Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214510.roa
File: AS214510.roa (raw, json)
Hash identifier: ZVbaAqzLPntdDoD6ttfVlZjDqHDh6pZ6eV1tPhq4apk=
Subject key identifier: 9B:89:E3:BD:C4:9F:B3:5F:8C:56:41:99:BE:28:29:6B:A2:82:18:86
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 02E966791AD90A8973BE0ADD5E3BA8D78D0613A9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214510.roa
Signing time: Tue 17 Sep 2024 04:26:12 +0000
ROA not before: Tue 17 Sep 2024 04:21:12 +0000
ROA not after: Tue 16 Sep 2025 04:26:12 +0000
asID: 214510
IP address blocks: 2a0f:85c1:3f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e9:66:79:1a:d9:0a:89:73:be:0a:dd:5e:3b:a8:d7:8d:06:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 04:21:12 2024 GMT
Not After : Sep 16 04:26:12 2025 GMT
Subject: CN=9B89E3BDC49FB35F8C564199BE28296BA2821886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:10:31:29:f3:8d:d3:b9:6f:ac:26:eb:78:a8:
77:35:11:b1:11:5b:32:90:e0:52:a7:90:20:08:ab:
73:c5:3a:b1:69:58:3f:01:0e:a5:bc:dd:fc:ec:3e:
b3:81:35:20:bc:0f:d5:61:ef:c4:39:2a:51:3c:bf:
ce:25:a3:dc:56:65:69:13:61:00:f1:7f:0b:c8:2b:
f1:7f:b0:4c:3a:20:50:96:67:1a:d2:1b:4b:35:7e:
7a:e0:af:7c:91:6f:11:36:87:bd:c7:9c:90:93:e3:
9f:d8:06:60:8c:c8:28:d8:5f:63:45:fc:c2:d9:d0:
4b:62:07:07:05:18:a4:42:1d:a4:68:b4:2f:8d:73:
0f:c8:c4:0a:59:c6:17:f2:81:eb:b5:7d:da:43:8a:
ce:a9:02:13:c2:1d:41:94:a6:06:3a:4b:79:a0:eb:
3b:4a:ba:5d:12:71:36:62:90:dd:c2:8b:2d:3f:d8:
21:c7:20:a3:35:d9:ab:4d:cd:f0:e0:09:01:40:60:
c4:3d:99:a0:ce:11:70:10:e1:66:56:e0:ee:be:2f:
de:82:9e:90:9a:c1:47:4c:e0:08:76:e4:df:d2:1e:
9c:61:69:b8:c8:25:61:b3:7c:85:68:d8:53:8e:07:
72:36:fb:31:f7:69:22:8d:1f:d5:0d:f4:87:ba:fa:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:E3:BD:C4:9F:B3:5F:8C:56:41:99:BE:28:29:6B:A2:82:18:86
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f9::/48
Signature Algorithm: sha256WithRSAEncryption
b8:d7:b1:8f:d7:90:fb:62:6f:2c:64:c7:8d:ed:81:fe:83:84:
50:ba:a4:14:a0:f7:34:af:28:78:d5:4d:7b:03:df:83:c5:e3:
c5:46:4c:3a:65:cb:84:34:a6:25:7a:b5:c1:37:19:b1:ac:c5:
2c:9c:8d:4e:47:4b:99:b5:55:40:1f:4f:51:26:bc:64:5d:72:
33:97:b4:de:1b:b0:94:ef:7a:8e:fa:30:cd:72:da:48:d2:62:
49:c0:4e:62:6b:79:54:da:f4:28:41:f9:e3:fc:72:8a:36:27:
ed:f1:f2:ea:52:0e:76:dc:57:3e:9d:83:68:ce:25:51:ec:68:
9b:5b:c5:73:a3:99:af:b2:06:f3:e7:9b:6e:c6:a6:39:30:a7:
dc:75:03:a8:44:b2:a1:46:3c:01:2d:a8:59:96:bd:24:6d:12:
2b:d2:55:25:51:ee:b9:d1:b8:e3:12:3f:bd:35:09:a6:7a:87:
7d:55:01:ed:93:06:0a:e6:5b:49:66:38:b1:57:e3:eb:b5:76:
c8:ec:ce:3f:6c:cd:00:ec:0b:e8:c6:1b:b3:3f:4d:12:ea:da:
31:48:1d:30:b7:f2:ed:a5:6e:bf:15:13:37:5c:0d:6d:6b:af:
50:f6:38:58:ef:25:55:0b:3f:83:bf:08:96:a3:a4:4c:a4:9d:
57:74:e8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org