Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
File: AS214374.roa (raw, json)
Hash identifier: JQTRWiXE5yqPZZGHjGkJUXTOEbZ9mGOn3SNhiRtQjiQ=
Subject key identifier: 9C:F1:88:3E:5D:F5:66:9D:59:60:B7:55:42:31:2E:73:8B:59:07:69
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4BDA84F223E10F0BD5C0DCA9C77646BC4D967DA2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
Signing time: Fri 23 Aug 2024 08:01:15 +0000
ROA not before: Fri 23 Aug 2024 07:56:15 +0000
ROA not after: Fri 22 Aug 2025 08:01:15 +0000
asID: 214374
IP address blocks: 2a0f:85c1:883::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:da:84:f2:23:e1:0f:0b:d5:c0:dc:a9:c7:76:46:bc:4d:96:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:15 2024 GMT
Not After : Aug 22 08:01:15 2025 GMT
Subject: CN=9CF1883E5DF5669D5960B75542312E738B590769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:3f:b2:63:17:c9:c8:0e:81:90:2e:9c:59:
0e:92:c5:14:aa:0f:b3:ee:6e:a8:9e:b0:b8:6d:4d:
0e:ce:51:09:59:88:1e:66:7f:47:c7:af:4a:7f:1d:
80:dc:fa:0a:ef:33:8a:26:2b:30:ca:5f:1b:3f:21:
ff:ea:b9:52:d9:89:56:66:66:ca:d1:73:20:b4:70:
bf:41:45:ea:e5:46:fd:07:39:e4:03:7d:3d:49:06:
8a:e6:ae:09:b2:36:e9:ff:d4:86:9f:86:e8:40:f0:
54:58:57:dd:97:13:62:3d:27:fa:6f:63:a9:50:67:
2d:9d:4e:ab:38:5b:85:0b:fc:93:f3:8d:00:90:3f:
90:4b:8c:07:97:cf:ea:fd:58:13:0f:31:b2:cd:51:
1c:8d:6f:f6:44:6e:ee:53:43:09:d9:4f:50:88:0c:
aa:61:38:5a:0c:24:10:e5:64:24:f2:42:ea:c7:26:
09:95:b0:2c:e0:eb:28:22:80:7b:bd:be:7e:f2:e0:
3b:e0:df:c7:97:01:7b:3f:2c:2e:30:96:1e:f4:4b:
f0:39:ef:d5:4f:2b:f2:20:23:c5:c6:18:30:05:e3:
e9:ed:f6:07:f8:4b:14:a3:4c:14:81:67:87:a3:3c:
97:15:ed:a5:8f:7f:fc:dd:53:ed:99:2f:1e:a7:83:
98:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F1:88:3E:5D:F5:66:9D:59:60:B7:55:42:31:2E:73:8B:59:07:69
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:883::/48
Signature Algorithm: sha256WithRSAEncryption
cc:bc:4c:bd:b1:a2:e9:99:10:86:c1:46:07:0f:7f:63:fd:98:
51:96:36:28:96:d6:7c:d6:f6:bc:c3:cc:bd:34:74:8f:68:90:
21:d7:a8:04:7b:8f:99:bf:f5:a6:e1:cc:30:bc:65:9c:96:c5:
9f:e1:11:08:b0:e5:7a:ed:b1:cd:38:ae:00:2c:d8:1a:6f:03:
0b:91:07:38:86:08:33:72:7a:9d:8c:2a:98:ee:fe:ce:8e:7c:
b5:f0:7b:f4:f2:5d:2d:d2:f9:28:8c:b2:7e:72:87:86:68:9a:
e4:ed:a2:0b:88:92:4a:95:b0:7e:c3:97:10:20:0b:d1:62:49:
01:44:fd:20:2d:ea:67:da:19:88:ca:57:94:61:a0:b9:e0:d1:
8e:a0:e2:89:a8:93:b3:f4:b6:37:75:a6:12:44:35:3f:51:82:
84:56:68:08:ec:0d:26:ca:9e:28:4b:6c:7a:47:6d:a1:6b:62:
28:bc:49:ab:52:38:ed:13:41:75:e4:a1:b7:9c:46:f1:3b:97:
ad:6c:12:4b:ba:81:7a:d4:b1:a6:da:f6:5a:03:19:46:ab:fd:
42:e4:b3:07:65:db:a9:99:00:0a:01:27:73:06:bd:fd:30:a8:
c5:0a:ca:bf:15:f7:35:a4:db:27:30:2b:2f:03:6c:c8:b9:d1:
4b:6f:00:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUS9qE8iPhDwvVwNypx3ZGvE2WfaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MTVaFw0yNTA4MjIwODAxMTVaMDMxMTAvBgNV
BAMTKDlDRjE4ODNFNURGNTY2OUQ1OTYwQjc1NTQyMzEyRTczOEI1OTA3NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoGT+yYxfJyA6BkC6cWQ6SxRSq
D7PubqiesLhtTQ7OUQlZiB5mf0fHr0p/HYDc+grvM4omKzDKXxs/If/quVLZiVZm
ZsrRcyC0cL9BRerlRv0HOeQDfT1JBormrgmyNun/1IafhuhA8FRYV92XE2I9J/pv
Y6lQZy2dTqs4W4UL/JPzjQCQP5BLjAeXz+r9WBMPMbLNURyNb/ZEbu5TQwnZT1CI
DKphOFoMJBDlZCTyQurHJgmVsCzg6ygigHu9vn7y4Dvg38eXAXs/LC4wlh70S/A5
79VPK/IgI8XGGDAF4+nt9gf4SxSjTBSBZ4ejPJcV7aWPf/zdU+2ZLx6ng5iJAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUnPGIPl31Zp1ZYLdVQjEuc4tZB2kwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0Mzc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQiDMA0GCSqGSIb3DQEBCwUAA4IBAQDMvEy9saLpmRCGwUYHD39j/ZhRljYoltZ8
1va8w8y9NHSPaJAh16gEe4+Zv/Wm4cwwvGWclsWf4REIsOV67bHNOK4ALNgabwML
kQc4hggzcnqdjCqY7v7Ojny18Hv08l0t0vkojLJ+coeGaJrk7aILiJJKlbB+w5cQ
IAvRYkkBRP0gLepn2hmIyleUYaC54NGOoOKJqJOz9LY3daYSRDU/UYKEVmgI7A0m
yp4oS2x6R22ha2IovEmrUjjtE0F15KG3nEbxO5etbBJLuoF61LGm2vZaAxlGq/1C
5LMHZdupmQAKASdzBr39MKjFCsq/Ffc1pNsnMCsvA2zIudFLbwBV
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org