Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
File: AS210574.roa (raw, json)
Hash identifier: HQU1XbD/bLg6nSMfYqENfNVe738POlFaPE+PU5JVnXk=
Subject key identifier: 30:7B:1F:CF:28:C6:96:5A:5A:67:2E:2E:D7:F9:A4:13:84:5C:63:3C
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6648C03318C66E3336E079B622260F8A9D454AD1
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
Signing time: Thu 31 Oct 2024 13:43:26 +0000
ROA not before: Thu 31 Oct 2024 13:38:26 +0000
ROA not after: Thu 30 Oct 2025 13:43:26 +0000
asID: 210574
IP address blocks: 193.111.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:48:c0:33:18:c6:6e:33:36:e0:79:b6:22:26:0f:8a:9d:45:4a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 31 13:38:26 2024 GMT
Not After : Oct 30 13:43:26 2025 GMT
Subject: CN=307B1FCF28C6965A5A672E2ED7F9A413845C633C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:2a:47:bb:0c:ea:7a:89:d5:ce:1f:b8:25:
9a:43:64:3d:97:51:e5:5b:a4:cf:b2:b3:3e:c1:90:
a7:c4:43:4d:62:79:2f:63:a3:28:c2:5f:9e:fe:76:
c5:e2:f5:23:0b:05:88:05:86:b0:aa:dc:c6:db:23:
d6:f1:12:78:26:22:4c:d0:df:6c:45:bb:ef:b9:8c:
ff:34:1a:ec:90:a9:86:89:26:01:0e:8a:9d:06:43:
dc:1f:73:a8:e1:cf:a5:fb:b9:a5:6c:1c:a3:80:20:
41:7e:8c:6f:ca:c2:d9:ce:d1:24:48:66:bc:e9:b4:
cc:7a:33:73:f7:27:ea:a6:e8:a9:52:55:52:99:b4:
85:1a:67:99:e3:c2:0b:24:91:f7:de:2a:c8:48:82:
e6:c3:11:ed:cb:20:25:c5:5d:d0:3e:96:63:a1:21:
60:c1:9c:db:19:ac:b9:4e:aa:57:3b:39:e1:88:f2:
71:ef:38:39:48:1c:c6:e1:42:b1:a8:3b:a1:cb:4d:
3a:1e:eb:7c:2e:28:37:54:ad:1d:49:fa:97:d3:9f:
89:4c:22:b5:31:7d:d5:f0:73:aa:93:20:37:62:c5:
f2:89:05:1d:d7:fe:e8:19:8e:26:d2:41:2b:93:53:
90:0f:40:2d:29:f9:14:d9:22:10:6b:40:0c:5c:28:
bb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:1F:CF:28:C6:96:5A:5A:67:2E:2E:D7:F9:A4:13:84:5C:63:3C
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS210574.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.125.0/24
Signature Algorithm: sha256WithRSAEncryption
18:05:7d:76:90:9b:13:03:92:d2:3a:72:d8:0f:47:71:50:0b:
a0:bb:10:de:fc:3f:ab:42:b0:55:e4:15:db:06:b9:fc:cf:90:
e5:8f:79:a2:37:51:e3:d3:65:de:d6:32:f2:6e:18:df:95:2f:
9c:42:a8:99:0d:b7:45:eb:05:3e:66:65:d9:c2:1d:6b:85:75:
16:38:1e:8a:f1:2c:1b:f6:64:c2:d0:11:60:6b:34:10:24:b0:
c0:79:b3:97:84:0e:2c:91:f9:50:0a:ac:96:23:04:8a:2c:af:
21:df:26:1a:1e:89:43:48:28:95:88:e6:a6:24:1f:52:cd:ea:
05:7e:5d:57:59:b1:12:c5:a2:00:56:f1:a1:a7:d6:76:a6:33:
64:4e:46:bd:28:4b:55:51:b5:ff:7f:4b:c4:5a:5b:4a:60:a1:
c3:45:dc:36:11:b7:84:6a:2e:2f:61:5c:28:24:3e:82:36:2d:
cf:68:e9:d3:6e:90:9f:f4:61:38:59:b7:f9:e2:be:cf:90:b5:
07:ec:cd:65:b4:4c:61:02:7b:5a:2c:90:36:fb:17:d1:bf:61:
80:41:0f:f6:13:67:4c:8c:dd:7b:9d:74:fe:03:ac:c9:38:d5:
d2:ba:75:4e:76:77:d3:d6:f6:74:6b:30:ca:3e:f7:87:58:23:
6a:93:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:14:42 2024 by rpki-client on console-fra.rpki-client.org