Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS272547.roa
File: AS272547.roa (raw, json)
Hash identifier: s2UB0NQO475wHviwESp9DdmlGtmEhShRMMAjzMRqzrg=
Subject key identifier: F3:5E:27:C1:06:76:F0:C4:18:5B:DA:C3:5E:00:32:34:DF:C5:19:9A
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 6EF7D5C42814F3D382BF9BDBF67AF78745CDC1B7
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS272547.roa
Signing time: Sat 13 Jul 2024 01:05:18 +0000
ROA not before: Sat 13 Jul 2024 01:00:18 +0000
ROA not after: Sat 12 Jul 2025 01:05:18 +0000
asID: 272547
IP address blocks: 45.158.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f7:d5:c4:28:14:f3:d3:82:bf:9b:db:f6:7a:f7:87:45:cd:c1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jul 13 01:00:18 2024 GMT
Not After : Jul 12 01:05:18 2025 GMT
Subject: CN=F35E27C10676F0C4185BDAC35E003234DFC5199A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:22:c9:31:35:70:40:91:b8:18:25:1a:c7:
e4:30:f3:43:cb:9f:a6:23:5d:c5:5f:27:b1:61:2e:
40:73:43:c2:0e:9a:76:07:f8:24:cb:4a:c8:53:59:
8a:d6:49:04:ab:b9:bc:c2:72:8c:98:c1:b4:70:3c:
76:2a:7a:c2:56:50:c1:5e:4e:34:06:2b:c9:57:b1:
61:e7:3e:d3:06:c8:a9:72:a5:d3:45:dd:25:04:60:
22:9f:d3:21:51:fb:0a:3a:5b:1c:4d:a9:c4:bb:cf:
7a:52:86:ff:b5:15:dc:ee:72:83:6d:48:4c:5d:0a:
46:26:e5:44:c2:1a:8a:6a:68:2b:68:7e:e3:de:25:
c1:2f:5d:64:48:be:64:c1:ec:50:ce:08:bf:ce:28:
4c:94:03:e6:bb:41:58:e7:7d:60:12:e1:c4:ec:90:
df:e4:45:6b:23:26:a4:27:74:b4:a4:71:a8:ae:62:
45:2b:ee:d3:fa:03:06:09:fb:c9:1e:e1:50:e2:2b:
1b:42:57:95:c1:48:63:02:ea:63:e1:a9:bc:fb:34:
2b:7f:3b:93:5a:01:80:d8:7a:9d:a9:ce:10:ee:be:
ef:8b:b1:f0:df:7a:44:65:8b:e0:aa:52:f4:33:58:
90:c3:40:b9:54:d8:c3:74:63:8d:78:eb:f1:be:72:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5E:27:C1:06:76:F0:C4:18:5B:DA:C3:5E:00:32:34:DF:C5:19:9A
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS272547.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c2:41:df:ce:8d:aa:f1:20:97:7e:a5:70:77:1d:d2:61:88:
d8:16:16:40:88:7f:b1:65:87:bc:1d:6c:2d:ae:dd:a0:4d:6e:
c8:b4:fa:3c:f6:cd:27:ae:39:3a:17:b6:31:a2:63:f0:d7:d6:
96:07:8c:f3:47:fa:58:bf:69:26:5e:12:f6:f9:55:e6:9a:b5:
c1:21:05:2d:1f:65:63:15:dc:b1:ac:91:38:9c:ac:34:77:25:
0b:69:4e:1b:93:60:f5:8c:0f:af:83:b9:68:6b:b1:e8:fc:1b:
b2:c4:b8:f5:3d:8c:4d:80:c5:90:50:c6:ee:7c:59:44:d8:f3:
ff:1f:08:e1:03:d2:c5:1a:6c:88:5f:eb:90:2d:b3:44:2d:57:
86:0d:85:48:e2:61:2b:4f:0f:4e:9c:a5:76:f3:c8:1f:80:8a:
ec:5b:47:0f:ba:e9:ca:cb:3a:6c:12:9b:07:7a:8f:3f:dc:4a:
cd:8f:8c:52:8f:20:46:af:d9:0c:bf:e2:46:84:db:19:d5:b3:
c6:f3:09:f3:b0:96:be:39:16:d0:d4:19:a4:8e:f8:58:0c:60:
80:30:82:aa:8c:3d:18:73:d1:50:76:c0:10:21:c1:49:36:93:
e9:24:c4:95:ff:9d:34:23:5b:62:d8:d9:20:3f:7b:b5:ef:08:
14:06:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:23 2024 by rpki-client on console-ams.rpki-client.org