Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207764.roa
File: AS207764.roa (raw, json)
Hash identifier: tqyv2qlV52DSuvKJe8zVnhJeF87SW0o34vr4cBTIiZw=
Subject key identifier: 1A:64:32:86:6C:71:E4:CD:F6:CA:14:D9:92:42:EC:5C:F8:19:47:01
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 39BEFDED56F6A4E24D6750C0505FB3FF4C032418
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207764.roa
Signing time: Fri 23 Aug 2024 08:01:22 +0000
ROA not before: Fri 23 Aug 2024 07:56:22 +0000
ROA not after: Fri 22 Aug 2025 08:01:22 +0000
asID: 207764
IP address blocks: 2a0f:85c1:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:be:fd:ed:56:f6:a4:e2:4d:67:50:c0:50:5f:b3:ff:4c:03:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:22 2024 GMT
Not After : Aug 22 08:01:22 2025 GMT
Subject: CN=1A6432866C71E4CDF6CA14D99242EC5CF8194701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:32:e8:10:ec:b1:5f:09:95:ad:43:dd:87:b4:
b0:cb:91:54:08:fd:61:2f:26:c5:53:b5:d1:a8:a6:
94:99:64:c5:f8:62:18:d3:ef:a5:ce:1e:8f:95:bb:
c7:4c:76:51:38:1c:d9:3a:ac:15:e6:c7:4b:4b:5c:
ed:a6:eb:0d:0b:d6:d2:69:fa:61:cb:f1:b2:ba:a0:
2e:d1:8f:d8:ba:2b:0d:1a:76:aa:86:f0:00:79:f2:
1b:ca:79:ac:00:2a:fd:50:4f:78:30:18:a0:e8:cd:
35:5b:f2:4d:a7:a3:e2:c7:ff:ff:5a:da:49:be:1e:
df:ce:da:19:f4:d3:44:69:0d:fa:bd:6b:d7:8a:0c:
b6:55:fe:97:df:b5:fe:fb:d5:75:42:64:f0:76:5b:
02:d9:f1:0d:c5:f8:11:03:56:d8:2e:a9:82:26:c8:
a2:06:32:3f:ac:2e:41:da:af:f0:73:04:f5:26:44:
bb:9b:e5:06:b6:85:0e:a8:f6:5d:98:ca:04:60:4d:
d0:ba:bf:af:ab:5c:62:9a:54:81:b1:a0:dc:94:d3:
c4:27:dd:c4:dc:7a:f9:9e:92:af:c0:86:ce:8b:7b:
10:ce:82:3a:d2:0c:d3:34:d8:1c:bb:b2:34:27:75:
51:73:4b:59:43:93:0a:fd:92:ae:b9:7e:2f:43:ed:
0a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:32:86:6C:71:E4:CD:F6:CA:14:D9:92:42:EC:5C:F8:19:47:01
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:20::/48
Signature Algorithm: sha256WithRSAEncryption
07:e1:9f:43:0e:c0:5c:3f:69:3c:43:12:56:c1:91:9b:25:51:
16:3c:8a:3c:b2:f7:86:c2:d0:43:bc:d1:1f:7b:f2:3a:cb:1d:
c0:df:0f:9c:a4:88:81:6b:89:2b:80:7d:03:9e:f8:14:27:ea:
d6:3a:5d:2a:9b:2c:4a:d9:ac:72:a2:ca:46:af:7e:17:49:80:
17:ee:44:c6:57:d1:26:8c:32:89:1a:ef:15:d0:b4:06:f8:9b:
bc:10:54:7d:39:39:30:71:08:ef:51:60:25:fc:b6:29:ed:7b:
64:54:c1:34:dc:67:27:c1:d0:8f:c7:6e:08:00:7d:60:15:9f:
76:af:bc:25:dc:ba:f3:be:d7:ea:b6:39:58:d1:a5:ec:6e:d1:
6b:a2:d9:cc:b1:29:ec:ac:80:7a:1e:55:ae:65:e2:2e:4f:7c:
97:d0:f3:88:19:b0:1e:05:5d:78:44:72:b8:7b:82:a2:f4:af:
21:20:34:b0:5b:0d:93:28:21:2d:f3:13:75:eb:4e:3d:fe:33:
a8:af:e1:6c:4f:a4:7c:93:d1:7b:45:26:15:5d:d1:9b:60:f5:
4c:92:4c:64:88:2c:c0:07:66:5d:fa:57:6c:2d:da:de:0a:2e:
e7:82:66:51:ca:e4:ac:52:aa:be:f4:81:f1:c8:53:68:5a:2a:
34:6b:aa:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUOb797Vb2pOJNZ1DAUF+z/0wDJBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjJaFw0yNTA4MjIwODAxMjJaMDMxMTAvBgNV
BAMTKDFBNjQzMjg2NkM3MUU0Q0RGNkNBMTREOTkyNDJFQzVDRjgxOTQ3MDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhMugQ7LFfCZWtQ92HtLDLkVQI
/WEvJsVTtdGoppSZZMX4YhjT76XOHo+Vu8dMdlE4HNk6rBXmx0tLXO2m6w0L1tJp
+mHL8bK6oC7Rj9i6Kw0adqqG8AB58hvKeawAKv1QT3gwGKDozTVb8k2no+LH//9a
2km+Ht/O2hn000RpDfq9a9eKDLZV/pfftf771XVCZPB2WwLZ8Q3F+BEDVtguqYIm
yKIGMj+sLkHar/BzBPUmRLub5Qa2hQ6o9l2YygRgTdC6v6+rXGKaVIGxoNyU08Qn
3cTcevmekq/Ahs6LexDOgjrSDNM02By7sjQndVFzS1lDkwr9kq65fi9D7QpXAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUGmQyhmxx5M32yhTZkkLsXPgZRwEwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA3NzY0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQAgMA0GCSqGSIb3DQEBCwUAA4IBAQAH4Z9DDsBcP2k8QxJWwZGbJVEWPIo8sveG
wtBDvNEfe/I6yx3A3w+cpIiBa4krgH0DnvgUJ+rWOl0qmyxK2axyospGr34XSYAX
7kTGV9EmjDKJGu8V0LQG+Ju8EFR9OTkwcQjvUWAl/LYp7XtkVME03GcnwdCPx24I
AH1gFZ92r7wl3LrzvtfqtjlY0aXsbtFrotnMsSnsrIB6HlWuZeIuT3yX0POIGbAe
BV14RHK4e4Ki9K8hIDSwWw2TKCEt8xN16049/jOor+FsT6R8k9F7RSYVXdGbYPVM
kkxkiCzAB2Zd+ldsLdreCi7ngmZRyuSsUqq+9IHxyFNoWio0a6pu
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org