Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
File: AS265919.roa (raw, json)
Hash identifier: xr5EbCLwnIU9WD5G70l3+SuQ2oSK/Q4PEWGKWcWm1Ls=
Subject key identifier: 87:93:83:49:5E:35:49:50:9E:E2:FB:B1:07:DB:95:D4:AE:4D:3C:94
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 4BDC94BB12B484F3379A501770600EDAEE641A8F
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
Signing time: Tue 22 Oct 2024 22:26:54 +0000
ROA not before: Tue 22 Oct 2024 22:21:54 +0000
ROA not after: Tue 21 Oct 2025 22:26:54 +0000
asID: 265919
IP address blocks: 45.146.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dc:94:bb:12:b4:84:f3:37:9a:50:17:70:60:0e:da:ee:64:1a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 22 22:21:54 2024 GMT
Not After : Oct 21 22:26:54 2025 GMT
Subject: CN=879383495E3549509EE2FBB107DB95D4AE4D3C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:d8:10:fb:88:ed:4a:81:7d:20:8a:c5:c8:
a3:85:da:9f:31:dc:5c:eb:6a:c8:32:09:c5:91:8d:
f0:5b:f8:37:0e:68:ea:96:e7:da:aa:ea:e5:4e:32:
7f:d6:13:68:89:cd:43:54:ba:bb:b6:da:30:86:28:
fa:24:27:08:9f:9f:0a:cb:62:cb:58:86:8e:59:55:
68:b4:f3:89:60:2f:ed:46:d7:41:4b:65:0e:8e:99:
9e:76:1c:ae:f7:50:73:ca:02:2f:7c:9c:14:3a:44:
cc:06:2e:3c:b8:43:fb:74:2d:d0:be:06:66:bc:e5:
60:64:c0:1f:89:cf:48:e7:ff:2f:3f:a0:dd:71:10:
4b:7c:db:8c:d0:c9:6c:cf:3b:30:69:d9:d9:ff:3c:
ef:90:13:3f:0c:ce:59:57:92:76:86:60:c6:ff:dd:
1f:08:5d:a6:af:dc:0a:3a:53:3a:6c:6f:9d:3e:3b:
db:64:29:87:45:de:38:4c:1b:50:c3:3d:26:a5:ec:
00:bf:32:c6:7b:08:f7:cd:48:57:1a:ac:31:b4:18:
ed:e2:63:20:06:9a:bc:89:0d:b3:67:53:a0:fd:49:
f2:65:69:e8:48:cb:ac:46:3e:fe:ac:25:30:a6:16:
e0:75:88:94:87:7c:97:a6:bf:79:45:2e:1c:7c:4a:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:83:49:5E:35:49:50:9E:E2:FB:B1:07:DB:95:D4:AE:4D:3C:94
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS265919.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:15:29:d6:35:cf:3d:9f:39:1c:39:66:9e:eb:ed:aa:43:a0:
80:19:5f:d5:30:35:2b:f7:21:04:b7:1f:f2:04:07:bc:ed:57:
0e:49:78:9e:05:fc:c2:25:59:6e:8d:23:1d:74:3a:e5:c8:2c:
bc:65:c4:51:06:4a:7a:1d:31:67:7a:3a:90:6d:5b:8d:a0:21:
cf:43:c2:1b:59:bf:a9:57:2e:6f:a2:d9:c4:ee:54:15:12:88:
f6:60:ca:b2:08:1d:40:3a:b2:af:1e:a2:c2:cd:1c:f7:c9:5a:
97:4c:42:9e:0d:81:58:df:d3:21:2c:fe:96:28:b7:dc:90:a8:
76:b1:b3:d5:50:92:c0:ad:bd:fa:d9:de:ba:60:9e:89:92:99:
27:df:6d:08:07:9a:8e:a5:42:30:db:ce:72:09:ba:94:aa:b5:
50:7e:c7:8c:7a:80:a9:86:d6:fe:3f:f1:59:72:6a:3e:88:1d:
83:46:21:5e:98:15:88:e1:75:44:18:9a:d9:96:64:fe:f4:d2:
3d:02:5a:79:91:61:20:85:6c:36:e8:bf:51:04:85:de:3b:19:
f6:87:3b:69:74:aa:df:ed:94:30:a7:1f:b8:df:dd:38:d5:5b:
fd:6f:2c:17:2a:01:e6:34:60:ab:8c:48:bd:29:3e:77:49:05:
80:14:ad:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:23 2024 by rpki-client on console-ams.rpki-client.org