Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
File: AS214675.roa (raw, json)
Hash identifier: xx6PQOdyc40PstfJhLNqzqDVAI5W3zC5VFLrmS8ImB4=
Subject key identifier: B1:3D:0A:4F:13:71:10:A4:3A:69:B1:5A:20:A8:6F:1B:E7:C0:62:38
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 700E3F4E0C8A5013658875EBBF1EDB5AF8A9F6E6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
Signing time: Fri 23 Aug 2024 08:01:21 +0000
ROA not before: Fri 23 Aug 2024 07:56:21 +0000
ROA not after: Fri 22 Aug 2025 08:01:21 +0000
asID: 214675
IP address blocks: 2a0f:85c1:3fa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0e:3f:4e:0c:8a:50:13:65:88:75:eb:bf:1e:db:5a:f8:a9:f6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:21 2024 GMT
Not After : Aug 22 08:01:21 2025 GMT
Subject: CN=B13D0A4F137110A43A69B15A20A86F1BE7C06238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:49:3d:e5:10:2a:c2:18:ff:df:c8:ad:38:
c0:14:6c:40:2b:fc:f1:92:10:84:f6:40:27:04:6a:
de:92:c2:6f:cb:36:d3:86:7b:88:98:1b:b1:f7:22:
b7:ba:61:de:db:e4:96:34:35:dd:e6:fe:18:02:35:
9f:ad:e2:7b:41:89:78:87:a9:6f:a7:38:f4:df:d2:
dc:83:a4:0f:9a:8b:98:99:0d:c0:7a:b3:6b:ee:0e:
6d:83:f9:b7:8b:56:6f:09:30:46:41:a3:88:89:80:
17:05:f4:a1:20:4a:3f:e8:23:ff:49:17:bf:fb:96:
ad:0f:1b:18:26:e4:2d:93:c9:55:63:54:d9:fc:ad:
dc:42:ba:c0:c0:b0:ca:04:01:0b:6c:8b:db:de:de:
4d:d4:f2:56:78:15:03:92:bd:58:9f:52:61:a7:d5:
e2:e9:c3:1d:88:44:97:7e:b1:1a:31:e0:99:3c:92:
06:5f:67:e2:3b:6b:e7:79:60:2f:4b:61:41:09:ce:
d0:c8:16:5f:4c:ec:b9:25:73:dc:50:b9:a9:28:ea:
7f:b3:76:d3:44:9f:a3:06:5b:95:91:d7:78:6b:7b:
c2:62:7f:7f:9e:33:0e:41:49:b9:9d:86:a3:af:e3:
9a:75:49:5a:af:5a:83:53:ee:bd:d6:74:87:df:5a:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:0A:4F:13:71:10:A4:3A:69:B1:5A:20:A8:6F:1B:E7:C0:62:38
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3fa::/48
Signature Algorithm: sha256WithRSAEncryption
99:92:76:9c:f3:e5:cc:a4:de:16:51:b8:ec:2d:de:56:ff:c8:
31:aa:13:b8:09:ed:58:90:3e:89:9a:b0:ed:62:e5:42:11:16:
e9:05:05:85:85:71:78:62:59:85:e9:77:fb:58:0f:a6:5c:b5:
9f:aa:e8:af:5b:1b:f8:43:d5:30:8c:6f:1c:5e:d3:38:1e:60:
57:5e:f1:21:19:d3:dd:79:e4:ba:d3:59:5b:90:cf:9e:17:c5:
dc:13:14:12:cc:a1:f1:01:2c:79:50:6e:95:32:43:ea:b1:59:
1d:28:54:9c:f1:bb:53:2a:39:ef:60:06:51:66:84:df:34:4a:
4a:59:3e:6c:62:48:57:3f:84:6a:7c:70:ea:16:b2:a4:62:c7:
1e:a0:65:d5:74:01:d5:70:07:9e:18:3a:e7:96:ad:db:28:bc:
4c:26:78:23:9f:f8:97:30:0c:54:9b:1f:27:c5:19:ca:63:2f:
49:b3:bf:7d:77:49:23:b5:ad:27:b5:65:06:e3:dd:ab:66:7c:
6d:95:a3:dc:95:4e:a9:5b:74:a2:e9:ef:3e:2c:3e:e4:f6:00:
25:16:c4:49:5d:52:df:ff:22:87:bb:d0:9f:f2:62:5d:50:2e:
da:73:e5:a7:82:9e:ab:f4:a9:4c:83:72:33:ca:98:64:d6:40:
a5:12:32:1c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUcA4/TgyKUBNliHXrvx7bWvip9uYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjFaFw0yNTA4MjIwODAxMjFaMDMxMTAvBgNV
BAMTKEIxM0QwQTRGMTM3MTEwQTQzQTY5QjE1QTIwQTg2RjFCRTdDMDYyMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fUk95RAqwhj/38itOMAUbEAr
/PGSEIT2QCcEat6Swm/LNtOGe4iYG7H3Ire6Yd7b5JY0Nd3m/hgCNZ+t4ntBiXiH
qW+nOPTf0tyDpA+ai5iZDcB6s2vuDm2D+beLVm8JMEZBo4iJgBcF9KEgSj/oI/9J
F7/7lq0PGxgm5C2TyVVjVNn8rdxCusDAsMoEAQtsi9ve3k3U8lZ4FQOSvVifUmGn
1eLpwx2IRJd+sRox4Jk8kgZfZ+I7a+d5YC9LYUEJztDIFl9M7Lklc9xQuako6n+z
dtNEn6MGW5WR13hre8Jif3+eMw5BSbmdhqOv45p1SVqvWoNT7r3WdIffWiPnAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUsT0KTxNxEKQ6abFaIKhvG+fAYjgwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0Njc1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQP6MA0GCSqGSIb3DQEBCwUAA4IBAQCZknac8+XMpN4WUbjsLd5W/8gxqhO4Ce1Y
kD6JmrDtYuVCERbpBQWFhXF4YlmF6Xf7WA+mXLWfquivWxv4Q9UwjG8cXtM4HmBX
XvEhGdPdeeS601lbkM+eF8XcExQSzKHxASx5UG6VMkPqsVkdKFSc8btTKjnvYAZR
ZoTfNEpKWT5sYkhXP4RqfHDqFrKkYsceoGXVdAHVcAeeGDrnlq3bKLxMJngjn/iX
MAxUmx8nxRnKYy9Js799d0kjta0ntWUG492rZnxtlaPclU6pW3Si6e8+LD7k9gAl
FsRJXVLf/yKHu9Cf8mJdUC7ac+Wngp6r9KlMg3Izyphk1kClEjIc
-----END CERTIFICATE-----
Generated at Sat Nov 23 16:20:22 2024 by rpki-client on console-fra.rpki-client.org