Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48678.roa
File: AS48678.roa (raw, json)
Hash identifier: 01/qXSwn02UT0khBcKxmBubnbHYgRGkMiIz2Z5/mJ4A=
Subject key identifier: AB:91:ED:E3:95:2F:F4:54:55:ED:CE:8C:F9:C6:F6:B1:A9:2A:CA:F9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5B93437DFAF3603EB593CA394C07A4874EA15960
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48678.roa
Signing time: Sat 15 Jul 2023 00:00:28 +0000
ROA not before: Fri 14 Jul 2023 23:55:28 +0000
ROA not after: Sat 13 Jul 2024 00:00:28 +0000
asID: 48678
IP address blocks: 181.214.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:93:43:7d:fa:f3:60:3e:b5:93:ca:39:4c:07:a4:87:4e:a1:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Jul 14 23:55:28 2023 GMT
Not After : Jul 13 00:00:28 2024 GMT
Subject: CN=AB91EDE3952FF45455EDCE8CF9C6F6B1A92ACAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:b9:8a:98:57:a0:93:d4:bc:67:b6:8c:d8:
ba:94:54:e9:8e:72:63:7c:96:87:9a:e6:78:49:d3:
29:d5:9c:06:f7:58:59:ab:91:2f:bf:82:05:df:39:
4c:a6:ed:06:d1:3f:b3:76:6e:bb:c1:14:31:88:6a:
71:7b:b8:5d:e6:7c:85:da:4c:c9:af:6b:10:e5:16:
5d:49:e5:63:37:1b:d0:fb:df:39:03:95:57:12:d1:
36:db:0c:33:7c:34:36:d4:d7:77:2a:32:d6:dc:0a:
36:cf:82:bd:08:bd:f6:b1:4d:16:bb:82:c9:cc:7b:
02:4b:32:3d:37:90:66:c2:ff:41:1a:15:03:ff:74:
42:a7:f2:46:87:a3:0f:af:15:d5:7c:f3:64:23:89:
7f:32:ed:3b:5b:80:05:33:2f:cc:8a:96:8d:14:7c:
1c:8f:9c:2c:f6:2f:31:4d:2e:60:d9:04:fc:e3:93:
f7:19:34:5c:45:8c:79:8b:cf:60:30:2e:7e:77:4a:
ff:11:f2:1b:b1:a4:e3:81:86:19:24:ea:ad:92:22:
51:b9:d8:c0:d8:ed:9e:99:05:8a:b1:03:a5:22:bb:
53:bf:54:90:fc:5b:b2:21:03:50:7d:ac:5d:f2:1b:
6d:db:db:57:a1:25:ee:fb:f9:d6:23:6a:94:7a:cc:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:ED:E3:95:2F:F4:54:55:ED:CE:8C:F9:C6:F6:B1:A9:2A:CA:F9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS48678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.154.0/24
Signature Algorithm: sha256WithRSAEncryption
28:38:be:5b:1f:75:86:b5:b9:4d:8c:08:e4:7e:b7:69:f7:65:
f0:86:ef:eb:c9:80:b5:af:3c:f2:d4:3c:b4:4e:f8:cd:55:1b:
cf:59:6b:f4:b0:e3:17:42:b6:c6:80:f9:84:2b:48:12:5b:cd:
41:6f:5b:82:1b:bd:ca:8e:d1:1b:0f:31:c8:70:74:af:17:30:
9e:86:cb:92:c5:ec:b5:a6:1b:25:c2:77:6a:c5:30:5f:91:69:
b5:66:fc:91:c9:41:93:62:7b:99:d1:5b:1a:de:d1:41:b2:75:
e2:e4:73:2c:e3:b9:70:64:51:2f:d6:65:90:16:52:13:40:2e:
21:85:ee:4b:c0:00:da:01:ad:3f:ed:af:fd:9f:b2:42:eb:54:
19:1b:6d:98:e3:6b:c7:e2:a5:91:fe:4b:e3:85:eb:e2:ed:0b:
22:91:6e:41:14:18:c0:7c:f9:f6:e6:e8:8b:0e:f3:92:b7:07:
4d:2f:90:4d:44:2f:d7:df:21:1a:b6:56:45:49:1b:c6:49:cb:
39:a9:cf:d3:df:e7:c7:46:72:27:b7:ae:82:d7:4d:b3:1c:f0:
4e:8b:87:ab:43:5c:f5:5a:54:2e:4d:cc:7c:30:95:75:a8:cf:
0f:e2:e5:76:e9:72:f0:5d:db:94:18:05:da:7d:6c:4d:b0:e8:
18:1c:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 10:50:04 2024 by rpki-client on console-fra.rpki-client.org