Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
File: AS214676.roa (raw, json)
Hash identifier: QPItn1YXZnarYxHbdzlQcmsCWs+slPc4Y0wpPOagicY=
Subject key identifier: 3D:33:CD:8C:E0:80:1B:0D:C0:21:A2:6D:0B:8C:F9:32:96:98:D0:EF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0923798705FC860DCB4255440F10DDFAEE1A7C8C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
Signing time: Fri 23 Aug 2024 08:01:19 +0000
ROA not before: Fri 23 Aug 2024 07:56:19 +0000
ROA not after: Fri 22 Aug 2025 08:01:19 +0000
asID: 214676
IP address blocks: 2a0f:85c1:81b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:23:79:87:05:fc:86:0d:cb:42:55:44:0f:10:dd:fa:ee:1a:7c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:19 2024 GMT
Not After : Aug 22 08:01:19 2025 GMT
Subject: CN=3D33CD8CE0801B0DC021A26D0B8CF9329698D0EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:d9:0f:c1:87:06:eb:04:42:b0:27:f9:8b:
37:18:2f:3e:60:f2:6e:18:ce:79:7d:91:87:53:52:
6e:71:7b:9e:66:0c:77:2c:29:e9:90:ef:ad:c8:e2:
ef:48:dc:bb:72:43:6d:76:54:56:28:af:59:8a:1e:
bb:7d:ed:63:38:6e:7e:b3:de:3c:79:3e:e7:df:ec:
48:d8:6b:b4:01:d3:c9:00:af:1b:f1:9c:c7:65:d2:
15:a4:7d:dd:2a:b3:91:3a:b6:ab:13:79:9c:da:05:
6f:75:6b:71:35:58:37:3a:4b:67:5c:1d:81:0a:52:
ca:2f:06:c1:b8:fb:68:2a:f1:07:75:80:c1:00:56:
4c:c1:aa:ea:62:df:e4:ec:32:ee:c3:c9:57:15:31:
6d:ca:25:f7:53:20:f2:43:32:9b:9e:1d:61:7d:68:
ad:6e:85:da:6d:e2:98:8a:d2:68:18:79:24:e8:c0:
b9:ad:0d:af:98:7e:cc:8c:ae:15:b7:70:d7:b6:cd:
a7:c0:a9:70:54:34:d8:0c:38:1f:b5:12:73:04:29:
0b:6a:4f:84:bf:06:f1:ab:62:1b:39:43:c2:1e:e2:
c5:be:01:67:f5:fc:83:45:7b:af:d0:23:77:96:6e:
87:82:46:15:25:d7:88:ca:ce:8a:b0:fd:d2:3d:64:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:CD:8C:E0:80:1B:0D:C0:21:A2:6D:0B:8C:F9:32:96:98:D0:EF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:81b::/48
Signature Algorithm: sha256WithRSAEncryption
72:9e:33:d7:de:ed:71:19:e6:07:96:d0:37:d2:49:7d:2c:47:
3d:9f:c9:b2:e2:bf:bb:6c:28:8e:db:ca:23:38:c4:32:bb:5e:
d8:bb:80:70:97:0f:f9:a5:1d:2d:a9:6d:6a:36:1d:ab:57:dc:
51:08:f8:55:27:b9:a1:5c:9d:95:47:63:8c:2c:2e:56:06:4b:
16:c7:98:8c:16:63:a0:ab:1e:84:4c:b8:a7:17:de:d0:79:3a:
db:0d:5b:fb:21:e4:a3:22:ff:c3:75:8c:2c:25:d7:fd:8f:ea:
ff:92:95:c0:f3:d8:9d:d4:2d:1b:ab:39:95:08:22:2d:68:6f:
a7:d7:ef:5a:7d:12:7d:52:5b:c5:84:2a:5a:b7:7b:81:7d:7f:
49:33:d4:48:32:05:c7:89:3d:4e:03:4f:b6:6f:c1:12:9d:90:
ac:c4:95:93:5e:aa:bb:39:3d:ea:ed:bb:ca:03:62:7a:79:10:
7c:f2:73:64:31:af:8e:c7:68:05:e9:0d:ff:60:3d:9d:87:e9:
a7:3c:45:20:5f:e4:a6:4e:4b:96:37:9a:d3:eb:da:bf:df:9d:
69:fb:52:2f:4e:76:97:81:60:ae:7a:f4:26:9a:fe:e2:ca:3e:
77:73:15:f7:46:3d:26:b6:f6:fc:47:e0:bb:77:0e:bd:11:fb:
ef:27:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:44 2024 by rpki-client on console-fra.rpki-client.org