Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
File: AS141892.roa (raw, json)
Hash identifier: AwL7Ru3Ko9edxNlrIonQsEAgGtJ72JpjcEbO2JaJV3k=
Subject key identifier: D5:E6:23:4E:AA:45:A5:1F:AC:39:81:55:34:3F:C2:AD:16:68:BB:E5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7D0E3A47C977F791202EF2F7ECE72229EABEA7BF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
Signing time: Fri 23 Aug 2024 08:01:14 +0000
ROA not before: Fri 23 Aug 2024 07:56:14 +0000
ROA not after: Fri 22 Aug 2025 08:01:14 +0000
asID: 141892
IP address blocks: 2a0f:85c1:3c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0e:3a:47:c9:77:f7:91:20:2e:f2:f7:ec:e7:22:29:ea:be:a7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:14 2024 GMT
Not After : Aug 22 08:01:14 2025 GMT
Subject: CN=D5E6234EAA45A51FAC398155343FC2AD1668BBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:9c:49:11:91:c3:64:57:b9:84:f1:d9:7a:
42:70:45:5c:31:20:b0:e0:51:04:f0:f2:1f:05:5e:
9a:23:99:df:d3:17:1b:e2:81:c9:42:33:f2:7b:4b:
8d:93:41:39:25:85:b1:5f:1d:23:6d:1e:40:62:6e:
b1:66:2d:db:b3:cd:ad:48:5b:a0:4a:65:3d:47:ad:
96:64:6c:77:9d:8d:83:1e:e9:e5:5b:bd:6f:ac:3a:
23:c5:5d:db:d2:96:5a:47:7b:28:ca:2c:cd:d4:50:
ca:68:0e:7d:3c:91:48:89:52:4d:25:74:d1:3c:8d:
22:90:8a:4c:17:13:e3:4e:69:cf:66:d5:5f:c7:0a:
96:28:d4:39:7d:48:ee:07:89:a9:7b:7c:f1:d3:00:
ad:c5:be:8a:e6:0d:1d:c4:c5:18:86:79:64:85:fb:
9c:9b:83:59:07:fd:0e:4e:b1:7c:55:b1:67:39:9d:
b2:74:9f:f2:79:c4:f3:72:36:d9:0f:e4:ee:de:75:
f1:6c:63:35:43:c8:92:6f:9f:f8:46:90:fc:c5:f6:
2e:8c:c8:30:c9:3d:35:67:a6:92:78:51:e0:37:db:
62:31:2b:10:ba:6d:0e:f8:2b:26:47:80:89:5a:aa:
11:28:16:31:78:e3:60:e5:25:1b:2d:f8:d8:16:ea:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E6:23:4E:AA:45:A5:1F:AC:39:81:55:34:3F:C2:AD:16:68:BB:E5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS141892.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c6::/48
Signature Algorithm: sha256WithRSAEncryption
e3:4e:73:47:21:35:51:a0:04:3c:c7:3e:9f:3f:d3:13:32:c0:
c7:89:2d:8a:72:a3:9c:30:c7:40:0d:59:32:47:12:dc:11:f4:
5a:3a:40:da:8a:e0:ac:11:7c:5d:83:ce:1d:8b:d4:ce:07:99:
6b:23:be:b2:53:0d:ca:d1:84:26:9d:c1:24:88:3c:7a:67:73:
3d:bb:f0:ab:02:03:0b:03:ae:69:66:c7:95:ed:22:ac:03:60:
8a:79:d3:78:b1:ff:89:76:d9:3e:7c:c1:8c:fa:58:7e:db:2d:
04:9d:3d:7d:2e:72:fe:d1:bc:78:f6:98:aa:b8:98:2a:ad:16:
7b:f3:71:3f:ae:20:e4:02:e9:ee:a7:bf:dc:42:15:a2:e2:11:
4a:3d:12:07:ae:17:67:97:dc:4a:0f:8a:67:d6:70:29:49:70:
02:57:ac:8d:53:b3:dc:16:82:a9:fb:4c:56:69:8b:fb:6d:80:
c5:74:61:4d:5e:2e:5e:60:33:51:64:f8:f7:37:1c:8f:1c:4e:
fb:b1:2a:3f:89:01:73:b9:7e:69:36:ed:de:b4:0e:8f:67:11:
a8:35:e6:87:d2:aa:b8:22:c7:90:e7:25:6c:8a:e8:36:8e:30:
5a:29:f4:d5:87:ab:75:0f:10:73:25:27:50:fa:3f:5d:22:56:
2d:ef:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org