Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214376.roa
File: AS214376.roa (raw, json)
Hash identifier: sohZ0Aklh26cLWRbYTJ4xtRn7vnvDAgeQDSsHDuYnsA=
Subject key identifier: 46:E0:B0:A5:7D:BA:8C:A5:B5:15:DC:67:50:77:87:F9:76:C6:32:AD
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 661BE4E5C43FD213D748D6CCDEA077867DE7E9A0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214376.roa
Signing time: Fri 23 Aug 2024 08:01:18 +0000
ROA not before: Fri 23 Aug 2024 07:56:18 +0000
ROA not after: Fri 22 Aug 2025 08:01:18 +0000
asID: 214376
IP address blocks: 2a0f:85c1:84f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:1b:e4:e5:c4:3f:d2:13:d7:48:d6:cc:de:a0:77:86:7d:e7:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:18 2024 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=46E0B0A57DBA8CA5B515DC67507787F976C632AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:c3:5e:ab:88:9d:f9:1d:f6:50:91:6e:b4:
05:0b:44:5d:1b:cd:ce:03:06:76:a1:59:19:98:28:
31:67:17:4e:2a:56:4b:7f:32:14:9f:f9:2e:c8:c1:
2e:22:fd:6c:06:18:1e:f7:86:16:dd:ef:09:4d:df:
8d:cf:81:7c:41:6f:b8:d0:fd:1f:74:c7:31:5c:83:
b7:a2:08:ad:24:36:37:67:8a:ee:05:e2:95:b3:73:
fc:ec:5e:c2:8e:3d:b1:06:e6:7f:2d:c7:08:dd:a9:
f7:6b:35:be:8b:f6:b9:7c:f3:99:c5:5c:ad:9d:c1:
71:53:06:21:24:f3:02:f3:67:90:15:a0:b9:69:f0:
21:7a:49:7e:01:75:e0:ad:78:bb:bd:47:fe:7c:7a:
23:0e:a8:d1:30:4c:f6:e4:9f:e3:ba:25:4d:6a:0a:
95:31:89:d6:c3:58:c3:b2:9e:76:5f:44:ac:c9:04:
16:3e:f8:0c:fb:dc:0e:94:24:3d:69:4b:5d:cd:21:
0c:b6:50:14:2d:b8:6b:de:42:c8:05:8d:3c:48:18:
e6:92:cf:eb:80:a0:1e:55:d6:c5:e9:6f:3e:27:1b:
74:7c:4a:7b:42:aa:d4:61:ab:df:f1:84:7d:6d:a9:
df:5c:b6:ba:68:ae:2e:9b:ce:91:3d:9f:d3:13:95:
25:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E0:B0:A5:7D:BA:8C:A5:B5:15:DC:67:50:77:87:F9:76:C6:32:AD
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:84f::/48
Signature Algorithm: sha256WithRSAEncryption
51:46:26:a2:10:78:6b:b3:19:19:2c:c7:95:d9:e4:47:da:9b:
7b:8d:84:7b:e1:b7:09:a3:09:4d:6e:65:90:09:b2:66:16:13:
10:20:e9:6f:9c:b6:5e:b1:8b:0d:b6:a1:5e:b9:ee:9b:99:b9:
3e:84:4f:e6:26:45:9f:b7:b4:f1:7d:a7:bf:67:37:17:30:7f:
df:db:18:fe:e0:a5:ad:00:ae:d1:5f:48:63:ac:b2:e6:94:b8:
23:ba:d5:2a:62:f4:f8:ae:23:6b:8c:c2:dc:c4:c9:32:cb:ea:
b4:b1:19:5c:00:0d:99:86:26:02:f2:64:5e:1b:e0:d4:6f:40:
da:69:d9:08:c4:c9:99:05:45:26:f7:10:2d:5e:5d:2c:63:fb:
0b:85:1a:38:29:77:53:d7:12:95:38:6a:8e:61:36:24:b4:0f:
39:62:0c:04:b9:d6:c6:ac:e3:95:c9:a1:6f:1d:cf:e3:23:8a:
5e:08:2a:59:af:a5:7e:e8:15:ad:a9:2c:06:f2:9d:bd:5a:c4:
64:2d:0a:76:af:4a:40:97:dd:ad:09:73:22:50:d5:f0:e8:e6:
f9:8b:a5:d4:36:43:74:45:38:d4:e9:d5:8d:0b:d3:ff:36:f1:
56:ea:bb:de:a3:83:d1:89:57:47:e6:46:2c:e6:d8:1d:67:7e:
fb:5e:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org