Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207451.roa
File: AS207451.roa (raw, json)
Hash identifier: ydts4p8ZZEmkKySkvc8EMM64QlGLftHxAcFhbtWh3S0=
Subject key identifier: 38:16:7F:5F:E3:43:81:CB:BD:64:B3:24:4E:17:B3:6A:32:90:6F:52
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5888E13972468F5C85A0C3D16DC46510397EC77A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207451.roa
Signing time: Fri 23 Aug 2024 08:01:16 +0000
ROA not before: Fri 23 Aug 2024 07:56:16 +0000
ROA not after: Fri 22 Aug 2025 08:01:16 +0000
asID: 207451
IP address blocks: 2a0f:85c1:213::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:88:e1:39:72:46:8f:5c:85:a0:c3:d1:6d:c4:65:10:39:7e:c7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:16 2024 GMT
Not After : Aug 22 08:01:16 2025 GMT
Subject: CN=38167F5FE34381CBBD64B3244E17B36A32906F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:83:cb:18:e6:c6:04:e1:98:ca:3d:64:a6:
0c:a9:8d:b4:ee:db:b2:39:30:fb:22:03:91:80:f7:
db:b0:f6:f9:64:71:e6:c3:f0:00:ae:e0:2d:1b:ab:
a7:0c:e8:56:14:f0:cc:27:f8:5d:62:99:03:41:34:
97:eb:9c:b8:75:df:ce:d7:74:7b:14:9d:1f:09:da:
21:ce:fd:53:e9:18:23:1b:90:47:fc:d8:bf:67:66:
25:a5:10:c9:8d:9c:6f:7e:e0:b3:4d:aa:bd:7f:81:
46:5c:30:ad:c9:a4:58:65:00:a3:ac:cc:49:50:d3:
a9:d7:0f:dd:3f:4e:45:b6:10:d9:05:e9:f5:a6:36:
bb:7a:18:18:89:fc:4e:8d:25:70:13:8c:c1:9a:57:
00:b9:8f:2e:9b:9c:e2:40:80:3a:de:11:c9:0b:c5:
f8:cc:f1:90:7c:7d:d5:5e:02:47:bb:22:e7:74:3b:
63:6b:fd:fd:39:42:56:6b:eb:1f:dd:9c:f3:ad:6f:
ff:1a:32:cc:b8:4c:ac:51:ba:7c:b3:e2:b6:0a:66:
2f:47:69:ca:db:bc:84:fd:3d:06:81:d2:0e:2a:ad:
08:2e:a4:ab:58:c0:f7:f2:28:1a:0e:e3:52:b6:29:
79:1c:65:13:ab:60:fa:d8:4d:14:bf:d2:67:cf:37:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:16:7F:5F:E3:43:81:CB:BD:64:B3:24:4E:17:B3:6A:32:90:6F:52
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207451.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:213::/48
Signature Algorithm: sha256WithRSAEncryption
79:2e:23:8f:0a:bb:2d:ce:80:cc:a7:57:fd:96:20:fe:da:2b:
b7:85:65:ce:fe:90:ee:8e:7d:25:55:6e:37:1a:12:82:41:d2:
91:d6:4f:5e:61:c6:57:90:0f:c7:0f:b3:42:1a:8f:87:67:9a:
9d:8c:cb:84:f3:bf:27:b0:7c:ea:85:80:5d:fc:f3:34:99:a2:
3e:da:22:27:01:0e:08:7b:0f:da:ad:51:5f:03:70:4e:be:74:
39:36:17:f8:9a:38:1c:b7:7b:8a:27:02:78:2c:96:d5:fa:e0:
41:be:80:5b:a7:f7:f5:d3:10:45:7a:8c:1b:cd:cf:cc:0a:a9:
5c:da:99:79:65:b2:1c:ef:e6:22:ea:08:b5:bc:2f:fe:99:cb:
86:1c:e0:20:e5:cf:3d:1a:a3:9c:70:ad:23:c8:26:45:fc:f1:
79:2f:7a:b6:82:92:c0:39:ec:e7:4f:32:73:64:1e:51:30:91:
c8:45:b4:4e:c9:76:1e:2b:96:9e:90:7b:ec:66:9e:33:4b:d5:
42:42:9d:c2:66:2a:22:da:e3:b5:1c:41:4b:d8:42:0d:45:53:
dd:4c:30:ff:5a:32:46:90:cd:e0:26:90:b0:4b:4e:07:a6:84:
1d:8c:9b:00:fa:02:4e:cc:af:b8:59:03:d1:40:d8:b1:63:0b:
19:5b:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org