Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214634.roa
File: AS214634.roa (raw, json)
Hash identifier: AyLRXC+GsQxgVuRtzwVzPfuAbRDYk0PIRhWVfm1doJE=
Subject key identifier: F0:7F:BB:E4:BA:C5:24:EF:14:3D:2D:BA:2E:E7:FF:7C:FD:F7:89:DB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 23B3B5AD9472DD0A028168FBBF02D276047E2A0F
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214634.roa
Signing time: Fri 23 Aug 2024 08:01:21 +0000
ROA not before: Fri 23 Aug 2024 07:56:21 +0000
ROA not after: Fri 22 Aug 2025 08:01:21 +0000
asID: 214634
IP address blocks: 2a0f:85c1:825::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b3:b5:ad:94:72:dd:0a:02:81:68:fb:bf:02:d2:76:04:7e:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:21 2024 GMT
Not After : Aug 22 08:01:21 2025 GMT
Subject: CN=F07FBBE4BAC524EF143D2DBA2EE7FF7CFDF789DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:d7:2e:ac:1a:35:98:13:e0:d1:fd:72:bf:
9d:dd:f1:5d:52:f9:50:b8:7a:23:72:64:22:c1:e9:
dd:ce:48:52:b6:20:af:3c:9b:d1:18:0b:11:a5:f0:
f0:63:e2:51:ee:6c:a2:4e:83:e1:01:fd:35:c5:b0:
7e:e3:5f:96:e7:8a:25:3b:fd:17:04:d8:19:9f:7b:
39:2f:0e:13:11:d6:c4:89:e1:e8:4f:5d:d4:26:e0:
85:a0:1a:19:56:4a:39:7c:0f:d2:80:3b:e3:5a:54:
c4:90:e7:3e:5e:ab:d5:6a:eb:f6:43:26:a4:22:ad:
45:06:d0:cc:b0:7c:09:27:4b:f1:f7:78:d1:5b:c0:
50:83:38:b8:1b:01:8a:01:7a:af:6b:5e:b6:d6:1a:
1b:19:76:55:e5:34:9b:cc:84:73:02:b2:2c:b4:8e:
90:7d:f9:6f:e3:e3:c5:4c:02:13:e8:9b:d5:19:d5:
ed:bb:a8:88:ae:e3:c8:0d:9b:c9:42:da:62:92:eb:
af:29:7b:ff:88:63:29:82:d0:7f:d7:49:8b:50:36:
2b:ad:e2:77:ad:aa:c1:31:98:ee:f6:e9:2d:26:53:
ee:0f:b6:2c:bf:7b:d8:39:08:5b:65:b0:5c:73:89:
f7:30:d7:72:b7:e7:65:1d:18:b5:a7:6e:39:f9:b9:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:BB:E4:BA:C5:24:EF:14:3D:2D:BA:2E:E7:FF:7C:FD:F7:89:DB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:825::/48
Signature Algorithm: sha256WithRSAEncryption
0a:3b:50:73:3a:89:cb:8f:6f:6c:82:12:fe:ec:c1:c8:f3:5c:
1b:ca:2d:72:55:9e:a9:d7:d2:c9:28:93:58:7d:40:18:4b:04:
dd:0d:9f:94:12:cb:cf:dc:e4:38:ef:16:b0:17:cb:85:c4:ed:
79:a8:d9:9d:e9:1f:bb:85:f6:ea:95:77:13:f1:83:26:f6:74:
62:10:d5:28:de:af:ec:55:98:2d:bf:6d:ca:ff:19:d5:1c:57:
e2:fa:2b:d7:32:69:e6:9d:64:63:ac:64:c6:97:33:1f:e3:12:
84:77:3a:75:65:5c:44:7c:16:e9:b4:fe:04:21:e2:26:d4:99:
a0:2a:50:82:bf:04:a5:c7:e1:ff:26:34:e2:1f:6e:ef:d9:c7:
ce:0d:e3:0c:6d:97:24:5e:f3:ae:6b:e5:96:77:57:a3:99:70:
c5:6a:28:03:60:7b:56:3a:48:9b:18:db:54:2b:e7:80:4a:f1:
aa:82:e3:67:0a:5c:42:6b:e7:b2:4a:95:9b:c9:bc:04:d8:04:
0e:9f:b7:c3:25:a1:4f:4a:45:e9:7b:ac:1e:f8:c9:ab:fb:3e:
97:3a:36:cb:88:5f:f6:f5:74:62:8c:64:4a:a0:c5:21:67:43:
40:ec:f7:9e:ec:fd:33:af:b6:a6:f9:64:12:4f:2a:02:f1:6f:
20:31:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org