Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS1239.roa
File: AS1239.roa (raw, json)
Hash identifier: gi41PnBPbGKA5a7ebkeUrGu3DmANhxUDPURAmj/RlJg=
Subject key identifier: AC:99:F0:EB:73:0A:E0:2F:DF:9F:C7:C3:67:16:4C:80:63:77:3E:9D
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1D6E06562066A131714E53E4B163F3C6B46B650A
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS1239.roa
Signing time: Wed 10 Jul 2024 14:05:32 +0000
ROA not before: Wed 10 Jul 2024 14:00:32 +0000
ROA not after: Wed 09 Jul 2025 14:05:32 +0000
asID: 1239
IP address blocks: 176.105.227.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Oct 2024 22:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6e:06:56:20:66:a1:31:71:4e:53:e4:b1:63:f3:c6:b4:6b:65:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 10 14:00:32 2024 GMT
Not After : Jul 9 14:05:32 2025 GMT
Subject: CN=AC99F0EB730AE02FDF9FC7C367164C8063773E9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:de:4a:57:be:9d:e2:cc:02:b7:f3:d3:a6:
12:d2:74:30:2c:b4:47:1e:38:02:7a:00:82:77:4d:
31:02:78:6c:b1:01:3c:d6:34:fe:75:d9:e9:5e:a4:
6e:93:a3:33:6f:28:1a:3f:1b:9e:de:af:1c:0f:51:
a9:fe:9a:a3:d3:e7:be:b7:e0:3b:16:3b:b1:b8:5c:
8a:1a:4f:54:2f:f9:55:56:9b:ef:19:bb:53:c0:ca:
ab:31:3c:d0:7f:8c:38:f7:c9:6c:5f:7c:46:31:fb:
ff:da:3e:bb:4a:c1:76:fa:c6:67:1f:67:38:f7:e5:
b5:65:b6:94:a9:98:79:d5:ee:28:62:5e:4d:d6:29:
2e:da:55:0f:0c:dc:39:68:64:99:48:6e:01:1b:3f:
42:66:76:a5:5e:b6:aa:a6:43:85:4b:a8:43:54:8b:
7f:68:50:45:91:d9:94:34:0f:b0:88:7b:82:01:9b:
35:d6:c8:c8:23:6f:18:8a:39:4d:ae:6d:ac:32:7b:
18:e0:fa:cf:8e:83:a2:8e:5c:ef:40:e8:54:95:e4:
1a:42:5c:f6:6a:15:49:11:e2:2c:be:19:e8:70:fb:
dc:82:26:58:19:f4:48:ad:91:24:fd:76:58:c8:55:
6f:0e:e9:a3:a3:0a:3a:a5:53:47:3e:10:c6:2a:cc:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:99:F0:EB:73:0A:E0:2F:DF:9F:C7:C3:67:16:4C:80:63:77:3E:9D
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS1239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.227.0/24
193.151.181.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ad:5c:84:a6:ac:a2:8a:23:5e:62:e8:a9:46:67:49:0b:ef:
59:31:fc:62:0b:04:ce:4a:56:9b:0d:62:63:e8:31:47:66:70:
e1:a7:ca:50:7e:47:d2:ca:92:00:a9:6f:dd:04:24:c6:b0:7e:
32:df:81:ec:c1:27:b5:45:e1:96:d5:67:75:b9:4f:91:7b:b0:
c6:68:99:b0:36:ae:9a:ca:23:76:86:f8:e5:c1:9b:cb:2f:54:
64:e6:79:96:a0:17:4e:00:1f:ee:3e:f2:03:85:c2:6a:bb:2b:
b8:e4:eb:47:38:6e:47:65:d3:00:8d:f6:72:8a:6e:a7:05:1f:
aa:b3:a9:45:c3:e5:bf:c1:f5:90:f0:44:8f:95:68:15:dd:3d:
ec:d3:02:51:6c:ab:29:76:69:64:1a:ed:01:ca:a0:43:08:58:
37:ed:e7:57:ce:94:bd:0b:42:57:4f:9a:f2:5f:d8:93:a2:d9:
73:76:0f:c4:22:4b:b0:37:c2:ea:36:aa:36:bf:76:47:9a:52:
0f:e5:73:3d:fd:99:51:bb:f2:d5:0f:54:95:8a:54:28:60:8d:
79:79:72:2a:4a:a0:95:f5:21:44:ea:40:96:75:b1:f2:44:2c:
35:98:34:9c:af:d0:cf:2b:c4:cb:7f:8c:76:4b:9c:a3:1c:95:
0f:13:06:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 22 04:48:54 2024 by rpki-client on console-ams.rpki-client.org