Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209552.roa
File: AS209552.roa (raw, json)
Hash identifier: PhheE+UJlBiZ5on6m0HlHjNUKKRc49M7CyU4hsQKLak=
Subject key identifier: CF:0C:1C:61:D9:35:BB:A1:10:23:C2:EE:5E:E8:55:99:38:16:C5:BC
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4AFF7FE7F8F7D61A1C941BA86A99C2A90A18A4F6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209552.roa
Signing time: Fri 23 Aug 2024 08:01:21 +0000
ROA not before: Fri 23 Aug 2024 07:56:21 +0000
ROA not after: Fri 22 Aug 2025 08:01:21 +0000
asID: 209552
IP address blocks: 2a0f:85c1:51::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ff:7f:e7:f8:f7:d6:1a:1c:94:1b:a8:6a:99:c2:a9:0a:18:a4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:21 2024 GMT
Not After : Aug 22 08:01:21 2025 GMT
Subject: CN=CF0C1C61D935BBA11023C2EE5EE855993816C5BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:6d:72:16:e7:74:bc:2f:89:a7:21:a4:f6:
a2:1f:88:46:28:76:d4:2f:f3:55:03:2b:aa:78:cc:
6d:da:4e:cd:dd:1e:9a:eb:05:dd:ea:2c:e9:dd:ec:
93:5b:36:2b:e4:62:b5:43:24:a9:e9:6e:d2:32:fe:
73:f0:88:2c:a4:65:9c:78:e0:d4:c1:1d:62:8c:c9:
ce:74:3e:e2:24:2e:69:15:82:f6:b4:91:5a:2c:cb:
72:ec:5d:ff:a6:3c:77:b9:af:f7:8f:c9:5c:18:bc:
70:a2:a3:5c:2d:f8:eb:ce:f3:0d:e7:e7:53:d3:bb:
4c:b3:c1:46:7d:f0:5a:29:57:74:72:bd:5d:ff:64:
c5:10:80:68:c7:17:c8:cd:82:6c:04:0c:17:7d:cb:
a2:ef:ee:28:f0:f6:23:18:2e:f2:f4:34:7b:09:93:
9a:09:c3:85:0c:74:97:ee:27:f6:83:1f:3f:2f:e7:
ca:ae:a8:87:3a:19:aa:1c:6d:94:67:79:4f:c6:0e:
f9:c4:61:93:59:f9:14:c0:9e:b7:39:90:05:34:f0:
4f:7c:b2:6b:88:ca:3f:2d:7f:24:21:73:97:34:6d:
76:54:e5:be:a1:a8:91:8b:75:10:0a:45:01:2b:70:
70:41:32:85:bf:f5:56:2d:19:9a:b1:84:85:3d:8e:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0C:1C:61:D9:35:BB:A1:10:23:C2:EE:5E:E8:55:99:38:16:C5:BC
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS209552.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:51::/48
Signature Algorithm: sha256WithRSAEncryption
dc:e7:6f:98:93:81:a2:23:08:1d:f0:41:11:55:40:eb:1d:e0:
23:6c:cd:5d:89:54:0c:64:d6:a6:1e:4a:e4:d8:9a:3d:0e:27:
7b:ea:48:c1:97:ed:19:c2:a0:89:20:1b:65:7a:6f:68:cf:d9:
6f:7e:8e:8b:d8:56:a5:2e:d4:f2:9f:1b:20:af:e0:c8:2a:87:
ff:11:b1:99:15:d1:68:0f:34:50:99:c6:ab:35:f6:59:d2:dd:
ca:4d:90:47:f2:37:b9:ff:9b:ef:9e:ca:33:5e:81:fe:08:c7:
ee:0c:42:2e:47:a1:ca:0c:49:00:a6:55:2e:e1:25:01:07:94:
7e:74:1c:6f:ed:60:a8:21:cd:67:2a:5c:2c:de:ed:c3:55:3a:
48:cd:9f:1f:23:fd:2b:86:88:bd:6e:5c:c2:46:fa:3a:f8:93:
b1:0a:16:c4:f1:30:19:ce:66:46:7c:1c:90:75:04:da:7e:9e:
53:b6:ae:8f:0b:b8:d8:6c:7e:45:b4:7d:1a:82:82:63:a9:e6:
7c:89:16:ba:45:6f:6a:20:8c:ac:fe:01:76:31:fb:bc:db:1e:
e4:ee:8a:fe:ad:12:61:2e:ab:8a:3b:4e:90:ee:2f:5e:bf:59:
f1:6f:a7:43:5d:d3:78:d7:45:24:de:b3:8e:fb:39:ad:4b:11:
e3:10:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org