Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
File: AS214312.roa (raw, json)
Hash identifier: Ujvt/C4xPzTT6lw6QtDs0UDuAOPHFzTFtQ7txV1ob/w=
Subject key identifier: 69:30:3D:81:5D:33:33:B1:DD:2C:5A:86:49:FB:BF:DB:55:0E:C4:21
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 17FD776F0875794977296CFE3458C43F3E6A74DC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
Signing time: Tue 17 Sep 2024 04:25:49 +0000
ROA not before: Tue 17 Sep 2024 04:20:49 +0000
ROA not after: Tue 16 Sep 2025 04:25:49 +0000
asID: 214312
IP address blocks: 2a0f:85c1:892::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:fd:77:6f:08:75:79:49:77:29:6c:fe:34:58:c4:3f:3e:6a:74:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 04:20:49 2024 GMT
Not After : Sep 16 04:25:49 2025 GMT
Subject: CN=69303D815D3333B1DD2C5A8649FBBFDB550EC421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:5c:78:b7:4c:81:b2:96:39:69:29:91:10:
63:9f:8b:6d:8a:b5:8b:4d:57:a5:99:20:91:9c:49:
12:34:9d:af:b1:64:0d:7d:49:79:db:f4:8d:78:a0:
6b:b1:5a:1d:73:a3:5a:86:e9:80:49:83:66:9e:69:
15:9e:96:83:a8:2b:91:2a:2d:4b:15:bd:71:5f:02:
11:fa:d9:7e:5f:2c:70:8d:e6:ea:95:4a:8c:30:95:
78:54:3b:a6:6b:ba:a3:c7:c3:0a:b6:8c:b2:d7:23:
78:9e:94:9c:10:b2:57:b6:af:58:67:c3:72:01:0a:
11:d5:33:6e:97:e7:ce:7e:24:f3:5d:22:3b:d1:a1:
8c:5a:29:d8:8b:f6:85:ab:48:58:8a:02:95:c1:d4:
4c:ea:7c:69:c6:00:c7:88:cf:0c:b6:81:94:ee:75:
2f:17:31:61:f9:ae:63:58:b6:80:f7:5e:25:ad:05:
83:19:61:c5:a4:7e:25:f5:ca:2f:58:19:fd:d8:ec:
bd:b3:e3:19:f6:b5:96:d9:f1:1e:af:76:3b:b6:db:
20:20:04:24:eb:a7:b4:aa:6c:c3:2d:28:6c:70:fe:
a4:ff:89:7d:ba:0f:dc:76:70:f0:90:b3:66:79:a3:
ca:f8:e8:e2:61:7c:62:b4:75:16:bb:79:78:72:96:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:3D:81:5D:33:33:B1:DD:2C:5A:86:49:FB:BF:DB:55:0E:C4:21
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:892::/48
Signature Algorithm: sha256WithRSAEncryption
93:08:6c:b3:93:8f:4d:2a:fd:49:ac:ab:ec:98:45:b0:2b:01:
c2:32:e5:bb:6f:4c:fc:e8:9a:84:87:cc:99:00:70:e5:5a:bf:
64:e1:8e:49:12:d8:97:6e:0e:a8:aa:f8:d8:e9:e3:7f:36:f2:
a5:89:77:f9:6e:47:cf:1b:fb:73:84:c6:7c:d8:a3:60:c4:5a:
52:be:ae:a1:8b:48:cf:7c:50:ec:e8:50:8a:78:72:2f:8b:7e:
89:94:32:90:89:22:0c:b7:0a:ff:55:4d:ca:9d:f4:f4:d5:fe:
42:d6:0f:8e:bf:d8:4b:6d:3a:6d:a0:00:32:a5:8d:78:b1:9d:
0c:f5:a2:b0:18:f3:fa:b6:ac:60:73:8e:cc:b4:3e:1c:00:3d:
bc:39:22:24:e7:d2:a5:23:4f:8b:89:a2:65:21:64:60:be:87:
ba:c9:a0:98:0e:30:ef:6d:c8:26:27:1c:38:a1:9d:18:06:17:
db:2f:b9:07:be:19:bf:45:91:45:b3:42:84:a2:28:3f:26:f7:
9a:71:66:da:3c:cf:6c:65:19:c1:cc:40:42:38:b0:0e:8d:f4:
e4:48:2e:49:23:48:0f:4a:4f:c0:81:a9:02:c6:30:94:a4:e1:
98:39:69:9a:c6:19:c0:06:e0:60:02:c9:71:5f:84:86:98:2a:
7b:ce:c0:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUF/13bwh1eUl3KWz+NFjEPz5qdNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA5MTcwNDIwNDlaFw0yNTA5MTYwNDI1NDlaMDMxMTAvBgNV
BAMTKDY5MzAzRDgxNUQzMzMzQjFERDJDNUE4NjQ5RkJCRkRCNTUwRUM0MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGFx4t0yBspY5aSmREGOfi22K
tYtNV6WZIJGcSRI0na+xZA19SXnb9I14oGuxWh1zo1qG6YBJg2aeaRWeloOoK5Eq
LUsVvXFfAhH62X5fLHCN5uqVSowwlXhUO6ZruqPHwwq2jLLXI3ielJwQsle2r1hn
w3IBChHVM26X585+JPNdIjvRoYxaKdiL9oWrSFiKApXB1EzqfGnGAMeIzwy2gZTu
dS8XMWH5rmNYtoD3XiWtBYMZYcWkfiX1yi9YGf3Y7L2z4xn2tZbZ8R6vdju22yAg
BCTrp7SqbMMtKGxw/qT/iX26D9x2cPCQs2Z5o8r46OJhfGK0dRa7eXhylqtBAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUaTA9gV0zM7HdLFqGSfu/21UOxCEwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0MzEyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQiSMA0GCSqGSIb3DQEBCwUAA4IBAQCTCGyzk49NKv1JrKvsmEWwKwHCMuW7b0z8
6JqEh8yZAHDlWr9k4Y5JEtiXbg6oqvjY6eN/NvKliXf5bkfPG/tzhMZ82KNgxFpS
vq6hi0jPfFDs6FCKeHIvi36JlDKQiSIMtwr/VU3KnfT01f5C1g+Ov9hLbTptoAAy
pY14sZ0M9aKwGPP6tqxgc47MtD4cAD28OSIk59KlI0+LiaJlIWRgvoe6yaCYDjDv
bcgmJxw4oZ0YBhfbL7kHvhm/RZFFs0KEoig/JveacWbaPM9sZRnBzEBCOLAOjfTk
SC5JI0gPSk/AgakCxjCUpOGYOWmaxhnABuBgAslxX4SGmCp7zsBK
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org