Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
File: AS140641.roa (raw, json)
Hash identifier: GSgM5NjbTgbpLx7VjETJeu/EoOUadj/WWMS7CP/v++k=
Subject key identifier: 00:CC:3F:5B:17:83:27:3D:C2:9D:29:A5:AB:1B:5A:8B:AE:48:01:01
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 74EE9985A9A73F7DB5DC7214B724A31800D035C8
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
Signing time: Fri 23 Aug 2024 08:01:26 +0000
ROA not before: Fri 23 Aug 2024 07:56:26 +0000
ROA not after: Fri 22 Aug 2025 08:01:26 +0000
asID: 140641
IP address blocks: 2a0f:85c1:3d7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ee:99:85:a9:a7:3f:7d:b5:dc:72:14:b7:24:a3:18:00:d0:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:26 2024 GMT
Not After : Aug 22 08:01:26 2025 GMT
Subject: CN=00CC3F5B1783273DC29D29A5AB1B5A8BAE480101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:5e:63:b8:85:ac:d1:c2:95:0a:1d:13:92:
39:f4:21:f3:48:30:ae:22:4e:b8:82:6c:2f:fb:c8:
54:41:52:b0:79:fa:b3:04:22:87:2f:48:61:04:69:
40:aa:38:32:85:22:79:00:d3:af:9f:7c:ef:81:ff:
5b:2d:19:bc:81:68:6d:40:7d:96:f6:1e:b4:ad:50:
28:1e:ff:89:2e:bb:f2:df:e4:50:94:7f:38:1c:d7:
d2:c0:18:1e:07:08:ff:30:75:3d:74:00:77:22:d2:
23:b5:5c:c8:f4:90:ac:84:d9:bb:93:88:56:cd:fc:
31:3a:80:71:41:27:e1:e9:29:1c:6e:a0:5c:ee:73:
b9:a0:c7:92:1d:96:aa:00:d7:78:08:66:ae:33:ea:
44:91:c6:a4:98:54:b9:29:85:67:d0:b4:c4:7c:fe:
67:7c:f8:52:4b:72:2a:11:a6:4e:d3:8d:a3:2d:ce:
33:63:54:f3:d2:23:58:f3:da:ba:01:61:60:94:a8:
b5:ff:a6:05:99:e7:49:6a:42:0e:4a:f7:7b:32:6a:
36:e8:c8:80:c5:f5:a4:fd:10:a0:94:dd:2d:be:68:
2e:57:46:d5:49:a8:a5:cc:d8:b8:cd:d0:e7:d5:81:
5e:ba:f7:29:bd:b2:d4:0a:9f:d0:0b:25:91:ac:e0:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CC:3F:5B:17:83:27:3D:C2:9D:29:A5:AB:1B:5A:8B:AE:48:01:01
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS140641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d7::/48
Signature Algorithm: sha256WithRSAEncryption
b8:fd:ab:aa:ef:ac:5d:b1:bc:93:6b:b8:ef:3e:95:43:21:f4:
c3:fa:93:40:b4:93:9b:ef:b3:5b:df:f2:1e:0b:b9:ed:0a:e0:
6a:5c:65:d4:64:5e:3a:a9:e8:bb:79:b5:77:69:e2:74:08:ff:
c6:84:1b:a4:da:98:bf:32:fb:e2:fd:3d:9e:99:e7:71:da:aa:
c7:b1:01:37:f7:d1:ab:34:96:fa:d7:20:17:e0:68:1c:b6:3c:
bc:8f:f6:10:cc:c2:9a:e9:4d:47:e7:05:87:34:c9:78:c6:b2:
80:7f:d7:c9:75:af:6d:55:4b:2a:00:6c:9b:03:b4:2a:17:60:
ae:c9:21:a5:3b:a4:c1:b1:ed:d6:6e:ca:6e:ef:e8:f5:62:25:
1e:83:89:11:03:3f:c1:7d:ae:0c:17:98:4e:45:95:f3:69:25:
68:7c:6f:71:e6:10:a6:ff:f6:3d:89:54:d7:fd:d5:eb:7e:8f:
37:be:ac:65:9b:e7:65:8f:20:cf:cd:1b:eb:99:c0:9e:a8:e4:
22:60:a4:40:87:99:b8:0c:43:5e:f2:f9:56:20:fa:75:f7:74:
86:8b:f1:08:f7:5c:5a:78:16:68:97:75:57:5d:fa:8a:cd:4b:
f3:b6:e3:b0:cd:29:f5:30:93:39:b4:5d:26:65:e7:f6:8c:07:
0c:c7:f9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org