Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: ZRMAhqsyJyN9dxOD6M2QrZxYCef0IghU3lnSU1LXAu8=
Subject key identifier: 69:77:8F:2A:96:87:A2:58:29:65:5F:20:EB:20:6A:32:46:34:61:B8
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 58EA3DF42FF8EB8DCA688C2A666E193500C0B8D3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS2914.roa
Signing time: Thu 18 Jul 2024 13:51:18 +0000
ROA not before: Thu 18 Jul 2024 13:46:18 +0000
ROA not after: Thu 17 Jul 2025 13:51:18 +0000
asID: 2914
IP address blocks: 181.215.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ea:3d:f4:2f:f8:eb:8d:ca:68:8c:2a:66:6e:19:35:00:c0:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 18 13:46:18 2024 GMT
Not After : Jul 17 13:51:18 2025 GMT
Subject: CN=69778F2A9687A25829655F20EB206A32463461B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:00:87:f2:17:11:af:87:f4:08:7d:c4:ef:
97:90:10:93:22:9e:c1:79:a5:7a:ae:4b:0e:d8:9e:
f3:8a:4d:6f:61:cf:4e:88:ba:b1:8d:1f:a7:5a:c7:
ea:e5:59:d0:c8:ef:3a:b8:0f:04:87:e9:c7:16:64:
a7:1e:9d:d8:5a:3b:60:01:29:65:a5:e8:a0:22:55:
dc:fb:42:63:25:04:5c:9c:ae:4b:79:c4:5e:8a:21:
ad:6d:e9:01:33:7f:07:14:50:cd:a8:26:59:e0:f8:
bc:ac:a0:4f:71:77:ed:62:4a:18:d1:08:90:d1:4b:
24:75:ba:f7:5b:56:9f:18:70:4e:52:ac:50:19:fc:
77:a8:16:26:74:fc:50:6c:0e:77:0f:7e:4a:aa:7d:
4b:5c:56:45:bf:47:14:cf:f7:48:f1:22:11:9c:8b:
ce:31:a9:5e:4f:ae:a5:46:13:5a:98:6f:cd:ad:79:
3b:05:ec:66:69:cd:65:7a:00:a1:e6:00:85:5a:a3:
c3:87:06:c2:17:80:f2:a6:a1:50:1f:83:93:ce:d6:
89:17:df:a7:3e:92:62:ea:ee:10:a4:81:f0:92:bb:
d2:0a:3a:36:e9:36:5e:e8:b1:1b:69:6f:d2:b8:4a:
9c:38:3a:dd:25:a7:a3:1d:a8:8d:9e:5a:d7:5b:02:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:8F:2A:96:87:A2:58:29:65:5F:20:EB:20:6A:32:46:34:61:B8
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:89:64:65:aa:d6:73:95:4a:29:5c:50:74:da:94:7a:f2:1b:
2b:05:b0:1d:89:7f:0e:1c:b5:c2:03:16:bf:4d:cb:28:c9:5b:
6e:48:e2:9e:42:a3:0b:1a:6c:ca:08:18:48:47:69:07:e9:54:
3f:41:8f:2d:07:51:e3:7d:e4:39:38:15:20:2e:5b:6b:62:69:
62:b9:06:37:ba:e5:33:ca:6c:e4:25:ea:eb:b0:96:ce:dd:00:
53:2e:96:2b:b6:e5:f4:71:44:21:57:53:41:74:4e:9e:91:6d:
a2:ca:68:6d:8c:68:81:43:bc:e7:81:a6:6a:9a:8d:c6:c9:61:
b1:88:23:ab:ef:17:51:5b:3e:3b:75:01:81:b8:83:cf:31:f9:
86:64:3d:a3:61:66:83:5f:d2:f3:38:f3:48:ed:23:b4:7e:0c:
1f:93:cb:47:53:55:7d:a8:1f:2d:0f:a9:67:5e:1e:a0:ac:a4:
e2:94:63:23:d3:6c:20:1b:fe:de:04:f4:e7:cf:29:a6:55:e7:
ee:3b:dc:a3:e7:e0:84:b7:5a:8d:c3:47:b8:d2:bc:7f:b5:9f:
b3:2e:d8:70:16:8a:4c:49:4f:c6:2b:2c:93:90:d5:a9:77:3a:
b6:2b:ec:a9:62:29:54:00:7f:23:18:56:6b:d7:f2:89:dc:89:
56:8a:a7:e2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUWOo99C/4643KaIwqZm4ZNQDAuNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA3MTgxMzQ2MThaFw0yNTA3MTcxMzUxMThaMDMxMTAvBgNV
BAMTKDY5Nzc4RjJBOTY4N0EyNTgyOTY1NUYyMEVCMjA2QTMyNDYzNDYxQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTtgCH8hcRr4f0CH3E75eQEJMi
nsF5pXquSw7YnvOKTW9hz06IurGNH6dax+rlWdDI7zq4DwSH6ccWZKcendhaO2AB
KWWl6KAiVdz7QmMlBFycrkt5xF6KIa1t6QEzfwcUUM2oJlng+LysoE9xd+1iShjR
CJDRSyR1uvdbVp8YcE5SrFAZ/HeoFiZ0/FBsDncPfkqqfUtcVkW/RxTP90jxIhGc
i84xqV5PrqVGE1qYb82teTsF7GZpzWV6AKHmAIVao8OHBsIXgPKmoVAfg5PO1okX
36c+kmLq7hCkgfCSu9IKOjbpNl7osRtpb9K4Spw4Ot0lp6MdqI2eWtdbAgY9AgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUaXePKpaHolgpZV8g6yBqMkY0YbgwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMjkxNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALXXXjAN
BgkqhkiG9w0BAQsFAAOCAQEAHYlkZarWc5VKKVxQdNqUevIbKwWwHYl/Dhy1wgMW
v03LKMlbbkjinkKjCxpsyggYSEdpB+lUP0GPLQdR433kOTgVIC5ba2JpYrkGN7rl
M8ps5CXq67CWzt0AUy6WK7bl9HFEIVdTQXROnpFtospobYxogUO854GmapqNxslh
sYgjq+8XUVs+O3UBgbiDzzH5hmQ9o2Fmg1/S8zjzSO0jtH4MH5PLR1NVfagfLQ+p
Z14eoKyk4pRjI9NsIBv+3gT0588pplXn7jvco+fghLdajcNHuNK8f7Wfsy7YcBaK
TElPxissk5DVqXc6tivsqWIpVAB/IxhWa9fyidyJVoqn4g==
-----END CERTIFICATE-----
Generated at Sat Sep 7 15:45:21 2024 by rpki-client on console-fra.rpki-client.org