Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
File: AS213906.roa (raw, json)
Hash identifier: 5SNh1XvcnxGNRELgnoYdTans4LDw55PW6S+FeyCI0+M=
Subject key identifier: F3:34:F0:E9:B1:F3:26:45:29:95:0F:F2:E1:F1:67:B7:43:84:56:70
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 33B3E5B6E44410ABDC3A02EDC25E28DDF448C9D9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
Signing time: Thu 07 Nov 2024 18:09:39 +0000
ROA not before: Thu 07 Nov 2024 18:04:39 +0000
ROA not after: Thu 06 Nov 2025 18:09:39 +0000
asID: 213906
IP address blocks: 2a0f:85c1:8c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b3:e5:b6:e4:44:10:ab:dc:3a:02:ed:c2:5e:28:dd:f4:48:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 7 18:04:39 2024 GMT
Not After : Nov 6 18:09:39 2025 GMT
Subject: CN=F334F0E9B1F3264529950FF2E1F167B743845670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2f:9f:3c:d3:2c:2d:23:0b:f2:a8:62:2b:fd:
ac:35:61:40:31:f2:09:f5:4f:0d:dc:89:c2:eb:41:
60:fe:c5:78:7a:30:51:e0:b8:40:79:c1:25:14:07:
c6:bc:64:74:45:28:a7:1b:df:9f:80:10:6d:ac:47:
17:08:7a:8b:23:60:6a:66:a8:c5:f6:72:9c:9d:84:
df:ba:14:18:f8:f2:c1:39:d4:03:6b:fc:4a:73:de:
45:e4:52:3a:8e:d1:8b:3d:27:b9:7e:cc:9f:2d:a7:
3c:48:24:74:b8:42:ab:e2:e6:ed:a2:19:43:cc:c8:
76:ba:2a:54:70:96:6a:79:e2:b8:98:97:52:86:24:
7b:01:53:57:42:5a:31:3e:ec:14:c0:fc:e3:23:8c:
78:1e:e1:40:d9:3b:a7:16:a5:75:3d:0c:e6:1b:43:
84:f8:d8:1c:c6:f1:05:e7:a7:e3:61:db:74:42:ae:
b4:cb:f0:30:c5:56:47:eb:e8:53:87:c7:fc:5a:b8:
11:6e:5f:ec:1b:19:e0:08:3b:0a:fe:0a:7c:9b:db:
9d:45:49:11:b0:13:da:45:79:68:4a:76:d5:60:b1:
d0:42:25:aa:fb:3e:34:1e:c9:f3:00:31:5b:78:7f:
fd:2d:83:58:1d:b1:30:f0:34:34:77:00:9b:ab:25:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:34:F0:E9:B1:F3:26:45:29:95:0F:F2:E1:F1:67:B7:43:84:56:70
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS213906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:8c5::/48
Signature Algorithm: sha256WithRSAEncryption
46:84:a9:76:53:b7:2b:9a:9a:c5:2c:a8:b7:48:d9:98:95:4e:
80:b2:07:c4:cd:b6:4b:48:67:5c:15:37:93:98:3d:45:fa:36:
69:00:79:05:b4:01:6e:28:5b:73:5b:60:93:8c:5f:ad:81:9c:
00:61:5f:09:54:42:4b:ed:9c:86:18:36:f3:43:b4:4a:b3:34:
a8:22:f0:67:6f:a4:f2:dd:1f:65:11:e2:49:1e:d3:66:85:22:
15:af:e9:48:96:1c:e6:6c:94:21:e1:3d:d6:56:29:55:bd:80:
34:01:36:6c:6d:94:e5:8e:c9:f2:19:15:31:e3:87:8a:e2:0e:
3a:67:97:8f:db:11:ff:ef:dd:b4:3d:1c:64:47:19:7f:cb:a0:
42:39:73:07:3c:90:08:9a:ad:ab:3a:15:01:1d:2a:2a:50:f3:
62:67:d0:b8:bc:8b:d5:18:3c:da:f8:8c:10:de:a8:82:f9:28:
a7:c8:1e:f2:0e:c9:ba:14:f7:c6:87:ad:f3:2f:2c:38:47:16:
d5:f6:6b:f3:f0:f0:11:8e:47:64:8c:ab:a4:06:d1:86:7c:7a:
e7:62:ec:e9:97:42:4e:e3:0c:8e:15:ee:1d:4a:c3:55:2e:81:
68:8b:96:4a:c0:2f:8e:92:74:14:45:2b:da:fd:62:03:66:ea:
b5:de:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org