Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6461.roa
File: AS6461.roa (raw, json)
Hash identifier: N6T6aOH7F8AqAjXbblgS40dZUprappKpNHYplNi+Fug=
Subject key identifier: DE:93:E9:16:4E:91:2F:E0:0C:15:65:53:79:00:F4:D8:7A:10:13:32
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4D1FAE61F7006A7CA45D2F79D635B094B6B2F8F3
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6461.roa
Signing time: Wed 14 Aug 2024 14:35:27 +0000
ROA not before: Wed 14 Aug 2024 14:30:27 +0000
ROA not after: Wed 13 Aug 2025 14:35:27 +0000
asID: 6461
IP address blocks: 181.214.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1f:ae:61:f7:00:6a:7c:a4:5d:2f:79:d6:35:b0:94:b6:b2:f8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Aug 14 14:30:27 2024 GMT
Not After : Aug 13 14:35:27 2025 GMT
Subject: CN=DE93E9164E912FE00C1565537900F4D87A101332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:6b:48:7c:2d:50:c5:87:3d:0b:51:c6:19:
3b:ba:aa:f6:11:27:37:12:9c:99:4e:6a:23:c0:6a:
9c:a7:ce:bd:58:97:c7:e4:b4:b2:9e:e5:12:06:94:
b7:d6:da:7a:50:4f:b6:d5:ef:96:b5:19:da:1b:a3:
7b:85:37:7e:ee:b4:12:21:79:15:61:d6:3c:86:d4:
e1:f9:04:f4:be:35:41:f2:d6:cc:0e:57:5d:a6:27:
de:f6:3d:db:ef:7e:69:f2:15:02:b9:0b:59:95:e3:
9c:a8:2d:a7:06:1c:c8:1a:58:b6:5f:ee:31:41:ac:
69:20:7e:9b:2d:16:95:83:55:1f:34:5b:94:17:57:
b6:1f:8d:1d:b2:89:2e:c4:1d:10:26:72:18:c3:20:
6f:d4:92:b6:2d:0d:fc:0f:d9:60:aa:1e:e7:e8:cc:
0d:77:aa:6b:e3:2a:28:5a:6a:f7:68:bf:33:ca:fd:
d6:91:4b:ea:2b:23:a6:f0:1a:59:18:65:7d:43:a9:
c8:c4:ad:f2:70:c5:9a:bf:d8:de:7e:d6:b1:e0:ad:
2b:65:40:d7:ea:c9:97:47:f0:c2:09:2e:00:46:7f:
8f:90:cf:14:48:ba:46:5c:c9:5b:89:5a:e7:7b:06:
2d:75:99:c4:94:ed:1f:f2:4b:05:c9:30:db:91:af:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:93:E9:16:4E:91:2F:E0:0C:15:65:53:79:00:F4:D8:7A:10:13:32
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS6461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:36:e4:d4:d6:c3:20:74:8f:e4:3c:b6:8c:69:64:43:7e:4d:
17:e2:33:10:b3:88:8c:4b:78:1b:97:52:bc:bb:19:76:7c:4c:
ca:c2:68:d2:3e:9c:c7:fd:ad:a3:b3:b4:90:a3:f5:40:c7:1d:
f3:23:ab:d5:f7:af:12:3c:07:b8:da:41:8d:96:91:cf:1b:c1:
1f:98:a1:4a:16:11:f8:74:98:27:6e:e8:94:31:07:2c:39:b6:
76:fb:1d:5c:b2:4a:40:aa:70:a2:2c:f4:fb:17:a5:bd:02:c3:
5d:de:cc:b7:96:79:c7:47:be:2f:bb:b5:b1:5a:ca:44:83:ea:
c4:d4:2b:06:a7:9d:1d:38:46:d9:6a:bf:f6:30:60:70:58:3a:
af:7b:67:90:4e:8e:db:35:02:79:a6:32:66:73:ee:fa:8f:e1:
ec:18:46:23:4a:a8:e2:5c:bd:a0:62:03:76:32:46:c0:83:21:
40:e1:d2:11:ff:72:53:ba:d7:0e:9a:b3:d4:de:2b:f8:ed:63:
bd:30:d6:e9:fb:23:38:19:30:1b:00:6a:72:06:b1:be:ad:df:
01:c4:f9:97:be:34:2b:05:21:23:7a:32:08:9b:e3:05:6b:3a:
34:03:b5:78:cf:6c:22:9e:dd:3c:b6:be:60:d0:54:a4:01:6e:
30:39:1f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:23 2024 by rpki-client on console-ams.rpki-client.org