Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29066.roa
File: AS29066.roa (raw, json)
Hash identifier: oWWQGWw+bPHBXvWGy68t2PqGpbz9Ev/kSyJlSZtlpT4=
Subject key identifier: 61:62:60:E8:FE:8C:34:81:13:82:F1:D9:1A:A3:23:39:1F:3B:5E:06
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 19C18F3B378E3B9B75A20C49497AA60230856E65
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29066.roa
Signing time: Sun 01 Sep 2024 00:00:17 +0000
ROA not before: Sat 31 Aug 2024 23:55:17 +0000
ROA not after: Sun 31 Aug 2025 00:00:17 +0000
asID: 29066
IP address blocks: 181.41.205.0/24 maxlen: 24
193.7.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c1:8f:3b:37:8e:3b:9b:75:a2:0c:49:49:7a:a6:02:30:85:6e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 31 23:55:17 2024 GMT
Not After : Aug 31 00:00:17 2025 GMT
Subject: CN=616260E8FE8C34811382F1D91AA323391F3B5E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:50:f0:04:11:42:3f:8f:74:97:eb:c3:3a:
dc:fe:e7:82:62:06:21:61:d0:e4:31:54:1e:19:9c:
76:69:d6:f4:6d:6f:0f:64:b3:01:91:d4:4d:a1:82:
e8:fa:e3:fa:ec:de:8f:9d:bf:cc:2f:f5:89:63:ce:
db:96:f8:cf:a4:2c:41:6a:b9:d9:09:bd:9b:47:d6:
5d:4f:ae:bb:8d:f5:6a:8c:17:dc:3e:61:00:9a:38:
25:3d:2c:d6:1e:3d:2d:3e:1e:c3:9d:92:7e:f8:1a:
b6:e5:5f:aa:e5:e6:52:87:2e:65:f0:e0:21:9d:a9:
43:75:5d:43:a4:73:92:e9:88:a0:b8:17:b6:b6:ae:
04:03:ea:b9:95:49:ef:72:90:3e:65:32:b9:cf:16:
b5:7a:98:bb:1c:9e:90:ca:0e:4f:4b:d7:4a:35:8e:
de:d3:95:32:f9:1d:d0:43:7a:38:8f:60:40:cb:34:
60:e7:c6:87:55:a0:24:ef:50:b4:b6:73:32:f3:7d:
20:7d:8b:94:53:20:f1:cb:d0:43:f0:0d:0e:50:a3:
4c:79:e1:e8:85:a6:2b:ae:0c:5e:c6:c9:aa:b0:29:
c9:a1:dc:a0:7f:8a:21:80:f1:72:59:40:8a:e4:53:
62:0f:8c:8c:a7:b7:4b:8d:68:94:97:69:1c:f1:19:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:62:60:E8:FE:8C:34:81:13:82:F1:D9:1A:A3:23:39:1F:3B:5E:06
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS29066.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.205.0/24
193.7.203.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e5:11:c4:78:b5:16:47:04:81:1f:37:15:87:b8:3f:d4:86:
0f:c5:f1:4b:95:54:7c:4e:0f:e5:36:4a:74:2c:2a:81:1b:67:
df:95:7e:02:c2:35:bc:cb:68:36:f2:07:e6:97:db:1d:e8:dd:
51:6d:6c:44:6e:fd:e7:e9:2a:d2:77:cd:7f:1d:d5:6b:7d:05:
cd:4e:e3:2d:dd:9d:81:73:56:35:4b:f6:08:c8:47:0e:d0:a1:
3a:4a:67:dc:fe:72:a2:31:d8:af:65:4f:c4:b5:a2:6a:0e:2a:
eb:5a:d2:55:f2:0c:4c:de:fd:5c:b5:cd:ac:01:0e:f4:21:16:
90:ff:91:cd:e9:45:03:33:74:43:24:59:95:8b:2c:3a:93:e8:
c6:f3:1e:55:37:98:7b:89:8c:6d:55:5b:09:ae:9e:f7:49:2d:
c3:65:d2:75:5a:15:56:ec:7c:70:9b:96:15:15:28:07:ec:0c:
51:58:5b:03:ad:53:db:f3:0c:70:13:87:a7:bb:dc:79:8d:6b:
62:1b:c6:c0:33:53:90:d5:8e:8d:ae:51:57:fd:b9:aa:a1:88:
d0:c1:e0:75:ce:c7:b7:77:21:23:f2:f9:4b:b4:00:93:be:1a:
51:db:90:fc:ea:20:2c:1d:3d:bd:76:82:da:21:7b:c0:7a:5c:
35:3f:db:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:47 2024 by rpki-client on console-fra.rpki-client.org