Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
File: AS48314.roa (raw, json)
Hash identifier: O1tmlhLjnPPjRG4Dw4lBQLn49QwPGopdc4xIiVgnRIg=
Subject key identifier: 9E:54:56:51:03:8F:F4:21:5B:A3:7F:D2:B3:DE:5A:47:3C:75:96:EC
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 6915C24E8E462ECD878C43C832A6B47EC0FC20D7
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
Signing time: Sun 10 Mar 2024 15:11:22 +0000
ROA not before: Sun 10 Mar 2024 15:06:22 +0000
ROA not after: Sun 09 Mar 2025 15:11:22 +0000
asID: 48314
IP address blocks: 194.110.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:15:c2:4e:8e:46:2e:cd:87:8c:43:c8:32:a6:b4:7e:c0:fc:20:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Mar 10 15:06:22 2024 GMT
Not After : Mar 9 15:11:22 2025 GMT
Subject: CN=9E545651038FF4215BA37FD2B3DE5A473C7596EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:22:63:bd:5e:d5:6f:11:88:85:37:39:93:
53:85:d0:38:90:23:fe:65:0c:d4:9e:72:e7:8c:38:
27:50:de:3e:14:b7:75:9e:f4:22:0d:d0:88:92:49:
df:be:53:88:de:00:61:f1:1d:79:be:ab:57:98:39:
f1:93:53:54:88:ac:cf:0b:24:b0:35:af:1c:c8:c1:
54:46:64:47:c3:26:ee:dd:92:a7:6e:59:ef:0b:91:
c9:7f:2a:ee:07:43:ac:a0:08:0f:49:23:2a:01:0b:
9c:e1:fa:8a:ba:07:25:68:5a:57:49:01:67:ac:78:
94:a4:d5:f8:91:98:26:c9:f9:a6:37:55:0e:79:6b:
22:64:de:bc:c3:4c:25:95:ee:05:ae:7d:90:58:ec:
03:f5:8e:c3:05:84:0c:1e:ee:4b:08:4e:92:5b:bd:
6a:b4:d7:86:00:e1:93:10:2f:e2:69:cc:3b:36:9a:
81:9a:00:36:d3:55:48:01:a9:b7:f0:14:03:8d:3d:
7e:9d:ad:0b:52:a5:d9:5c:53:0a:c8:e4:c2:c2:84:
9e:01:e3:bb:fd:eb:e0:2c:ab:44:71:22:86:29:e5:
6c:61:08:ec:68:7b:03:e8:f3:5a:34:eb:13:f5:69:
ce:2b:fd:b1:82:e3:f7:80:07:b9:f2:c0:71:2e:55:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:54:56:51:03:8F:F4:21:5B:A3:7F:D2:B3:DE:5A:47:3C:75:96:EC
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.12.0/24
Signature Algorithm: sha256WithRSAEncryption
47:87:9f:f9:5b:14:ac:54:35:72:c1:f0:99:46:31:54:00:69:
a0:28:6d:fe:49:76:9b:ad:db:70:36:d4:9c:07:6d:fc:5e:48:
53:1d:3e:15:7c:ea:86:f8:08:43:a5:b6:9e:21:a1:e8:2c:8e:
24:88:f8:c1:3c:17:df:36:d3:16:7b:fa:5b:40:a6:ed:65:a9:
cd:4c:29:25:d4:65:a7:e3:22:e4:48:d6:fa:bc:b9:12:b6:24:
46:50:f3:1e:88:c9:d3:91:ad:78:2f:89:9d:b4:23:94:d4:40:
ce:e6:f1:59:d0:0b:27:7d:44:0e:af:03:d0:8f:c7:50:71:a0:
87:47:83:60:6e:8a:36:46:76:70:5b:f9:3d:f3:4c:85:6b:05:
76:9a:c4:9c:0a:9b:22:12:cf:50:a7:a0:cb:34:32:00:0e:91:
45:28:04:fe:75:5d:09:ab:31:d9:2c:b2:69:ce:1c:37:d9:9a:
6d:ac:dd:bb:8b:0c:53:0c:3e:52:4a:ed:9e:56:f9:fe:e4:78:
ae:72:14:62:88:3a:7b:c5:c6:b6:70:3e:2a:2a:45:61:b2:e5:
d7:88:99:bf:5e:03:43:78:aa:79:d2:0e:b3:86:40:67:84:52:
48:5f:96:32:55:d0:29:79:1d:db:e2:c4:17:99:ee:63:9a:04:
15:8a:7e:b9
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUaRXCTo5GLs2HjEPIMqa0fsD8INcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDAzMTAxNTA2MjJaFw0yNTAzMDkxNTExMjJaMDMxMTAvBgNV
BAMTKDlFNTQ1NjUxMDM4RkY0MjE1QkEzN0ZEMkIzREU1QTQ3M0M3NTk2RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveSJjvV7VbxGIhTc5k1OF0DiQ
I/5lDNSecueMOCdQ3j4Ut3We9CIN0IiSSd++U4jeAGHxHXm+q1eYOfGTU1SIrM8L
JLA1rxzIwVRGZEfDJu7dkqduWe8Lkcl/Ku4HQ6ygCA9JIyoBC5zh+oq6ByVoWldJ
AWeseJSk1fiRmCbJ+aY3VQ55ayJk3rzDTCWV7gWufZBY7AP1jsMFhAwe7ksITpJb
vWq014YA4ZMQL+JpzDs2moGaADbTVUgBqbfwFAONPX6drQtSpdlcUwrI5MLChJ4B
47v96+Asq0RxIoYp5WxhCOxoewPo81o06xP1ac4r/bGC4/eAB7nywHEuVUnpAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUnlRWUQOP9CFbo3/Ss95aRzx1luwwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNDgzMTQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCbgww
DQYJKoZIhvcNAQELBQADggEBAEeHn/lbFKxUNXLB8JlGMVQAaaAobf5Jdput23A2
1JwHbfxeSFMdPhV86ob4CEOltp4hoegsjiSI+ME8F9820xZ7+ltApu1lqc1MKSXU
ZafjIuRI1vq8uRK2JEZQ8x6IydORrXgviZ20I5TUQM7m8VnQCyd9RA6vA9CPx1Bx
oIdHg2BuijZGdnBb+T3zTIVrBXaaxJwKmyISz1CnoMs0MgAOkUUoBP51XQmrMdks
smnOHDfZmm2s3buLDFMMPlJK7Z5W+f7keK5yFGKIOnvFxrZwPioqRWGy5deImb9e
A0N4qnnSDrOGQGeEUkhfljJV0Cl5HdvixBeZ7mOaBBWKfrk=
-----END CERTIFICATE-----
Generated at Fri May 10 02:42:23 2024 by rpki-client on console-fra.rpki-client.org