Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214642.roa
File: AS214642.roa (raw, json)
Hash identifier: ciCtzj2gCHPTvelJpv4HsSM/MJza/qkAUetwdz2rcYI=
Subject key identifier: B9:6B:F7:4F:AE:29:78:28:FA:D5:A8:00:E7:18:46:76:55:A3:C9:51
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5BDA972C17E544095CD9F1E1DD2C258DBDADDD58
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214642.roa
Signing time: Fri 23 Aug 2024 08:01:24 +0000
ROA not before: Fri 23 Aug 2024 07:56:24 +0000
ROA not after: Fri 22 Aug 2025 08:01:24 +0000
asID: 214642
IP address blocks: 2a0f:85c1:826::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:da:97:2c:17:e5:44:09:5c:d9:f1:e1:dd:2c:25:8d:bd:ad:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:24 2024 GMT
Not After : Aug 22 08:01:24 2025 GMT
Subject: CN=B96BF74FAE297828FAD5A800E718467655A3C951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:a5:6b:2f:e5:7c:06:14:b3:bb:a9:4f:b6:
1e:dd:6c:72:01:fa:63:35:b2:bb:53:04:d6:92:f9:
a4:15:f0:f0:9b:2a:ad:03:59:dd:42:fa:8c:4f:69:
4a:cc:09:da:95:69:f9:b1:12:97:05:34:49:6d:b0:
2e:93:e0:ba:ed:f6:34:d8:c0:a6:d5:5f:b1:61:4f:
b5:09:09:01:3e:a4:17:57:52:9f:64:7f:82:cc:e0:
b2:60:e3:f7:db:71:4c:48:3e:e3:53:bf:3e:f6:7c:
0e:ac:7a:2e:cc:fb:ec:91:75:ba:96:d3:6c:18:03:
43:5a:f1:7c:9e:a9:fd:ca:76:99:af:f5:a1:3e:85:
8f:85:00:21:75:74:4d:f3:9a:90:e9:d1:31:2a:e2:
d9:e2:4c:4a:49:8b:eb:a9:bc:0b:a0:94:2e:92:bc:
d3:a3:3f:a7:5c:32:0e:05:2b:30:85:de:37:10:3a:
a1:6b:74:62:68:09:11:5d:e2:38:90:bc:ae:36:66:
cd:e7:8a:37:f0:9d:18:02:15:55:c5:9b:69:ce:03:
d3:a4:97:e7:6b:95:7f:90:e4:23:a9:74:fb:41:19:
17:2e:87:13:8f:61:bd:ca:f4:2c:a7:09:4b:1c:3f:
f9:0b:a9:8b:66:10:47:1d:38:63:55:85:aa:93:fa:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:F7:4F:AE:29:78:28:FA:D5:A8:00:E7:18:46:76:55:A3:C9:51
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:826::/48
Signature Algorithm: sha256WithRSAEncryption
c1:30:a5:c0:92:cd:72:79:00:99:6e:4c:c1:fb:4d:a4:77:7e:
ba:fc:fe:b4:4c:ba:df:86:9f:b8:4e:bc:6f:1f:ca:ee:27:57:
b0:24:0e:ce:a7:89:56:75:37:da:85:a3:a5:ee:f7:d4:fb:33:
40:ad:c9:6a:0e:fe:af:5c:6a:ca:39:80:2a:62:62:ec:f2:3a:
b7:4f:64:eb:86:3d:a4:f3:a2:5d:f8:4b:e9:b2:83:c5:a4:1d:
f9:1b:17:e0:a6:95:01:da:43:78:69:c9:2c:6d:27:18:7f:b2:
ad:c1:66:18:c1:88:ee:d2:dd:ba:93:6e:08:68:77:a8:5b:4c:
99:6a:86:63:f1:b8:6e:28:90:0d:73:ea:a5:44:87:1d:81:15:
00:7e:9c:82:c4:3f:51:22:4d:9c:5f:29:76:64:be:3c:a4:e0:
a7:b5:9a:5c:4a:70:37:25:e6:8d:2e:3d:95:6e:60:46:a3:2e:
68:b0:7f:d0:c0:cf:da:74:fb:3e:c3:cd:e5:82:f7:62:6d:ed:
02:1c:53:7f:99:d1:46:42:91:b8:d7:34:ef:23:f8:ec:c8:31:
3d:d7:35:41:80:e2:6b:82:9d:88:8f:87:89:4f:81:fc:3d:4a:
81:99:57:09:d1:16:a3:e9:c5:52:a0:4f:11:90:05:1a:fe:d8:
84:69:fd:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUW9qXLBflRAlc2fHh3Swljb2t3VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjRaFw0yNTA4MjIwODAxMjRaMDMxMTAvBgNV
BAMTKEI5NkJGNzRGQUUyOTc4MjhGQUQ1QTgwMEU3MTg0Njc2NTVBM0M5NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0qVrL+V8BhSzu6lPth7dbHIB
+mM1srtTBNaS+aQV8PCbKq0DWd1C+oxPaUrMCdqVafmxEpcFNEltsC6T4Lrt9jTY
wKbVX7FhT7UJCQE+pBdXUp9kf4LM4LJg4/fbcUxIPuNTvz72fA6sei7M++yRdbqW
02wYA0Na8Xyeqf3Kdpmv9aE+hY+FACF1dE3zmpDp0TEq4tniTEpJi+upvAuglC6S
vNOjP6dcMg4FKzCF3jcQOqFrdGJoCRFd4jiQvK42Zs3nijfwnRgCFVXFm2nOA9Ok
l+drlX+Q5COpdPtBGRcuhxOPYb3K9CynCUscP/kLqYtmEEcdOGNVhaqT+vP7AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUuWv3T64peCj61agA5xhGdlWjyVEwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0NjQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgmMA0GCSqGSIb3DQEBCwUAA4IBAQDBMKXAks1yeQCZbkzB+02kd366/P60TLrf
hp+4TrxvH8ruJ1ewJA7Op4lWdTfahaOl7vfU+zNArclqDv6vXGrKOYAqYmLs8jq3
T2Trhj2k86Jd+EvpsoPFpB35GxfgppUB2kN4acksbScYf7KtwWYYwYju0t26k24I
aHeoW0yZaoZj8bhuKJANc+qlRIcdgRUAfpyCxD9RIk2cXyl2ZL48pOCntZpcSnA3
JeaNLj2VbmBGoy5osH/QwM/adPs+w83lgvdibe0CHFN/mdFGQpG41zTvI/jsyDE9
1zVBgOJrgp2Ij4eJT4H8PUqBmVcJ0Raj6cVSoE8RkAUa/tiEaf3u
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org