Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214372.roa
File: AS214372.roa (raw, json)
Hash identifier: u8QRinj3TdYfoAQ7xJC2hHc8IXO2lLrJNikMEe3vb4U=
Subject key identifier: 54:7D:04:25:EB:C3:04:D8:CE:60:94:FE:CB:E7:39:DE:63:EF:F8:29
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6CA3E90E6CC57D40923B2D64B1127E48CEAF7B22
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214372.roa
Signing time: Tue 17 Sep 2024 04:26:43 +0000
ROA not before: Tue 17 Sep 2024 04:21:43 +0000
ROA not after: Tue 16 Sep 2025 04:26:43 +0000
asID: 214372
IP address blocks: 2a0f:85c1:884::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a3:e9:0e:6c:c5:7d:40:92:3b:2d:64:b1:12:7e:48:ce:af:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 04:21:43 2024 GMT
Not After : Sep 16 04:26:43 2025 GMT
Subject: CN=547D0425EBC304D8CE6094FECBE739DE63EFF829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a7:55:80:60:52:cf:1c:c7:8b:85:4f:54:f9:
54:47:30:6b:41:2c:c9:47:39:3a:be:ab:5c:21:1f:
ce:63:9c:90:70:3c:e0:b0:68:71:85:6d:88:8b:e1:
05:2f:18:6f:27:c8:13:3d:d5:52:2b:d5:e7:65:9d:
1f:c3:b7:de:19:86:2b:df:48:67:81:bd:3c:01:43:
aa:31:21:7d:fb:b8:c9:bf:dd:37:6b:8b:66:49:bb:
85:01:ac:dc:5b:ac:75:7c:07:ff:1a:2e:15:1f:40:
94:4c:88:a9:1b:b9:14:16:b6:4f:54:b2:8f:f8:ce:
a9:8e:1d:0d:19:49:7a:aa:69:bf:bc:fe:8a:a5:9d:
3e:03:22:54:63:d6:bf:58:ce:50:ee:f9:f7:84:d7:
7a:56:bf:46:7f:51:be:23:35:0d:e6:99:3e:27:ad:
5a:c9:b4:11:1f:da:2f:2e:eb:66:79:15:be:c9:b6:
db:ad:58:65:55:62:5f:1a:50:9a:60:c3:42:45:69:
33:6f:97:cb:3f:1f:2b:f9:46:4e:13:07:18:36:fe:
b7:25:69:84:71:e5:1e:7b:34:8f:f4:4c:ca:d3:e6:
5f:2d:07:3a:9b:6c:ba:5f:ca:ac:99:d9:90:9f:47:
65:cb:70:47:5c:0a:f9:61:b6:bb:fd:fc:dc:52:49:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:04:25:EB:C3:04:D8:CE:60:94:FE:CB:E7:39:DE:63:EF:F8:29
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:884::/48
Signature Algorithm: sha256WithRSAEncryption
de:29:5b:4d:af:41:d2:54:2f:09:31:81:af:de:1f:df:e4:21:
1b:76:58:25:63:c7:7e:a5:a7:3e:9a:a8:3f:c9:85:89:2a:8d:
2c:e0:7b:00:0f:23:e6:00:53:c8:1b:8d:70:4f:5a:07:34:09:
0e:d5:47:31:43:a1:33:a1:52:92:2f:0c:e8:de:f1:b3:ae:23:
9f:13:de:5f:8c:d3:f1:c6:d8:e9:a2:9d:c8:64:29:93:9f:ff:
f9:d0:99:42:c3:7a:22:13:60:34:a2:71:fb:7f:a4:a7:d8:1a:
25:3b:19:f2:dc:7d:19:db:5b:aa:d1:11:ef:00:31:bd:82:52:
fb:89:8d:bd:ef:c0:7b:a1:2a:c1:dc:46:35:fd:9d:c8:2c:92:
f5:3a:2a:20:92:7a:cc:c8:f9:0f:66:bb:e8:67:df:ea:7b:56:
71:97:87:0c:3d:fd:fb:ea:d2:1c:eb:4c:63:d1:72:a9:fb:b6:
c5:4f:f5:9d:3a:36:35:e1:a3:ce:2c:94:32:36:5f:07:22:00:
59:11:4f:a3:80:d3:9f:5d:d9:b6:cd:5a:c1:a6:b6:fa:b8:bd:
b4:17:90:19:6c:6f:38:e5:4c:bc:3a:af:b1:e4:b3:cb:61:ab:
c3:a1:0f:52:9a:c0:75:c6:cd:46:a7:c1:5f:d8:2a:d4:4d:bd:
0b:96:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org