Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
File: AS272015.roa (raw, json)
Hash identifier: qgxdJAVv/tTN7Iupb6Df5H2y7iXvkF08rXAhtIkMvp4=
Subject key identifier: AA:95:3F:46:54:91:F3:13:FB:16:D5:2A:9F:F1:57:03:2A:1D:6E:1B
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 0193D3B5B793B3A17A31F949FBE37C5E374254CE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
Signing time: Wed 04 Oct 2023 18:44:14 +0000
ROA not before: Wed 04 Oct 2023 18:39:14 +0000
ROA not after: Wed 02 Oct 2024 18:44:14 +0000
asID: 272015
IP address blocks: 45.88.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:b5:b7:93:b3:a1:7a:31:f9:49:fb:e3:7c:5e:37:42:54:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 4 18:39:14 2023 GMT
Not After : Oct 2 18:44:14 2024 GMT
Subject: CN=AA953F465491F313FB16D52A9FF157032A1D6E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:ea:96:46:ca:f2:39:35:a3:42:98:3f:73:
bf:cd:21:2c:27:ff:e5:1a:af:94:df:e5:b4:3a:50:
4b:b9:9c:1e:0e:cf:15:e0:17:77:8d:38:f0:55:53:
06:14:75:5f:e6:9b:07:35:7f:10:c8:71:01:ba:bc:
fe:eb:f8:e7:04:44:a4:16:74:aa:e6:85:34:25:8a:
12:85:d7:eb:f3:5e:50:c3:8a:20:cb:ba:2f:b1:46:
a5:a0:dc:ae:9a:b9:5e:04:e5:e0:33:1a:0f:74:b8:
b0:e8:38:96:47:62:0c:5e:69:0d:18:8e:f1:a7:8b:
b9:2d:6c:18:fd:3a:8c:24:45:66:34:72:a9:7e:06:
77:89:a0:04:8a:15:db:0f:15:6b:cf:d3:f9:ca:46:
ed:42:8d:dd:ba:1b:e6:7e:8a:e8:f7:95:e0:c4:b2:
41:35:5a:7a:55:51:70:1d:a9:89:1f:2b:30:33:10:
15:f1:46:5b:7f:75:dc:f1:21:d7:20:3d:12:3b:be:
29:ed:3b:e1:84:07:5f:d5:bf:9e:9a:4c:92:77:06:
34:c5:e2:82:07:1e:b5:60:a4:c5:69:aa:e5:b5:8e:
f0:71:f1:e7:d2:b0:d6:3c:12:d0:48:56:64:f9:f2:
bc:ee:84:68:9c:ef:a7:14:7f:6b:48:93:b0:aa:1c:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:95:3F:46:54:91:F3:13:FB:16:D5:2A:9F:F1:57:03:2A:1D:6E:1B
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.99.0/24
Signature Algorithm: sha256WithRSAEncryption
23:db:9f:ba:30:aa:98:aa:80:39:86:25:8e:f0:05:6c:b8:7b:
bc:72:d0:77:9a:12:e1:85:bf:9e:22:04:3b:e3:e3:d8:be:5f:
eb:fe:7d:34:79:e3:1d:c1:c1:f3:89:5e:aa:2d:7a:69:c7:03:
70:c0:e0:a0:c7:c2:29:f3:8d:e4:fd:5d:5d:bc:14:a0:e8:e6:
63:b5:c2:91:6f:61:60:3a:16:60:eb:a6:09:31:89:c3:2f:ba:
b9:ca:b8:f0:73:77:d7:fa:50:c9:25:53:93:7c:54:c8:49:5a:
c0:bc:d2:2d:fd:ab:df:12:b5:56:1e:f4:58:cf:68:58:ae:ba:
f8:8e:dd:21:f0:cc:e5:aa:6e:8d:8f:4f:9a:66:ed:0b:a0:4e:
cf:7b:85:5a:7e:c1:8e:dd:42:95:ce:1c:10:e5:b2:4f:bc:a9:
11:54:97:2a:50:83:a5:45:62:d1:c4:e3:1e:2f:14:b2:b8:71:
4f:60:92:d4:4b:33:f4:74:a4:7d:69:02:d2:81:63:e6:04:c0:
64:3d:41:7a:02:34:e9:97:a8:d3:73:c0:9a:09:2e:e7:6a:4d:
11:c1:fc:49:97:f5:3b:60:25:69:62:d3:22:27:75:ea:3a:ca:
27:c5:4a:f3:01:bd:1f:ff:b8:c8:96:68:2d:12:e9:6f:2c:4d:
f0:d3:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:50:03 2024 by rpki-client on console-fra.rpki-client.org