Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207781.roa
File: AS207781.roa (raw, json)
Hash identifier: /A9lKhnSomBdOQ3xREMuUhg9DRstlus7+MHaNuxOxd4=
Subject key identifier: 3E:D9:19:A1:58:F7:BC:1F:D7:13:D8:C6:55:99:A3:B5:5A:D7:D9:76
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 383597704051042257C89F7F4F0F8FDEA5827A4B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207781.roa
Signing time: Fri 23 Aug 2024 08:01:18 +0000
ROA not before: Fri 23 Aug 2024 07:56:18 +0000
ROA not after: Fri 22 Aug 2025 08:01:18 +0000
asID: 207781
IP address blocks: 2a0f:85c1:beef::/48 maxlen: 48
2a0f:85c1:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:35:97:70:40:51:04:22:57:c8:9f:7f:4f:0f:8f:de:a5:82:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:18 2024 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=3ED919A158F7BC1FD713D8C65599A3B55AD7D976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:a0:06:e5:4a:f4:56:b0:e9:69:97:e7:08:
6a:ca:ec:92:63:01:aa:62:a1:06:0b:fe:ec:0a:30:
8d:c8:5d:8b:7e:d1:17:ff:d5:81:87:c8:34:a5:4d:
c1:1d:f1:78:9c:d5:4a:8c:f2:48:6c:28:6e:30:a7:
aa:93:47:4e:19:3a:6b:12:74:19:47:ee:b9:9b:5d:
8c:76:2d:10:a1:82:f2:aa:36:81:a4:41:80:dd:ef:
51:b4:e3:d3:85:6a:ed:2b:8c:6e:0d:9f:44:5a:30:
9b:73:77:a1:25:44:83:07:2a:d6:aa:4c:4e:f3:29:
99:dc:07:d4:62:2e:c1:e6:c9:6f:b3:d1:fe:1b:a7:
3d:47:f3:48:5b:7e:6f:ce:30:6f:ce:94:0d:51:25:
61:02:60:6c:91:8b:e4:86:69:ff:9e:5b:b3:36:61:
86:92:29:42:45:b3:4b:40:3b:f0:6e:9d:5e:f7:2f:
07:9e:9f:3c:96:2a:d9:81:86:91:2d:eb:bb:c2:ca:
f0:c2:73:fd:b5:24:3e:31:e8:94:78:70:76:4f:cb:
f2:a9:3f:62:ba:f3:e0:07:cc:15:26:5a:15:ed:62:
df:ee:83:62:3a:30:98:fd:d4:7f:3f:bd:0d:ac:a8:
57:fa:dc:ae:6d:6d:0e:37:08:90:13:bb:d4:f7:ac:
06:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:19:A1:58:F7:BC:1F:D7:13:D8:C6:55:99:A3:B5:5A:D7:D9:76
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS207781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:beef::/48
2a0f:85c1:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
31:57:a4:6f:b1:5b:a1:60:d3:6a:bc:78:34:4e:24:fb:50:d9:
1c:7e:e0:62:bc:90:51:ae:0d:3a:ac:bf:77:9f:5d:aa:a5:04:
ce:3b:1f:61:37:3c:05:8a:f8:01:a8:f5:8a:1f:ac:9f:3c:0e:
c8:8c:38:c1:8d:58:bb:df:75:53:53:cf:8f:b8:69:05:bf:ec:
06:0a:f2:99:38:40:ab:0c:f6:05:aa:ac:1a:dc:f0:84:9c:9a:
3c:cb:61:28:62:c2:06:81:ef:51:d4:b4:11:29:bd:37:3a:32:
e9:68:3d:5f:69:30:2d:e7:c4:88:18:3a:34:09:48:01:e1:72:
a4:49:2f:22:a6:4a:c9:d8:e7:79:18:11:9a:33:8d:4b:73:fb:
48:a4:7f:ff:e8:3f:15:c2:9a:ae:82:31:f0:aa:d6:f9:d1:19:
f3:f6:0b:9b:63:5e:10:35:41:1c:0c:93:58:3a:7f:74:9d:ff:
ba:5e:e6:46:b4:c4:cc:15:00:2c:07:3c:74:c4:d6:1e:a5:82:
60:b4:ac:40:03:0e:fb:f5:d7:b0:6f:7a:c4:80:40:b3:e0:b3:
20:01:d9:a5:78:10:29:5f:b8:cb:e7:28:bd:5a:0e:14:72:6d:
6a:04:63:9b:86:03:f6:9f:8d:f9:d7:72:22:39:2b:21:97:36:
0f:ba:16:d7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUODWXcEBRBCJXyJ9/Tw+P3qWCekswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MThaFw0yNTA4MjIwODAxMThaMDMxMTAvBgNV
BAMTKDNFRDkxOUExNThGN0JDMUZENzEzRDhDNjU1OTlBM0I1NUFEN0Q5NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDplKAG5Ur0VrDpaZfnCGrK7JJj
AapioQYL/uwKMI3IXYt+0Rf/1YGHyDSlTcEd8Xic1UqM8khsKG4wp6qTR04ZOmsS
dBlH7rmbXYx2LRChgvKqNoGkQYDd71G049OFau0rjG4Nn0RaMJtzd6ElRIMHKtaq
TE7zKZncB9RiLsHmyW+z0f4bpz1H80hbfm/OMG/OlA1RJWECYGyRi+SGaf+eW7M2
YYaSKUJFs0tAO/BunV73LweenzyWKtmBhpEt67vCyvDCc/21JD4x6JR4cHZPy/Kp
P2K68+AHzBUmWhXtYt/ug2I6MJj91H8/vQ2sqFf63K5tbQ43CJATu9T3rAYfAgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUPtkZoVj3vB/XE9jGVZmjtVrX2XYwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA3NzgxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg+F
wb7vAwcAKg+Fwcr+MA0GCSqGSIb3DQEBCwUAA4IBAQAxV6RvsVuhYNNqvHg0TiT7
UNkcfuBivJBRrg06rL93n12qpQTOOx9hNzwFivgBqPWKH6yfPA7IjDjBjVi733VT
U8+PuGkFv+wGCvKZOECrDPYFqqwa3PCEnJo8y2EoYsIGge9R1LQRKb03OjLpaD1f
aTAt58SIGDo0CUgB4XKkSS8ipkrJ2Od5GBGaM41Lc/tIpH//6D8VwpqugjHwqtb5
0Rnz9gubY14QNUEcDJNYOn90nf+6XuZGtMTMFQAsBzx0xNYepYJgtKxAAw779dew
b3rEgECz4LMgAdmleBApX7jL5yi9Wg4Ucm1qBGObhgP2n43513IiOSshlzYPuhbX
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org