Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208751.roa
File: AS208751.roa (raw, json)
Hash identifier: AElsmiK/fvPirAKCPM4uOEm7aK4T0tSh3ZzXLrDcgww=
Subject key identifier: 24:BF:2F:9C:3B:05:A2:BE:A1:D1:0C:1E:B4:D6:97:86:A8:E9:36:62
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1110B874774EB80CA87C068FFFF97113BB5E05D7
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208751.roa
Signing time: Fri 23 Aug 2024 08:01:27 +0000
ROA not before: Fri 23 Aug 2024 07:56:27 +0000
ROA not after: Fri 22 Aug 2025 08:01:27 +0000
asID: 208751
IP address blocks: 2a0f:85c0:910::/44 maxlen: 44
2a0f:85c1:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:10:b8:74:77:4e:b8:0c:a8:7c:06:8f:ff:f9:71:13:bb:5e:05:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:27 2024 GMT
Not After : Aug 22 08:01:27 2025 GMT
Subject: CN=24BF2F9C3B05A2BEA1D10C1EB4D69786A8E93662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:41:cf:4c:c4:9b:58:d6:8c:53:aa:64:95:
3c:3c:99:62:9e:cd:b3:44:d0:08:d5:92:7b:2d:d3:
57:69:da:fa:a3:9a:7d:1d:a6:7a:b2:9b:84:07:3c:
dc:26:cb:35:3b:1e:09:d3:38:05:10:7e:25:8f:6a:
c3:be:76:aa:6f:46:52:c4:bb:a3:39:7c:7b:5f:f3:
ec:9a:d2:c6:bd:4d:ac:e8:7b:46:6e:51:78:ca:b4:
6e:21:b8:33:a8:ca:be:ca:9a:04:08:45:3e:d3:8f:
c2:0e:a5:e3:c9:c5:ef:10:73:48:75:16:ce:c5:8b:
0a:e3:4f:27:cd:e5:f4:e9:46:ec:b2:8c:18:90:29:
7b:bf:cb:b7:5d:b8:d9:81:cc:55:61:cd:82:9e:74:
25:d9:45:e8:3d:ca:96:34:8c:fb:0a:aa:b9:31:b5:
0e:b7:5b:c6:41:65:2c:c4:f0:76:33:88:db:64:5c:
d6:9d:da:a2:92:c9:f1:4f:69:61:62:c1:72:bc:c8:
f1:d3:9a:f0:90:94:0e:a2:6a:e3:97:4c:95:58:a4:
e2:45:d3:ad:9c:be:1c:79:1a:29:3d:3a:dc:f1:70:
76:d2:0f:24:81:66:89:93:9a:bb:cb:8d:c6:2b:3b:
20:4a:3d:21:c9:74:56:4e:a7:5c:78:ef:33:47:2e:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:2F:9C:3B:05:A2:BE:A1:D1:0C:1E:B4:D6:97:86:A8:E9:36:62
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS208751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c0:910::/44
2a0f:85c1:10::/44
Signature Algorithm: sha256WithRSAEncryption
8d:2c:c2:71:2d:76:dd:46:ac:b9:2e:cf:13:a0:c3:6a:d0:52:
6e:6d:8f:df:5e:2c:a9:5c:62:67:f7:38:54:00:dc:ae:22:61:
c9:e9:8a:44:0a:7a:2a:ad:6c:70:e2:62:58:10:57:4e:d7:dd:
23:fd:7b:0a:08:0a:cb:17:82:b2:b0:22:bf:b8:5b:65:56:0b:
ae:49:c5:3a:38:30:6f:14:9c:aa:06:07:b8:d8:5f:17:a2:05:
b8:42:fa:40:55:ac:f3:70:3d:68:d4:29:da:bf:ec:81:00:18:
85:d7:b9:48:38:2d:89:76:4b:38:82:c8:d8:4e:2f:4d:b1:c1:
fd:cd:86:56:7b:97:27:2d:19:8d:ca:98:90:d6:48:3c:6b:3b:
97:84:e3:d8:49:6f:ac:c0:d9:33:9f:44:ad:c4:3b:05:4a:d7:
eb:67:25:8f:3e:41:c7:f5:e7:3a:8a:f0:8e:2f:55:1c:1b:66:
3c:04:f9:3f:02:9f:c6:29:8e:92:7e:14:81:3a:6d:c9:f1:91:
f0:2c:bf:3b:9d:7a:dd:09:40:8e:4e:1f:63:92:b8:a8:b8:05:
ff:4a:3b:ad:05:75:46:cc:28:e5:1e:23:2d:7b:c1:bd:f1:63:
0e:c0:d3:4c:b5:ae:f4:50:53:94:fc:2e:ca:9c:f8:31:66:64:
2a:fb:48:02
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIUERC4dHdOuAyofAaP//lxE7teBdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjdaFw0yNTA4MjIwODAxMjdaMDMxMTAvBgNV
BAMTKDI0QkYyRjlDM0IwNUEyQkVBMUQxMEMxRUI0RDY5Nzg2QThFOTM2NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsUHPTMSbWNaMU6pklTw8mWKe
zbNE0AjVknst01dp2vqjmn0dpnqym4QHPNwmyzU7HgnTOAUQfiWPasO+dqpvRlLE
u6M5fHtf8+ya0sa9Tazoe0ZuUXjKtG4huDOoyr7KmgQIRT7Tj8IOpePJxe8Qc0h1
Fs7FiwrjTyfN5fTpRuyyjBiQKXu/y7dduNmBzFVhzYKedCXZReg9ypY0jPsKqrkx
tQ63W8ZBZSzE8HYziNtkXNad2qKSyfFPaWFiwXK8yPHTmvCQlA6iauOXTJVYpOJF
062cvhx5Gik9OtzxcHbSDySBZomTmrvLjcYrOyBKPSHJdFZOp1x47zNHLqY9AgMB
AAGjggIWMIICEjAdBgNVHQ4EFgQUJL8vnDsFor6h0QwetNaXhqjpNmIwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjA4NzUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg+F
wAkQAwcEKg+FwQAQMA0GCSqGSIb3DQEBCwUAA4IBAQCNLMJxLXbdRqy5Ls8ToMNq
0FJubY/fXiypXGJn9zhUANyuImHJ6YpECnoqrWxw4mJYEFdO190j/XsKCArLF4Ky
sCK/uFtlVguuScU6ODBvFJyqBge42F8XogW4QvpAVazzcD1o1Cnav+yBABiF17lI
OC2Jdks4gsjYTi9NscH9zYZWe5cnLRmNypiQ1kg8azuXhOPYSW+swNkzn0StxDsF
StfrZyWPPkHH9ec6ivCOL1UcG2Y8BPk/Ap/GKY6SfhSBOm3J8ZHwLL87nXrdCUCO
Th9jkriouAX/SjutBXVGzCjlHiMte8G98WMOwNNMta70UFOU/C7KnPgxZmQq+0gC
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org