Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214486.roa
File: AS214486.roa (raw, json)
Hash identifier: +fe47ytqOcpWkN4pg4F3JwHSCwFWArHrzSC4AsHDgM0=
Subject key identifier: CB:77:1F:40:D3:23:EF:A0:B3:2C:A9:F8:2A:BB:F2:90:35:80:86:1C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 1E8A8B1A57AB422DE00ADE6ED5756C029DB8CE64
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214486.roa
Signing time: Fri 23 Aug 2024 08:01:26 +0000
ROA not before: Fri 23 Aug 2024 07:56:26 +0000
ROA not after: Fri 22 Aug 2025 08:01:26 +0000
asID: 214486
IP address blocks: 2a0f:85c1:83d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:8a:8b:1a:57:ab:42:2d:e0:0a:de:6e:d5:75:6c:02:9d:b8:ce:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:26 2024 GMT
Not After : Aug 22 08:01:26 2025 GMT
Subject: CN=CB771F40D323EFA0B32CA9F82ABBF2903580861C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f8:e3:2e:51:c0:b8:d7:46:62:ee:f6:db:74:
21:f1:ac:0b:73:c3:7d:c5:da:07:58:50:74:a3:b1:
0c:a2:97:13:18:5a:bb:c7:5b:d3:bf:85:27:e7:ce:
a6:22:4b:fb:83:67:bb:2d:92:d7:6e:8c:51:28:a9:
e1:81:72:1d:77:f9:9b:be:e3:90:51:90:18:0e:04:
a7:30:aa:dd:e2:d0:f6:a3:36:4b:3f:0c:36:a9:5c:
91:10:a6:9d:76:2c:e5:ca:11:41:fd:f3:70:ee:36:
f3:3d:79:50:37:59:99:ed:26:b2:d1:df:f5:57:56:
dc:07:17:4d:b7:6a:cb:0a:12:1b:47:44:87:27:1e:
1d:2f:48:42:db:d3:cc:60:e7:a5:6f:1d:d9:9c:b8:
11:e6:47:bc:25:55:2d:4a:b3:25:d3:bd:54:2d:cc:
e5:30:1d:6c:5d:2a:7a:c4:12:41:d9:57:f3:94:e7:
90:73:5d:64:a1:29:28:a2:35:3e:75:bd:33:62:3c:
21:79:a4:c5:29:25:f9:1a:39:c0:56:33:ee:94:a1:
d3:c2:48:1d:ea:47:70:8e:e2:92:54:1f:ee:8c:c7:
9e:79:b9:bf:55:06:bb:f8:a4:65:4b:21:a5:1e:c6:
88:da:bc:54:7a:d4:df:c4:7e:f3:de:60:fe:bf:76:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:77:1F:40:D3:23:EF:A0:B3:2C:A9:F8:2A:BB:F2:90:35:80:86:1C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:83d::/48
Signature Algorithm: sha256WithRSAEncryption
ce:b6:dc:9a:8b:3c:29:6d:d2:26:f3:cf:47:b8:6c:45:89:a5:
d0:11:65:33:8c:c6:d9:24:9d:6a:53:4f:a3:26:4e:e0:70:e1:
36:02:ff:01:5c:5e:6e:8c:29:c1:0f:c9:5d:00:1d:7f:6c:65:
f7:a6:f4:49:cb:d3:00:8c:f4:29:28:b4:2e:41:9e:1e:41:55:
36:a0:8e:10:5d:17:e8:41:62:97:65:f3:da:32:49:dd:74:27:
46:08:19:56:02:0c:8f:f0:e7:3e:33:23:6b:24:70:3b:8f:f8:
71:8e:aa:92:f4:cd:22:37:8c:be:25:e3:ef:db:9d:14:e9:15:
e1:ba:2a:f7:96:39:f6:dc:d1:e3:2a:6c:a0:e5:1a:35:dd:de:
cd:81:b7:04:8e:1d:c6:7c:6c:30:53:f5:a5:a1:5d:ed:e6:67:
54:6a:1c:c0:90:c1:0a:77:a9:69:c4:ef:c4:01:ba:8c:ba:e3:
76:79:7e:1a:2b:4a:f1:ce:0f:c1:27:36:5d:e9:0d:ce:16:c7:
93:f0:21:89:7d:6d:ea:59:96:5c:b4:6b:aa:42:70:c4:f7:d7:
02:96:b1:c7:83:b6:12:dd:7d:a2:86:22:68:6d:97:0c:c5:f3:
b4:65:8d:7d:11:4b:bf:b7:9a:e1:c9:a1:e5:2a:8d:43:84:7f:
9a:c7:45:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUHoqLGlerQi3gCt5u1XVsAp24zmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjZaFw0yNTA4MjIwODAxMjZaMDMxMTAvBgNV
BAMTKENCNzcxRjQwRDMyM0VGQTBCMzJDQTlGODJBQkJGMjkwMzU4MDg2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+OMuUcC410Zi7vbbdCHxrAtz
w33F2gdYUHSjsQyilxMYWrvHW9O/hSfnzqYiS/uDZ7stktdujFEoqeGBch13+Zu+
45BRkBgOBKcwqt3i0PajNks/DDapXJEQpp12LOXKEUH983DuNvM9eVA3WZntJrLR
3/VXVtwHF023assKEhtHRIcnHh0vSELb08xg56VvHdmcuBHmR7wlVS1KsyXTvVQt
zOUwHWxdKnrEEkHZV/OU55BzXWShKSiiNT51vTNiPCF5pMUpJfkaOcBWM+6UodPC
SB3qR3CO4pJUH+6Mx555ub9VBrv4pGVLIaUexojavFR61N/EfvPeYP6/dvnjAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUy3cfQNMj76CzLKn4KrvykDWAhhwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NDg2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQg9MA0GCSqGSIb3DQEBCwUAA4IBAQDOttyaizwpbdIm889HuGxFiaXQEWUzjMbZ
JJ1qU0+jJk7gcOE2Av8BXF5ujCnBD8ldAB1/bGX3pvRJy9MAjPQpKLQuQZ4eQVU2
oI4QXRfoQWKXZfPaMknddCdGCBlWAgyP8Oc+MyNrJHA7j/hxjqqS9M0iN4y+JePv
250U6RXhuir3ljn23NHjKmyg5Ro13d7NgbcEjh3GfGwwU/WloV3t5mdUahzAkMEK
d6lpxO/EAbqMuuN2eX4aK0rxzg/BJzZd6Q3OFseT8CGJfW3qWZZctGuqQnDE99cC
lrHHg7YS3X2ihiJobZcMxfO0ZY19EUu/t5rhyaHlKo1DhH+ax0WW
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org