Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400229.roa
File: AS400229.roa (raw, json)
Hash identifier: +FLiRDZgcHGP0IhXa/i6sdOmt8+7DRu3wZk0rj6TJuY=
Subject key identifier: 92:73:5B:DF:CA:A3:BF:F5:9D:A3:82:69:49:E3:37:97:F7:B4:00:12
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 499C95367567EDF483D77EBD7EFD42ACD2D47E9E
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400229.roa
Signing time: Wed 31 Jan 2024 08:05:09 +0000
ROA not before: Wed 31 Jan 2024 08:00:09 +0000
ROA not after: Wed 29 Jan 2025 08:05:09 +0000
asID: 400229
IP address blocks: 181.215.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:9c:95:36:75:67:ed:f4:83:d7:7e:bd:7e:fd:42:ac:d2:d4:7e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jan 31 08:00:09 2024 GMT
Not After : Jan 29 08:05:09 2025 GMT
Subject: CN=92735BDFCAA3BFF59DA3826949E33797F7B40012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:07:c1:8c:f4:81:ee:5c:7c:e2:be:50:de:
4b:1d:33:04:52:cb:df:ff:81:b1:4f:31:d4:01:3c:
77:47:92:c8:ef:cc:40:1d:be:e6:42:b2:fe:19:5c:
bc:c7:4f:77:f9:b2:e8:1a:55:74:0c:17:59:1c:00:
01:c0:03:29:6a:19:41:7f:8f:c6:9d:fb:2f:55:46:
d4:75:34:be:8f:09:07:0c:f1:33:40:38:0a:31:a3:
a1:dc:a9:57:3d:2d:6a:01:54:44:c9:91:38:24:98:
b0:e6:72:78:7c:66:df:b7:b4:cd:4f:40:bc:db:b5:
5e:25:e0:06:f7:37:95:e1:18:3b:a1:c9:bb:c6:18:
3b:fa:16:ca:87:a8:be:ff:30:90:0d:5b:84:14:35:
15:e3:7a:88:40:a8:39:2f:20:f8:2c:e7:2e:97:07:
6d:0a:c8:19:69:f4:15:b7:c5:2a:d4:0b:fa:a3:14:
68:ea:d1:c4:44:81:00:df:67:80:b6:b0:9c:a4:35:
ac:fd:c9:59:c4:ee:c3:55:b3:df:3b:b7:e2:12:70:
32:16:00:09:ac:b4:cc:c4:11:57:13:e5:e8:48:9f:
40:01:bc:79:66:5b:4d:e9:ba:30:b8:04:09:59:32:
1f:82:d7:89:66:5b:9b:c4:64:30:c9:94:72:69:10:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:5B:DF:CA:A3:BF:F5:9D:A3:82:69:49:E3:37:97:F7:B4:00:12
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS400229.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:79:24:1b:a3:8c:62:20:56:34:be:28:61:e3:97:86:c3:75:
38:20:c4:5e:f6:c8:77:3a:b4:6c:60:3c:c0:cc:a0:9c:8f:ce:
9d:79:f7:39:a5:d5:f2:d1:85:08:01:21:f4:77:b4:7c:bd:05:
7d:08:6a:3f:79:0b:de:3f:f7:05:a6:70:5a:cc:9e:67:7a:75:
a6:96:28:92:ca:cb:a8:f3:8d:42:9d:7b:4c:c3:ce:83:a6:d0:
70:12:64:ce:a8:2d:1e:e2:bd:e7:fa:df:f4:ae:11:cf:c6:2c:
1a:f1:90:59:3f:77:82:a9:87:4c:e1:52:ca:e7:31:bf:40:6b:
fe:39:f6:be:9e:42:67:e7:a0:5b:b8:fa:52:78:19:58:01:f0:
3b:7f:70:53:e7:1f:a4:8c:98:4c:ea:6e:6f:a4:92:d3:dd:e9:
68:87:c2:5d:35:07:52:9e:2c:9f:83:6f:bb:cf:f7:9a:12:fc:
99:4c:7b:30:1a:0a:61:86:49:fc:8e:b7:49:e0:07:82:28:55:
fc:2d:33:26:d7:ab:1c:fc:4c:3d:8e:41:77:c1:6a:23:53:c4:
31:5d:7f:fe:f5:02:a1:70:63:9c:3b:7c:34:e9:76:6c:41:db:
b0:0c:8a:b1:d1:14:88:dd:87:01:11:d6:de:db:19:78:b9:0f:
38:48:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:27:12 2024 by rpki-client on console-fra.rpki-client.org