Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57511.roa
File: AS57511.roa (raw, json)
Hash identifier: DewPWhpHYQQ9Ecn1L+KHKTdCDBzBB6UAR9zQl3Ir7nk=
Subject key identifier: F4:B4:68:E7:4B:17:E7:0B:98:DA:94:4F:5A:75:F0:3F:B4:C1:E0:FA
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 5C42316F294B59F0194CB85C9745307DC8D28402
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57511.roa
Signing time: Wed 13 Dec 2023 13:25:31 +0000
ROA not before: Wed 13 Dec 2023 13:20:31 +0000
ROA not after: Wed 11 Dec 2024 13:25:31 +0000
asID: 57511
IP address blocks: 181.41.216.0/24 maxlen: 24
181.214.115.0/24 maxlen: 24
185.135.156.0/24 maxlen: 24
194.110.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:42:31:6f:29:4b:59:f0:19:4c:b8:5c:97:45:30:7d:c8:d2:84:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 13 13:20:31 2023 GMT
Not After : Dec 11 13:25:31 2024 GMT
Subject: CN=F4B468E74B17E70B98DA944F5A75F03FB4C1E0FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:81:ba:db:6c:a3:ab:b4:a3:45:57:e9:44:
5a:2d:29:f7:32:93:ea:2e:34:b5:5b:a0:3f:f5:8c:
ff:1a:32:cd:78:6c:4f:b9:d5:6d:ee:33:cf:24:c4:
4b:3d:7f:b1:8e:a6:5e:86:5c:e5:4b:8f:8c:4c:9b:
16:4d:d1:d0:8d:70:c7:84:db:4f:33:17:c8:09:dd:
9c:55:9d:b2:29:db:0d:20:74:6f:ee:8a:70:c7:45:
55:6f:74:3a:06:bb:42:c8:8f:2b:6f:5a:94:45:24:
9f:75:a5:8f:2f:3d:01:b7:b0:92:9a:e1:09:37:94:
5f:e1:0d:dc:62:cb:3e:8e:aa:09:08:1a:cf:31:23:
6f:eb:2f:07:78:da:a6:bc:da:5d:81:75:18:ab:c1:
45:9c:02:86:22:18:1d:17:44:b4:a1:44:16:33:05:
71:fe:90:1e:32:5a:f7:4e:54:97:1b:2c:7f:24:2a:
30:cb:27:23:35:9b:4d:8d:a4:20:6e:36:c3:3d:3e:
24:ac:e2:b4:eb:51:54:3a:5b:c2:03:ab:f5:e5:1e:
dd:76:6c:97:2f:76:26:0e:8d:3f:0e:9a:5c:78:11:
a6:51:fd:db:de:8f:3b:fa:e7:ec:c5:04:84:b0:70:
3d:03:7a:fa:a8:da:da:d9:9c:87:e6:83:7e:81:c1:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B4:68:E7:4B:17:E7:0B:98:DA:94:4F:5A:75:F0:3F:B4:C1:E0:FA
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS57511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.216.0/24
181.214.115.0/24
185.135.156.0/24
194.110.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:66:2f:91:11:4c:13:9d:3f:d0:28:f7:60:47:b6:81:20:ed:
84:b1:3d:dc:7f:55:c8:a4:33:b2:35:44:dc:d0:b8:59:61:c0:
ed:9b:77:7a:33:75:27:0f:5b:20:72:fd:37:f4:33:25:ba:49:
90:b3:31:89:38:cb:57:7a:93:94:38:6b:54:2e:31:5f:98:a4:
ab:d1:ee:ff:31:f3:25:ee:96:30:0a:34:e5:22:13:18:4d:de:
a2:2c:c1:0f:f3:64:11:2e:aa:93:b5:f7:29:29:22:fc:ba:34:
fd:a0:00:1e:19:f5:a6:56:57:bb:73:93:7c:9d:c6:00:08:7d:
23:5d:9a:93:14:9c:dd:dd:24:a5:8b:74:2b:fc:52:fa:b1:b6:
34:46:05:a2:18:92:e6:25:45:be:8d:c8:d6:20:a4:c0:36:78:
e2:51:16:9f:3c:60:a0:1d:32:32:22:70:b8:95:b8:ca:9e:55:
3a:01:49:50:6d:b9:8b:a2:99:72:44:cb:27:b8:f8:fc:7f:9d:
2b:57:9f:91:3b:7f:58:e5:d8:1b:ba:64:44:fb:c6:23:1b:aa:
9b:45:9f:64:a4:00:08:2f:b2:f2:0b:97:f1:8f:20:3b:be:17:
98:e3:d9:d8:a1:ba:ff:9f:22:74:aa:cf:ad:f5:8f:39:c9:a0:
ec:bd:02:75
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgIUXEIxbylLWfAZTLhcl0UwfcjShAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yMzEyMTMxMzIwMzFaFw0yNDEyMTExMzI1MzFaMDMxMTAvBgNV
BAMTKEY0QjQ2OEU3NEIxN0U3MEI5OERBOTQ0RjVBNzVGMDNGQjRDMUUwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI+oG622yjq7SjRVfpRFotKfcy
k+ouNLVboD/1jP8aMs14bE+51W3uM88kxEs9f7GOpl6GXOVLj4xMmxZN0dCNcMeE
208zF8gJ3ZxVnbIp2w0gdG/uinDHRVVvdDoGu0LIjytvWpRFJJ91pY8vPQG3sJKa
4Qk3lF/hDdxiyz6OqgkIGs8xI2/rLwd42qa82l2BdRirwUWcAoYiGB0XRLShRBYz
BXH+kB4yWvdOVJcbLH8kKjDLJyM1m02NpCBuNsM9PiSs4rTrUVQ6W8IDq/XlHt12
bJcvdiYOjT8Omlx4EaZR/dvejzv65+zFBISwcD0Devqo2trZnIfmg36BwYiXAgMB
AAGjggIbMIICFzAdBgNVHQ4EFgQU9LRo50sX5wuY2pRPWnXwP7TB4PowHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTNTc1MTEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAC1KdgD
BAC11nMDBAC5h5wDBADCbvIwDQYJKoZIhvcNAQELBQADggEBAA5mL5ERTBOdP9Ao
92BHtoEg7YSxPdx/VcikM7I1RNzQuFlhwO2bd3ozdScPWyBy/Tf0MyW6SZCzMYk4
y1d6k5Q4a1QuMV+YpKvR7v8x8yXuljAKNOUiExhN3qIswQ/zZBEuqpO19ykpIvy6
NP2gAB4Z9aZWV7tzk3ydxgAIfSNdmpMUnN3dJKWLdCv8UvqxtjRGBaIYkuYlRb6N
yNYgpMA2eOJRFp88YKAdMjIicLiVuMqeVToBSVBtuYuimXJEyye4+Px/nStXn5E7
f1jl2Bu6ZET7xiMbqptFn2SkAAgvsvILl/GPIDu+F5jj2dihuv+fInSqz631jznJ
oOy9AnU=
-----END CERTIFICATE-----
Generated at Thu May 9 20:13:46 2024 by rpki-client on console-fra.rpki-client.org