Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211415.roa
File: AS211415.roa (raw, json)
Hash identifier: 7BKrcOOq66WDQDWwPO6xFIp2Bk8vn8bcH939yqOFxCc=
Subject key identifier: F5:0F:FC:FD:00:BE:9E:45:FD:CB:1B:5E:A2:54:C1:44:C7:DE:F8:0F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 0EA9AEFBB4EA03A90B30A67D23365B965DA7C3D9
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211415.roa
Signing time: Tue 07 May 2024 12:07:23 +0000
ROA not before: Tue 07 May 2024 12:02:23 +0000
ROA not after: Tue 06 May 2025 12:07:23 +0000
asID: 211415
IP address blocks: 45.154.105.0/24 maxlen: 24
185.155.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a9:ae:fb:b4:ea:03:a9:0b:30:a6:7d:23:36:5b:96:5d:a7:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 7 12:02:23 2024 GMT
Not After : May 6 12:07:23 2025 GMT
Subject: CN=F50FFCFD00BE9E45FDCB1B5EA254C144C7DEF80F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:26:1a:55:6e:c8:ea:79:97:e6:28:14:43:
e5:a9:01:f0:ce:99:e1:99:a1:03:e1:fd:1b:7e:3f:
d6:a4:e6:ea:6a:3d:e5:4e:85:d7:59:5e:c0:86:58:
8c:b3:0a:c4:b0:51:14:5b:fa:6a:83:05:5a:55:ae:
2c:35:59:94:5a:cb:cb:b0:37:78:34:2a:34:78:e9:
2b:eb:a3:3e:7e:aa:45:57:e0:c5:7d:26:67:8c:f7:
d0:f1:5d:1b:90:c3:81:82:c3:92:e1:6b:86:ac:70:
07:af:5c:97:fa:7a:c2:53:04:85:3b:4a:cb:eb:d8:
08:e8:c6:65:0c:ad:f1:70:79:2a:37:66:35:94:b0:
f8:96:47:9d:a2:ec:b1:43:8d:7b:fe:ed:d0:83:bc:
25:8a:75:86:be:b1:54:9f:d3:b5:01:de:3f:18:0a:
6c:94:cd:ba:2d:af:30:f7:86:08:0a:5b:53:f5:30:
55:71:62:df:2c:2a:0f:55:4e:ce:32:6d:48:bd:78:
76:d3:0d:14:16:d4:20:65:ad:af:4f:64:bf:1a:3e:
65:5d:78:56:39:68:fa:5a:56:86:5c:d4:e8:2b:80:
6d:21:1e:8e:2a:c2:f4:d0:87:3f:f4:1d:ff:bc:e2:
5a:54:c6:e1:ee:59:f8:ab:3a:23:9f:45:8b:e8:6e:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0F:FC:FD:00:BE:9E:45:FD:CB:1B:5E:A2:54:C1:44:C7:DE:F8:0F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211415.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.105.0/24
185.155.221.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d4:2f:73:30:ef:32:a5:46:78:56:4f:4c:d0:81:ea:b6:77:
40:0c:9c:d8:a9:a1:e3:f7:4c:8f:9e:39:8f:af:4c:d5:18:c5:
f5:64:46:86:a9:94:17:53:c0:b6:5d:9e:86:3c:84:bc:43:1c:
18:83:3f:22:7c:29:99:2b:94:98:13:c3:a6:c5:df:90:32:fb:
12:68:8d:c3:a7:3d:ff:8d:e7:27:76:20:77:c8:bc:c7:d2:1e:
72:96:77:6d:02:79:4d:f4:fb:ee:cb:27:c5:4f:19:de:9f:f8:
12:2a:5a:e7:53:b3:c9:1b:40:16:a8:63:39:5d:7e:18:c9:31:
78:0f:3f:a1:5c:a0:23:e8:2a:72:76:58:50:53:9a:13:3c:a8:
95:a0:f0:4d:ed:10:4d:0a:56:bf:09:49:7b:79:fa:51:e8:e4:
cd:04:81:49:d1:3c:14:7b:86:5f:12:66:36:51:09:76:5f:d8:
63:ad:b0:ce:0d:8a:90:58:12:c9:cf:9b:93:a8:4d:e8:bc:6b:
72:a8:07:20:6f:69:b9:f5:d2:0d:7d:33:39:dc:63:80:94:6a:
43:47:d2:00:93:72:ab:fd:ef:57:e8:b1:40:a0:22:fc:e1:b7:
fd:94:11:d5:4f:71:0b:47:4c:4d:89:07:a2:33:15:22:44:0f:
0d:b6:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:00:55 2024 by rpki-client on console-ams.rpki-client.org