Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214205.roa
File: AS214205.roa (raw, json)
Hash identifier: 1U24TJVkDlCoMnyPv7u5WNgfd4j6mnqo/bxzPCedtAc=
Subject key identifier: 4D:FE:C0:AC:6B:A3:2E:F5:B1:DB:DF:96:14:29:F2:0A:D7:0B:0C:FD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1A37567DB468CF050D9BA7C6227BE64A95E3CBBD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214205.roa
Signing time: Wed 16 Oct 2024 03:03:27 +0000
ROA not before: Wed 16 Oct 2024 02:58:27 +0000
ROA not after: Wed 15 Oct 2025 03:03:27 +0000
asID: 214205
IP address blocks: 2a0f:85c1:885::/48 maxlen: 48
2a0f:85c1:8ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:37:56:7d:b4:68:cf:05:0d:9b:a7:c6:22:7b:e6:4a:95:e3:cb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 16 02:58:27 2024 GMT
Not After : Oct 15 03:03:27 2025 GMT
Subject: CN=4DFEC0AC6BA32EF5B1DBDF961429F20AD70B0CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:c8:2c:70:ab:df:3c:4e:7a:45:d2:be:5a:
a0:41:82:67:92:3d:fa:84:08:0e:2f:5e:59:46:c4:
f9:a6:98:18:ee:17:20:db:48:d4:b9:fa:bf:b8:b6:
31:0e:3d:87:bd:8f:f6:05:7a:a3:26:3f:1a:54:46:
ab:53:46:c1:33:b4:5e:6f:e8:3c:08:72:2a:9d:0e:
5a:c5:fa:01:50:33:7f:c4:fa:92:43:54:f0:cc:43:
de:6c:dd:b7:d2:e7:e7:6d:37:e6:b2:ca:34:dc:ef:
10:05:89:69:85:1a:b2:ac:c5:13:b2:8a:a6:9c:e5:
62:5b:bb:50:bd:88:d4:cc:96:a7:17:b9:f8:53:a2:
a2:dc:f2:fe:92:7c:b9:fa:f3:9a:6a:c0:e1:1e:5b:
b0:e9:ca:45:9d:22:bb:0a:c2:61:8b:d0:72:7d:4d:
94:0f:c7:c7:dd:9d:19:42:32:b3:49:7d:25:84:85:
8c:16:a9:a5:8e:b2:68:b4:86:bf:04:cc:5f:36:ad:
12:b1:57:af:0e:cf:8d:73:b1:79:4d:b5:6f:fc:12:
1c:11:0f:83:bf:f9:90:f9:b3:11:5a:ba:fc:cc:f0:
93:e4:d8:77:4d:81:ed:bf:72:90:aa:04:2c:cd:cf:
44:5e:e2:98:f2:d8:8d:ec:b9:49:d2:a8:ac:6d:a6:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FE:C0:AC:6B:A3:2E:F5:B1:DB:DF:96:14:29:F2:0A:D7:0B:0C:FD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:885::/48
2a0f:85c1:8ba::/48
Signature Algorithm: sha256WithRSAEncryption
af:c7:8c:81:93:c2:65:07:7a:08:5c:59:f6:cf:46:48:16:a8:
6e:3e:45:60:09:33:97:c9:c4:c0:4a:b1:65:26:2a:23:c1:0b:
e1:7b:f3:4b:2f:d1:3a:28:52:8e:c3:ea:b1:b6:81:b6:2e:35:
23:e5:1d:68:27:16:27:a9:62:03:34:35:e7:a0:6d:d9:46:c5:
7a:b3:45:3c:cb:1d:ed:97:cd:d1:5d:91:be:86:06:a8:c3:61:
c1:51:79:d6:b9:c9:40:a4:a9:78:78:92:f9:e9:61:6c:8a:ae:
2a:71:22:65:3e:da:06:99:ba:1c:63:4b:29:01:0c:7c:66:68:
93:1b:14:2c:e2:dc:73:8b:f2:aa:ab:3c:9a:c4:05:c8:b6:b6:
2f:95:ae:0c:2e:73:c4:b5:dc:19:74:8e:48:66:fe:62:01:5c:
40:51:9c:e8:94:59:e0:6b:f2:4f:f7:f2:18:a9:ba:8f:f1:90:
96:67:b6:51:f9:27:1a:87:d0:fb:f5:71:11:5c:40:c0:00:27:
b8:cb:13:17:f9:5e:82:2e:2a:2c:8e:7f:31:26:ea:2c:3f:86:
e2:f5:b6:2b:b0:01:14:39:8f:73:e7:8b:b3:cc:1f:4e:21:21:
e2:08:9a:2c:11:3d:de:6f:81:66:33:db:37:16:41:4b:a9:07:
2e:dc:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org