Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214205.roa
File: AS214205.roa (raw, json)
Hash identifier: 654mPJAV/9DfzoGGgAL1sYF64+PEUqiVYz3wkAXdfNQ=
Subject key identifier: 58:80:80:A4:31:E1:69:96:BB:8F:19:9A:03:99:24:97:18:90:54:DE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 39D831B97461512AF4C05100D7F72B3EC748F36E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214205.roa
Signing time: Tue 17 Sep 2024 04:25:02 +0000
ROA not before: Tue 17 Sep 2024 04:20:02 +0000
ROA not after: Tue 16 Sep 2025 04:25:02 +0000
asID: 214205
IP address blocks: 2a0f:85c1:885::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d8:31:b9:74:61:51:2a:f4:c0:51:00:d7:f7:2b:3e:c7:48:f3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 04:20:02 2024 GMT
Not After : Sep 16 04:25:02 2025 GMT
Subject: CN=588080A431E16996BB8F199A03992497189054DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:95:3b:81:55:f7:52:c8:e1:c4:c2:b9:4c:
88:58:5a:3e:90:ea:7e:e5:af:9b:fd:19:9c:41:c7:
ec:5c:86:b8:df:e1:de:72:1a:77:64:47:12:77:0d:
77:c6:c9:59:6a:81:88:b0:a3:a3:6f:9b:14:78:b8:
5e:b4:11:87:be:70:b0:17:af:e6:51:7f:26:bd:17:
27:03:f9:dc:26:83:4b:74:2c:13:32:ce:f7:49:7d:
06:c4:f6:65:c9:0f:0e:d6:db:81:15:ff:ce:de:fa:
31:cb:91:9c:76:ef:5e:d4:c0:11:b3:1f:08:92:6a:
2a:0c:b0:dd:ff:5f:b5:ca:be:ed:eb:87:e0:3b:c2:
a2:d9:e0:a3:72:ac:dd:be:80:4f:52:d8:9f:1f:27:
45:4d:5b:15:bf:84:80:3d:75:3b:50:39:1a:78:27:
a0:5e:02:cc:a8:64:9b:70:66:2f:c7:d9:8a:a7:bc:
da:d3:c7:b2:6e:13:6d:4e:ea:33:8d:e6:61:c7:ff:
5c:b7:ad:05:36:08:8d:46:f4:e2:e7:dd:4e:37:99:
09:d7:e8:02:d9:25:87:c6:f9:7c:c2:28:7b:57:3f:
57:89:ab:48:0c:63:9f:b0:f9:15:ff:02:02:a1:f1:
92:12:f8:37:52:4d:a9:81:e5:6a:06:8b:69:54:1b:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:80:A4:31:E1:69:96:BB:8F:19:9A:03:99:24:97:18:90:54:DE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:885::/48
Signature Algorithm: sha256WithRSAEncryption
c1:3f:b1:bd:9d:60:26:8b:5d:f6:ff:e9:39:10:10:2b:6c:b4:
03:14:4d:ea:da:a7:90:4d:a6:8e:f2:d7:b7:de:03:b5:b5:c1:
bd:41:6a:2a:7a:bf:c8:d2:52:4a:9b:b7:57:8f:a1:42:42:36:
fb:2d:2d:46:d9:78:78:0c:55:26:e8:7c:6b:ee:e2:63:b5:3e:
ef:3b:fd:4e:34:28:a3:c3:bc:ec:a8:92:e6:c7:1d:e4:e8:70:
59:62:f3:32:41:68:4f:df:96:e3:88:2f:16:08:61:c4:ab:f8:
06:b1:78:70:53:0f:5f:02:92:bc:4f:43:60:57:ee:ec:a8:64:
25:5f:9f:35:61:b4:6e:00:bb:a7:f0:5e:c0:ab:d2:7d:2a:9f:
8a:dd:11:17:a3:b1:81:fa:6f:d7:1a:d3:81:ef:08:02:e6:5e:
ea:59:f2:a2:23:54:ff:2c:d4:b5:f2:e8:fd:af:ea:79:bf:a7:
85:80:31:37:9b:0e:8e:e6:4b:2f:3e:d4:82:c9:9d:b4:9a:18:
5e:83:c8:de:01:d0:d9:0f:e2:51:a5:a4:62:b4:a7:3d:d7:12:
5f:07:17:a5:43:d4:e7:bf:22:62:cf:ab:c6:4f:90:a1:f3:f2:
c7:5c:61:4f:c4:22:93:ba:f1:4e:b9:3b:c5:4c:95:f6:6d:17:
09:fe:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org