Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272882.roa
File: AS272882.roa (raw, json)
Hash identifier: Tkda5aZ7UZv3qkpJziLrUViGU3vUfutq5HxXyj05yrQ=
Subject key identifier: 48:8A:55:FD:A1:9B:CD:49:A1:8F:5E:65:B3:0B:47:EE:6B:FE:C1:6F
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 3140F8DECDEFBCF84BD6996467809C7F823A578C
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272882.roa
Signing time: Fri 09 Feb 2024 09:17:40 +0000
ROA not before: Fri 09 Feb 2024 09:12:40 +0000
ROA not after: Fri 07 Feb 2025 09:17:40 +0000
asID: 272882
IP address blocks: 191.96.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:40:f8:de:cd:ef:bc:f8:4b:d6:99:64:67:80:9c:7f:82:3a:57:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 9 09:12:40 2024 GMT
Not After : Feb 7 09:17:40 2025 GMT
Subject: CN=488A55FDA19BCD49A18F5E65B30B47EE6BFEC16F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:77:b8:cb:f0:c9:c7:76:0a:54:05:59:65:3a:
44:10:37:d2:be:a8:de:18:7a:53:07:14:3e:94:a4:
17:ed:9f:95:19:84:8f:29:19:e1:69:87:d0:92:68:
63:d6:00:77:2e:8b:cb:58:f5:72:f6:60:e0:64:03:
2c:5d:ac:8f:45:48:52:a2:1b:71:2b:1f:36:ea:5d:
45:70:23:ad:3c:59:3a:61:8b:18:33:e9:40:43:c9:
ea:13:41:38:30:53:58:76:7c:a5:6e:9b:3e:47:6c:
d6:04:e0:ad:9c:21:bb:05:a7:59:af:02:12:9b:24:
5b:95:ff:36:1e:09:de:a1:80:0c:9d:5a:e3:c9:a7:
3a:6f:b0:85:76:ca:c2:ff:88:ee:47:4c:5c:0a:ae:
6e:c7:3c:24:e0:aa:a0:da:52:84:5c:3f:68:63:95:
ad:0b:3c:70:98:46:39:34:64:e3:4a:0a:05:8f:f4:
9b:cb:1a:0d:cf:7c:3b:3c:a1:03:a4:91:99:9e:66:
55:cd:b6:64:e3:1f:e1:75:4d:fa:6f:32:53:17:35:
e3:a5:ae:8c:35:48:ab:20:2c:c7:7a:e0:29:a3:dc:
1e:6c:de:1a:f3:83:ea:55:e6:2d:93:88:f2:87:71:
ef:89:19:a4:26:9a:c9:25:3e:de:4b:17:04:ea:db:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:55:FD:A1:9B:CD:49:A1:8F:5E:65:B3:0B:47:EE:6B:FE:C1:6F
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS272882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.164.0/24
Signature Algorithm: sha256WithRSAEncryption
41:09:6a:3f:26:10:8a:a6:68:4f:98:da:e1:5a:e1:33:ae:cc:
c7:8c:5e:19:a2:19:78:83:ff:95:32:e7:49:d0:d7:26:5e:fa:
7e:f0:0b:78:63:f8:0e:b2:69:de:c6:61:4d:24:ef:64:4d:45:
dd:49:b8:29:53:59:8f:00:e6:81:19:2d:08:1e:69:1a:08:6a:
de:eb:ec:9e:5d:b0:02:a8:c9:61:1d:f5:fa:e6:d5:b7:e5:1f:
76:7d:58:ed:9f:8e:aa:22:2b:fd:72:f3:09:b8:30:a9:e9:39:
3f:cf:93:ef:71:8d:5c:03:ae:88:de:96:ea:ab:f1:c1:61:0b:
02:a9:aa:2f:4b:38:03:a9:89:a7:c9:4f:fe:38:96:74:3a:a7:
51:25:6b:5a:c0:d8:61:8d:e2:70:31:a5:b9:86:13:c7:54:88:
51:a3:19:05:65:0a:a3:64:10:21:04:8a:ea:90:94:33:6e:5a:
bc:87:7f:9c:75:ea:fe:79:93:86:f2:0b:4c:aa:88:05:60:4c:
89:4a:09:5e:c3:5d:ca:00:34:74:16:68:13:d8:a7:5d:9a:d7:
98:10:a5:a7:63:37:15:b3:5b:5d:7d:1f:9a:e8:dd:3b:6f:6e:
84:19:8b:26:c7:61:04:b1:b0:c6:68:65:52:ed:dd:5e:e6:f9:
b5:e6:04:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 18:20:17 2024 by rpki-client on console-ams.rpki-client.org