Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213870.roa
File: AS213870.roa (raw, json)
Hash identifier: 7u07aJ+Cf5fpz62DS9ZdFNFswLZAL7Os/mv4mVzRFz8=
Subject key identifier: 48:02:40:A7:AF:03:96:25:34:F4:E8:5C:DC:F7:C3:F3:97:65:EA:3D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 61A3F530FB5E724BD5D5FBA17B1985FC78804B75
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213870.roa
Signing time: Tue 26 Nov 2024 02:49:40 +0000
ROA not before: Tue 26 Nov 2024 02:44:40 +0000
ROA not after: Tue 25 Nov 2025 02:49:40 +0000
asID: 213870
IP address blocks: 2a0f:85c1:8cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 20:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a3:f5:30:fb:5e:72:4b:d5:d5:fb:a1:7b:19:85:fc:78:80:4b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 26 02:44:40 2024 GMT
Not After : Nov 25 02:49:40 2025 GMT
Subject: CN=480240A7AF03962534F4E85CDCF7C3F39765EA3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:6f:d7:64:90:b9:d0:f6:9d:07:f5:b1:ec:
ec:e4:5b:d5:d0:ac:b0:00:57:63:0f:32:8d:95:df:
7f:37:cb:83:d8:93:00:62:d3:91:52:2c:01:66:0e:
f3:62:16:a7:72:63:b2:a1:dd:04:c6:4c:1b:19:35:
1c:a3:19:a9:94:9f:66:11:59:be:06:1c:b9:29:69:
fb:31:bb:34:22:1f:54:65:21:0b:6a:44:f7:26:1d:
56:bf:1d:12:7f:fe:56:cb:db:b6:91:3d:cf:4b:72:
c6:c6:f9:7b:cd:6a:60:11:c3:a3:56:1c:8a:ce:5a:
95:db:0b:d0:ad:b6:d2:67:df:ae:97:e4:05:fb:f2:
a5:67:3a:a5:6d:70:e4:95:06:83:cd:11:57:b2:94:
11:38:38:38:48:22:8b:da:59:4d:21:d5:49:5f:84:
e5:e1:8b:83:e7:7a:90:9b:d5:f9:c3:a1:c5:15:87:
ef:3d:5b:0b:cb:3a:70:73:e6:98:aa:c6:09:01:75:
c1:12:2d:d5:15:e4:cb:85:9d:e9:77:65:50:71:3c:
f9:ea:d0:f4:b1:41:4e:d8:c7:09:03:0e:83:55:ab:
cf:54:12:d0:6e:e4:06:59:10:57:ec:49:11:11:0a:
15:d3:b7:b5:b7:e6:ea:6b:42:cd:cd:ff:3c:2f:29:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:40:A7:AF:03:96:25:34:F4:E8:5C:DC:F7:C3:F3:97:65:EA:3D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8cc::/48
Signature Algorithm: sha256WithRSAEncryption
2a:d7:8b:ff:a0:34:cc:97:f9:9a:db:30:72:af:c2:b5:90:c3:
30:13:19:15:ff:7d:b6:8f:dc:05:85:d2:21:fa:8d:e6:24:89:
f2:36:9f:ea:2b:8b:36:c2:e9:56:27:95:fc:1f:26:3c:fd:51:
fc:aa:ac:68:83:69:6e:7c:c3:e2:d8:94:02:1b:c3:70:f7:ce:
e1:13:28:44:ab:d8:aa:dc:7d:33:c7:ab:24:91:54:21:49:f0:
9a:95:f1:d6:1a:7c:a1:69:34:dd:be:b6:6a:8f:c5:51:d6:78:
09:d8:1c:5f:9b:6e:5b:f1:94:3b:1c:a7:2f:3e:c7:c2:4e:9a:
43:5a:70:24:d0:d1:fd:ef:0a:52:53:da:cf:35:ef:92:61:63:
57:c4:98:bd:50:a7:29:9c:83:69:4b:43:e8:3d:cd:40:48:52:
6a:75:0b:b9:ed:7a:f0:2e:3f:ba:f3:07:68:d7:2f:af:fe:b5:
7f:e4:0f:f0:e6:84:9a:7d:3f:b0:24:ed:3b:e0:2f:3d:40:07:
2a:60:3a:fb:4f:87:80:43:51:db:d3:4c:71:ba:03:a9:3d:f4:
26:15:05:88:eb:7e:61:f9:69:fc:99:43:ee:9e:cb:57:c3:36:
9c:b5:0e:9a:8f:85:5c:b8:dd:ca:93:31:86:16:78:f5:92:83:
9c:1d:e8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:54:54 2025 by rpki-client