Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
File: AS210376.roa (raw, json)
Hash identifier: ui6mfQMBuusvtwhmlv+ws3hAQrAdY8WA9Gwi4EtLQx4=
Subject key identifier: 69:4D:30:D8:07:BC:68:84:7E:23:FC:A9:B5:77:21:11:E3:C6:0C:A5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2F37480AB7025AC438270B75A56F91EDD3766588
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
Signing time: Fri 23 Aug 2024 08:01:22 +0000
ROA not before: Fri 23 Aug 2024 07:56:22 +0000
ROA not after: Fri 22 Aug 2025 08:01:22 +0000
asID: 210376
IP address blocks: 2a0f:85c1:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:37:48:0a:b7:02:5a:c4:38:27:0b:75:a5:6f:91:ed:d3:76:65:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:22 2024 GMT
Not After : Aug 22 08:01:22 2025 GMT
Subject: CN=694D30D807BC68847E23FCA9B5772111E3C60CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:80:45:9b:37:e8:f8:8e:3b:7c:af:39:2c:84:
67:a7:91:67:46:41:27:04:32:12:d9:ca:39:82:c3:
b8:27:c1:a7:3a:85:a8:4c:0b:49:59:55:c7:8e:32:
52:e9:3f:43:d7:82:9c:e8:7f:0e:48:bc:91:1d:eb:
04:7f:74:53:25:70:9a:9f:82:94:9c:24:ad:fe:bf:
58:de:23:e3:c6:6b:77:2d:62:10:d6:a2:b5:cc:3a:
90:e0:14:ad:d2:a7:13:ce:6a:93:f6:97:af:76:d7:
2f:43:db:c0:79:1a:ef:8d:5d:b4:42:31:d6:32:38:
c5:3a:24:a0:d0:f0:f5:3d:87:6c:71:ff:fb:df:f2:
25:4d:44:92:5e:76:13:8b:9c:c7:d0:90:43:4b:22:
64:08:2c:ae:d7:cd:33:f2:e3:1d:e8:57:10:fb:bc:
16:3d:7e:e5:58:92:43:cf:06:d7:dc:5e:2d:a5:be:
db:11:79:a2:8e:43:b2:25:09:73:ee:09:5f:9b:ea:
03:6d:1c:23:db:36:dc:3c:4b:4c:70:f4:84:ec:e7:
1b:6a:9d:2d:d2:24:a0:17:64:40:3b:19:cc:78:9e:
46:b1:d7:a8:b3:d0:77:18:36:07:19:ac:0d:75:e4:
fb:df:f0:f6:9f:55:f0:2d:c7:c7:f6:b3:02:6a:fa:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:30:D8:07:BC:68:84:7E:23:FC:A9:B5:77:21:11:E3:C6:0C:A5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS210376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:29::/48
Signature Algorithm: sha256WithRSAEncryption
e6:74:8c:d0:46:49:aa:20:ef:3e:ea:47:75:6d:e2:91:5c:18:
f1:c7:84:cf:9c:50:bf:a0:17:35:37:5f:e8:65:4d:e8:e8:85:
e0:5e:01:31:0c:77:a1:05:dc:d6:d5:2c:43:5d:f7:09:de:c2:
b2:4b:9e:fc:82:18:c3:eb:93:3e:d1:23:5e:1d:e9:67:56:56:
e4:75:0c:a8:af:a8:44:98:8f:47:e9:c6:1f:89:58:81:30:79:
a8:1a:93:6b:67:ab:18:d5:f4:35:94:fd:58:5f:7d:ab:8a:27:
75:36:8b:63:12:47:de:68:66:f5:90:d4:58:83:10:24:e4:84:
84:8e:5b:77:01:6c:af:c8:46:c0:19:b7:09:0c:33:8e:86:eb:
55:40:3a:b1:6a:af:77:2f:6f:d8:99:ca:4b:01:c4:d1:25:59:
5a:c2:43:c6:5e:db:aa:38:4a:ef:e1:04:c6:04:fc:f9:cb:12:
e8:dc:e0:b2:95:8c:81:b5:13:3a:47:45:24:3a:ef:b7:67:9d:
17:9f:d0:bc:80:e5:21:8e:10:4e:e3:b2:09:2e:d5:9b:93:d9:
1b:eb:0a:62:ec:cc:a7:31:eb:c4:a4:79:6e:db:fc:45:dc:3e:
c5:0a:51:3d:3b:3c:1e:40:13:9a:b6:24:3a:29:28:14:6a:7f:
27:ad:de:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org