b3:b8:45:
a1:2e:8a:87:b7:db:3a:f0:a7:75:eb:6a:db:5e:4e:
84:6d:65:bd:e2:43:5f:8a:11:a8:d6:de:6a:bf:65:
ba:56:d6:6c:3d:ab:18:8b:29:46:22:87:ab:6a:d0:
95:42:39:a0:73:a2:01:09:0a:2f:4c:fe:87:91:13:
12:18:5d:6c:16:e8:cc:54:7d:ed:6a:4a:e6:60:a7:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:96:AA:58:84:D2:CA:DB:E9:25:09:8E:77:ED:82:D6:F1:AE:A3:88
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b5:5a:2a:7c:75:c6:80:26:54:64:22:54:bc:1f:94:80:9b:
21:3b:07:83:d3:54:c4:cf:3d:15:66:59:d8:de:92:24:69:f1:
06:74:61:e8:bf:c9:d7:78:0a:43:79:cf:21:c8:17:ab:7f:30:
6c:63:a3:7d:ca:bb:f0:1d:06:3e:5c:0a:c8:73:96:39:6f:41:
7b:7f:bc:55:2b:04:d0:8d:c4:02:ae:51:30:e3:8b:2e:12:b8:
0c:69:61:44:03:27:be:e9:f2:57:13:06:89:7b:78:81:72:1b:
dd:cb:fe:76:3a:f1:a6:52:ab:0f:25:6e:d5:d3:c6:b5:03:6a:
7d:00:03:58:e5:8e:7c:a9:ef:20:ae:85:5b:f8:34:f2:9d:a5:
55:3a:69:16:e4:43:e9:3d:58:6e:62:b6:e7:eb:3a:ee:f0:27:
9e:71:b3:e6:1e:cc:8a:6f:b7:9b:3a:55:4e:0a:77:c5:87:0f:
81:51:84:52:ae:d2:0a:83:f6:7e:e4:8f:4b:8a:65:96:5a:aa:
c5:2c:66:2a:a4:4f:b7:0a:40:91:ed:83:62:27:1d:9c:f7:0b:
c9:24:ea:2b:70:5f:ef:e5:e1:5e:f8:64:cd:95:bd:2f:86:d3:
7b:e0:26:9f:7c:89:18:27:c3:ac:7c:ef:69:a7:84:e6:92:29:
ba:00:5d:39
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIULnbT8IMClTEaizRwGl/cNww/4cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA5MDQxOTAwMjBaFw0yNTA5MDMxOTA1MjBaMDMxMTAvBgNV
BAMTKEIxOTZBQTU4ODREMkNBREJFOTI1MDk4RTc3RUQ4MkQ2RjFBRUEzODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPlPjeq8sVwv3ovaJwGxKyH5Zr
Ln343RKjNvdt1bZXPTeJogPiC194X3Y3hGBGtt4HXRJY0H2M5H2m03/BVon6G0F9
+HlBAmK9ye7a4dHrIJOR16UeJqhHQabt0UNG83YwOB599wPYFMolfnqOogH1yY87
Wg8i7myKHgY18wNiTJtj+2B62RjI/CYTbH7Bw1+uKDelo0kXmEnbG/Y76oXxdKwg
b4RL499fMbaJjlMi9LO4RaEuioe32zrwp3XratteToRtZb3iQ1+KEajW3mq/ZbpW
1mw9qxiLKUYih6tq0JVCOaBzogEJCi9M/oeRExIYXWwW6MxUfe1qSuZgp/eBAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUsZaqWITSytvpJQmOd+2C1vGuo4gwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjcyMDE1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVhj
MA0GCSqGSIb3DQEBCwUAA4IBAQCjtVoqfHXGgCZUZCJUvB+UgJshOweD01TEzz0V
ZlnY3pIkafEGdGHov8nXeApDec8hyBerfzBsY6N9yrvwHQY+XArIc5Y5b0F7f7xV
KwTQjcQCrlEw44suErgMaWFEAye+6fJXEwaJe3iBchvdy/52OvGmUqsPJW7V08a1
A2p9AANY5Y58qe8groVb+DTynaVVOmkW5EPpPVhuYrbn6zru8CeecbPmHsyKb7eb
OlVOCnfFhw+BUYRSrtIKg/Z+5I9LimWWWqrFLGYqpE+3CkCR7YNiJx2c9wvJJOor
cF/v5eFe+GTNlb0vhtN74CaffIkYJ8OsfO9pp4Tmkim6AF05
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:57 2025 by rpki-client