Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
File: AS214539.roa (raw, json)
Hash identifier: gfr20EPN1TX5PpscjuIymcxs77yWqTnCcCHuKlNTLqg=
Subject key identifier: 66:1A:61:DD:CE:B5:67:C5:9F:81:90:E2:BA:ED:6B:77:69:E4:F2:C6
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 390D7AE4B04A382F91D80C332BBCEAA272948941
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
Signing time: Fri 23 Aug 2024 08:01:18 +0000
ROA not before: Fri 23 Aug 2024 07:56:18 +0000
ROA not after: Fri 22 Aug 2025 08:01:18 +0000
asID: 214539
IP address blocks: 2a0f:85c1:835::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0d:7a:e4:b0:4a:38:2f:91:d8:0c:33:2b:bc:ea:a2:72:94:89:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:18 2024 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=661A61DDCEB567C59F8190E2BAED6B7769E4F2C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:c3:a4:4d:56:c3:ca:d3:69:6a:7f:8b:37:
a8:54:99:2a:78:0e:05:16:5c:b2:49:b7:e4:8f:a4:
9c:01:83:6b:3d:09:24:5a:db:68:f9:ab:92:eb:15:
77:5b:85:4e:c5:33:21:83:59:4f:c3:52:76:36:a8:
01:3c:09:4b:d3:65:f1:f4:9b:79:6f:0f:5b:9b:ac:
e6:23:9c:39:c0:cd:c5:19:92:db:2f:c2:7b:3f:d6:
80:1a:e9:99:4f:52:f7:4f:e7:3e:d8:71:8a:97:8e:
7b:85:cf:48:7d:7c:98:a9:a5:da:9e:3f:cb:99:d3:
71:21:a7:2b:fc:21:61:75:07:d2:7f:d7:2b:ee:37:
87:58:ca:af:f5:1b:38:3b:28:68:fd:b2:71:a8:d9:
f4:a5:66:ab:ad:a8:52:af:0f:e7:b4:a4:75:35:ec:
89:be:77:bb:ef:11:02:4e:b7:bf:b7:43:89:cb:b0:
0b:7d:2c:6d:de:49:78:d3:1c:60:b1:07:6b:90:61:
9c:85:92:17:12:5d:e4:ff:19:f5:5d:2f:66:5c:0e:
74:6d:99:c6:d1:34:f7:3f:09:ea:3c:d2:5e:ee:99:
de:e6:91:1b:93:63:ba:80:26:04:81:6b:91:03:d2:
b4:a6:c7:92:ee:1a:2f:ca:1c:28:56:b2:b4:54:58:
3d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1A:61:DD:CE:B5:67:C5:9F:81:90:E2:BA:ED:6B:77:69:E4:F2:C6
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:835::/48
Signature Algorithm: sha256WithRSAEncryption
6c:24:c7:ce:a4:08:92:df:d8:bb:44:85:77:d2:9f:58:45:f0:
0a:29:0a:82:85:88:65:77:77:1a:54:87:93:07:15:69:a3:2e:
80:b4:8d:26:20:c7:f6:17:00:2f:76:7b:3e:47:5e:be:cf:62:
c6:9a:10:f1:ca:98:4b:88:e4:c2:26:c7:6a:b8:37:77:88:01:
d3:b7:8e:a9:95:a6:f7:52:4b:95:f7:0f:c8:c9:02:24:bc:99:
70:7d:5a:93:97:39:37:68:1f:03:2e:32:9e:69:65:b4:f4:db:
b7:92:df:71:95:f1:60:b0:5c:67:37:03:c5:a2:00:a2:de:74:
df:dd:7f:4d:b4:5d:cf:c3:e9:61:91:7c:07:1c:4e:06:4a:8c:
6a:10:dd:ea:53:b4:db:27:28:11:4a:11:56:03:34:d2:3f:50:
7e:b4:7c:e4:7e:38:f1:06:9f:f1:f0:81:70:6f:3a:30:ea:ef:
21:c4:f7:b8:69:b5:ca:dd:77:0c:39:93:67:da:98:d7:96:89:
38:63:de:3f:bb:16:a7:c7:b7:6c:be:6c:46:cf:3d:bb:d5:3c:
01:d1:50:b2:61:36:05:ca:d7:6f:b3:81:33:e5:b2:bc:28:6a:
bf:74:d8:b3:5b:7d:27:31:83:4b:7a:71:a0:51:d2:f9:36:97:
b0:b6:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:44 2024 by rpki-client on console-fra.rpki-client.org