Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52053.roa
File: AS52053.roa (raw, json)
Hash identifier: bfID4Adx/blfu29A92e69qKh+Y1CO4tCEnbViFvPR7c=
Subject key identifier: 60:9C:C1:4F:5F:40:87:BA:A5:38:3E:3B:17:D7:39:07:91:4A:79:F3
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 721CC6C2491C955AAF6EA1D77354FB15F3F39528
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52053.roa
Signing time: Wed 16 Oct 2024 04:55:06 +0000
ROA not before: Wed 16 Oct 2024 04:50:06 +0000
ROA not after: Wed 15 Oct 2025 04:55:06 +0000
asID: 52053
IP address blocks: 179.61.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1c:c6:c2:49:1c:95:5a:af:6e:a1:d7:73:54:fb:15:f3:f3:95:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Oct 16 04:50:06 2024 GMT
Not After : Oct 15 04:55:06 2025 GMT
Subject: CN=609CC14F5F4087BAA5383E3B17D73907914A79F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:ab:2e:54:b6:59:dc:59:db:4b:b7:ad:a5:
f6:58:6f:71:6b:ec:bc:86:b9:cd:d4:8f:74:bf:19:
4b:a6:92:fc:e0:4f:e7:88:f6:e3:09:e4:1f:5a:e5:
07:44:98:03:5c:2b:08:bf:0b:2c:8e:f2:b6:25:cd:
56:a1:46:29:ee:f8:c2:05:0e:c2:19:4c:61:00:55:
00:74:1b:7f:51:75:b2:52:82:ec:12:4e:3c:a4:66:
49:9b:c2:02:94:ca:fa:c2:30:d4:a5:d4:4a:ae:e4:
b0:22:81:ff:80:1e:ef:b8:6b:08:f3:1e:f9:41:9f:
3e:94:e2:b2:b6:e9:ca:56:80:bc:39:7c:a1:b7:b3:
09:ed:40:35:26:cc:4b:54:ac:b4:8d:32:09:ae:54:
9f:67:95:f4:99:79:4f:d5:57:2c:7b:be:43:c4:e0:
38:fb:dc:9d:d7:10:e0:cb:43:66:41:54:a9:9b:76:
11:5d:93:03:88:da:af:2b:43:69:b1:0c:77:28:2e:
11:26:bc:87:75:63:ad:05:bf:53:6e:75:a6:48:4a:
4a:7f:9c:f7:7c:7f:5c:44:e7:8a:e0:9c:37:0e:94:
e4:69:85:d8:7e:f4:c2:38:1c:60:f6:67:7b:a0:d8:
4b:f9:1d:2a:0b:83:a4:85:8d:c5:a0:31:b1:d4:8a:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9C:C1:4F:5F:40:87:BA:A5:38:3E:3B:17:D7:39:07:91:4A:79:F3
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS52053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.170.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4e:86:fb:7f:4c:be:63:e4:af:31:5c:15:0f:50:80:6a:44:
d1:a0:d9:5c:c1:d7:0b:c8:59:1a:4d:50:e7:c5:70:f5:13:94:
2e:8d:cb:de:c8:42:9e:8b:26:dc:73:9d:b0:57:b4:8b:ac:44:
a3:ba:74:8f:87:f7:5b:b3:1d:cf:e3:48:03:58:21:7f:6e:76:
0b:3c:20:7f:b3:c5:2d:f9:86:d2:d5:06:7f:1a:79:f5:e1:5f:
e9:6c:c8:9b:94:b9:fe:18:4b:48:e5:dc:1d:a7:90:14:b9:80:
cf:8c:3b:e0:4f:6c:0c:6c:0a:9c:9d:b7:08:41:b5:95:6d:7a:
1a:d1:3a:27:55:0d:56:5d:0a:66:a9:82:e0:07:18:35:11:a9:
bc:1f:e4:93:da:7a:5b:c8:50:46:aa:03:88:28:ba:f0:f4:76:
e4:79:43:3a:1a:15:e3:58:1b:c0:da:59:5d:49:22:09:d2:14:
de:f4:42:6e:8a:72:eb:ce:64:48:6c:70:d9:8e:dd:d0:5d:33:
81:78:b4:92:70:e8:e1:e7:9e:0d:44:14:fd:68:29:26:a8:df:
73:0a:68:fe:03:e7:2d:9e:7f:74:32:b2:91:3a:e8:21:5c:38:
0a:f4:90:86:63:bc:b1:3c:df:0b:ba:c0:b6:79:92:21:87:fa:
80:26:08:75
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUchzGwkkclVqvbqHXc1T7FfPzlSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDEwMTYwNDUwMDZaFw0yNTEwMTUwNDU1MDZaMDMxMTAvBgNV
BAMTKDYwOUNDMTRGNUY0MDg3QkFBNTM4M0UzQjE3RDczOTA3OTE0QTc5RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRasuVLZZ3FnbS7etpfZYb3Fr
7LyGuc3Uj3S/GUumkvzgT+eI9uMJ5B9a5QdEmANcKwi/CyyO8rYlzVahRinu+MIF
DsIZTGEAVQB0G39RdbJSguwSTjykZkmbwgKUyvrCMNSl1Equ5LAigf+AHu+4awjz
HvlBnz6U4rK26cpWgLw5fKG3swntQDUmzEtUrLSNMgmuVJ9nlfSZeU/VVyx7vkPE
4Dj73J3XEODLQ2ZBVKmbdhFdkwOI2q8rQ2mxDHcoLhEmvId1Y60Fv1NudaZISkp/
nPd8f1xE54rgnDcOlORphdh+9MI4HGD2Z3ug2Ev5HSoLg6SFjcWgMbHUigv9AgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQUYJzBT19Ah7qlOD47F9c5B5FKefMwHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTIwNTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACzPaow
DQYJKoZIhvcNAQELBQADggEBAFhOhvt/TL5j5K8xXBUPUIBqRNGg2VzB1wvIWRpN
UOfFcPUTlC6Ny97IQp6LJtxznbBXtIusRKO6dI+H91uzHc/jSANYIX9udgs8IH+z
xS35htLVBn8aefXhX+lsyJuUuf4YS0jl3B2nkBS5gM+MO+BPbAxsCpydtwhBtZVt
ehrROidVDVZdCmapguAHGDURqbwf5JPaelvIUEaqA4gouvD0duR5QzoaFeNYG8Da
WV1JIgnSFN70Qm6KcuvOZEhscNmO3dBdM4F4tJJw6OHnng1EFP1oKSao33MKaP4D
5y2ef3QyspE66CFcOAr0kIZjvLE83wu6wLZ5kiGH+oAmCHU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:49 2024 by rpki-client on console-fra.rpki-client.org