Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
File: AS197649.roa (raw, json)
Hash identifier: hsij4WZOJgmAkUoqPHMpkOyubxfHkRhaMf8zYlYc+aI=
Subject key identifier: 92:DB:20:41:F9:37:52:2D:15:70:C7:38:61:98:CE:4A:25:86:C6:E6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5551D8A149AFB2AABDCB66FCA9E7DE9068B8235D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
Signing time: Wed 16 Oct 2024 03:03:38 +0000
ROA not before: Wed 16 Oct 2024 02:58:38 +0000
ROA not after: Wed 15 Oct 2025 03:03:38 +0000
asID: 197649
IP address blocks: 2a0f:85c1:8bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:51:d8:a1:49:af:b2:aa:bd:cb:66:fc:a9:e7:de:90:68:b8:23:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 16 02:58:38 2024 GMT
Not After : Oct 15 03:03:38 2025 GMT
Subject: CN=92DB2041F937522D1570C7386198CE4A2586C6E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:86:71:eb:4e:05:66:67:fc:c1:54:a2:d1:
13:c1:5b:86:73:1c:60:05:d6:2c:fe:fa:83:61:b0:
5b:05:41:fe:a3:a2:c8:be:f5:67:9b:7d:e6:4c:0b:
21:83:60:6f:fb:ab:6b:c5:0e:ff:db:a8:10:df:5f:
00:82:f9:33:a6:25:34:2f:f3:dc:98:ff:5e:32:16:
8e:94:9c:65:c7:96:2c:50:fe:51:81:ca:f8:c6:01:
f0:85:73:b8:c2:19:ce:fc:f3:4c:a5:05:0d:47:75:
a5:32:71:3b:03:79:c5:13:c9:7d:97:8e:76:00:55:
a8:71:c9:67:f1:2a:09:d5:e6:6a:a8:5d:27:7c:75:
77:6b:da:23:e2:ce:9d:b4:6b:1b:8b:5f:d8:f2:fc:
f3:05:2f:4c:78:20:0b:2e:8d:e6:0a:fb:b7:8e:f7:
f2:d8:f6:a1:49:4e:ef:1b:31:f8:fc:f3:2d:a5:03:
47:fa:86:c6:3b:0d:a5:49:44:ec:d8:fd:48:68:56:
8d:d9:18:5c:18:ee:aa:3f:f8:90:af:2a:10:dc:7f:
1b:70:7d:7b:7b:77:3b:26:41:8d:f6:53:4d:a0:4d:
a7:48:a8:20:25:10:0b:a7:5d:7e:7b:92:7e:70:01:
97:73:7f:ae:20:0b:fd:ae:19:11:71:9a:55:d7:45:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DB:20:41:F9:37:52:2D:15:70:C7:38:61:98:CE:4A:25:86:C6:E6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS197649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8bc::/48
Signature Algorithm: sha256WithRSAEncryption
01:48:94:f2:69:3d:e0:fa:13:ba:a0:1c:2f:37:a1:51:2c:9e:
44:db:1d:3d:a3:14:f9:68:8d:4d:a4:0f:6d:8a:a3:78:41:3c:
92:17:8f:a4:ad:eb:18:c6:7a:d1:b3:e9:c3:86:bf:c2:f9:f0:
40:86:8d:5a:09:a9:1f:1e:61:a8:f7:56:8c:d4:47:6c:32:7e:
e5:c0:eb:3f:47:7a:c7:29:1e:6e:61:4e:a9:4a:3f:fd:22:08:
0d:ea:ac:c0:0f:8f:56:bf:c7:87:51:dd:c7:3b:37:9b:f4:82:
01:be:98:ff:89:1c:8f:45:79:4b:23:f9:d4:92:fb:27:c1:fc:
cb:92:91:02:93:99:ee:7e:f2:71:e8:73:70:dc:73:15:0b:f0:
61:50:85:b2:30:d5:97:9b:8c:89:cc:bb:e5:64:26:f8:f1:30:
e7:2c:69:a9:4f:54:1f:37:8e:1b:b7:f0:fa:86:f1:6e:4c:7d:
dc:8b:2f:f0:9f:3d:d0:ee:a4:15:36:3e:fd:8d:20:d9:8d:04:
be:3a:df:7c:b5:b9:f9:46:33:04:e9:20:6f:a3:20:a1:ce:e5:
eb:0a:00:fd:e6:f1:0d:fb:e9:0f:92:b5:e3:91:79:73:cc:d4:
1c:d4:59:7f:0d:0f:61:52:74:51:1d:3a:b6:b7:55:33:ef:74:
5e:b4:aa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:14:14 2024 by rpki-client on console-ams.rpki-client.org