Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208685.roa
File: AS208685.roa (raw, json)
Hash identifier: G62JMjBb5yVTlgKsW0AH3dTC5nNdenTdaiYxLOeU8+g=
Subject key identifier: C2:44:B1:BA:20:16:79:1A:BE:29:A4:F2:46:25:01:4F:D5:9B:32:80
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0BA0FABEAC3A76875E4616B97929B7B2A735987F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208685.roa
Signing time: Thu 31 Oct 2024 13:43:26 +0000
ROA not before: Thu 31 Oct 2024 13:38:26 +0000
ROA not after: Thu 30 Oct 2025 13:43:26 +0000
asID: 208685
IP address blocks: 45.148.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a0:fa:be:ac:3a:76:87:5e:46:16:b9:79:29:b7:b2:a7:35:98:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 31 13:38:26 2024 GMT
Not After : Oct 30 13:43:26 2025 GMT
Subject: CN=C244B1BA2016791ABE29A4F24625014FD59B3280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ad:0f:b3:95:7e:9d:c2:85:15:97:f6:a8:e3:
99:bd:d9:79:da:e9:6d:d9:df:6f:60:26:89:3d:10:
1f:be:69:32:ca:b0:b6:81:b8:32:2e:62:66:49:b0:
4f:0f:5f:2e:27:0e:a0:60:bd:a3:fc:61:af:a8:e6:
c3:da:9f:92:3a:3c:e6:aa:5a:b7:ae:c5:a9:ea:29:
94:bc:1d:6d:b1:58:a4:1e:5d:c2:6e:bc:68:8e:c0:
be:4b:16:00:7a:b0:4f:85:72:08:c4:01:4b:e4:6f:
53:d8:5e:ff:3c:45:f7:65:84:8b:31:45:ec:b3:bf:
56:70:4f:a7:a5:5a:fc:7b:36:27:8d:04:80:ef:01:
13:72:d0:c5:7a:22:72:50:34:19:12:d9:ad:8c:a1:
18:87:49:52:06:34:a0:1d:98:cd:e1:53:ea:3a:05:
02:e7:e6:32:78:eb:81:78:55:e6:08:10:c7:7f:ee:
47:b8:77:fa:dc:8b:07:d9:72:25:57:63:21:93:ca:
e5:6e:83:7e:b3:1b:a9:2f:50:59:a8:17:32:cc:d7:
a4:62:17:48:44:50:96:8b:f0:28:3c:a1:53:7e:77:
8a:a2:05:ea:b1:55:7f:f3:5a:53:99:56:06:97:c2:
a4:3e:76:45:2a:01:0d:ed:8a:db:e9:42:81:51:20:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:B1:BA:20:16:79:1A:BE:29:A4:F2:46:25:01:4F:D5:9B:32:80
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS208685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.36.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:db:9c:1b:c1:88:94:05:65:27:cd:c6:53:1a:92:07:1b:28:
26:28:7f:94:79:1b:52:02:00:cd:bd:4a:cb:99:11:25:50:a6:
3d:d6:ef:a1:04:e4:cb:d3:b6:f6:c5:aa:52:d7:a8:7c:6f:36:
85:96:c2:d8:82:e8:6c:27:4c:62:a3:11:7a:0d:a9:06:54:6b:
99:fb:e6:b0:27:59:48:54:b4:24:34:e0:13:c2:63:c1:89:cc:
22:36:ab:15:a0:20:1d:53:e6:c3:28:6a:2a:89:eb:fc:d5:d2:
e5:76:8b:c9:4e:53:73:12:da:5a:7c:66:25:7c:72:9f:1f:df:
34:b5:60:c2:78:25:df:69:3e:1a:f4:64:ff:9f:8c:59:c8:cf:
98:cb:37:ab:e8:51:94:c0:30:5a:26:5b:86:c7:a9:d6:4c:38:
27:07:01:ce:e0:ae:9f:c0:3e:aa:a4:2c:60:b6:17:e3:90:c1:
5d:e9:27:93:18:d3:36:7d:e2:57:cb:3c:36:6d:76:06:ca:42:
b6:d7:30:98:9b:e7:25:42:38:70:53:05:c8:dd:66:d5:d2:34:
e5:12:e5:94:67:66:60:29:39:d5:db:c4:bf:4d:cc:93:74:ce:
d4:c7:f8:ba:18:91:dd:28:ad:ec:cb:96:62:d3:f9:57:59:30:
42:ac:d5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:14:42 2024 by rpki-client on console-fra.rpki-client.org