Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
File: AS214751.roa (raw, json)
Hash identifier: 7RPTuRBL9VNF2wtX2WmpBU4IaVRXgcvUdPyqbmi9bDM=
Subject key identifier: 49:E6:31:76:8F:DA:6E:7C:70:A9:8A:9F:73:E6:29:62:A6:34:2A:0C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 47FACF6907C0E15588A74719934CEF870D3BE9C5
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
Signing time: Fri 23 Aug 2024 08:01:15 +0000
ROA not before: Fri 23 Aug 2024 07:56:15 +0000
ROA not after: Fri 22 Aug 2025 08:01:15 +0000
asID: 214751
IP address blocks: 2a0f:85c1:813::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fa:cf:69:07:c0:e1:55:88:a7:47:19:93:4c:ef:87:0d:3b:e9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:15 2024 GMT
Not After : Aug 22 08:01:15 2025 GMT
Subject: CN=49E631768FDA6E7C70A98A9F73E62962A6342A0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:7c:f7:f7:45:1d:93:0e:0b:35:df:8a:a0:
04:e4:0b:f1:d8:eb:af:05:f0:e6:bb:41:70:62:fd:
66:97:16:42:24:37:90:ba:0f:56:7d:5f:1d:9d:7b:
8c:0e:36:11:bd:95:d5:b1:df:71:30:28:9b:19:ab:
e8:a7:f6:2d:77:c9:84:b3:37:eb:12:6f:c9:7b:93:
ec:63:68:be:ff:dc:39:1d:b7:89:c1:29:c6:46:00:
a5:cd:04:1d:32:f7:12:f6:4d:7b:9f:a8:1e:e4:6b:
9a:e4:0a:8a:51:cc:25:df:a7:77:3e:ba:75:f6:3f:
83:95:a9:96:c9:e6:e5:2a:12:dc:64:90:2c:b2:5c:
06:d0:8a:04:83:07:43:9c:b6:0a:f5:43:1f:da:3c:
b7:ef:07:2b:5d:37:c0:f3:ea:af:bf:d6:5b:eb:5b:
94:f6:bb:c6:34:fc:59:df:a2:64:1a:6f:c7:91:12:
12:9e:da:b0:03:1f:3b:87:34:00:eb:a7:83:03:14:
fd:6f:ec:aa:36:7b:28:b8:e4:7f:4d:f7:38:be:b1:
fa:7e:e1:ee:f8:ed:66:bb:4a:8b:bd:7c:02:b6:05:
d0:99:31:c7:b1:7c:27:e9:8d:7b:60:05:8a:3d:b9:
33:cf:8d:3e:3e:a2:f3:30:77:1a:24:4d:62:b3:32:
a1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E6:31:76:8F:DA:6E:7C:70:A9:8A:9F:73:E6:29:62:A6:34:2A:0C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:813::/48
Signature Algorithm: sha256WithRSAEncryption
7c:bb:6d:b3:f1:53:11:3b:99:b7:fd:cf:d4:8a:b4:8e:f7:97:
62:c7:64:a5:2c:52:18:58:6f:20:d1:4e:34:2e:5d:21:0a:38:
be:a7:59:53:ae:c3:da:26:41:a3:76:4b:ed:a6:6a:9b:e3:5c:
74:ae:09:8d:d7:e3:ba:79:d3:d5:eb:10:12:ef:e8:1d:ef:dc:
43:7b:0a:69:c1:fc:ad:be:2d:1c:05:d1:aa:e6:23:96:6b:a5:
40:b6:a5:e7:89:a7:30:6a:e3:15:6a:f4:74:49:87:77:6a:ee:
b1:79:73:d0:0e:13:df:14:27:6f:88:e1:89:68:cd:7e:8c:44:
96:a1:99:22:b8:2a:ad:59:93:e4:a3:54:8c:57:65:ea:1a:30:
c0:ad:29:8d:e8:45:6b:d8:84:f7:19:0e:ca:eb:03:16:6e:01:
a7:78:74:43:83:94:2a:b4:75:03:2a:75:c5:89:11:5e:b2:65:
10:37:23:4d:61:1d:bb:4d:6c:67:a1:47:f7:9b:7f:0c:7f:f7:
02:ce:08:53:99:53:11:70:cf:7a:86:04:83:5c:a3:7e:d7:9e:
bb:a8:3a:cf:16:8e:d8:9b:35:42:4e:1f:8c:22:c0:6c:86:3f:
62:d3:35:ae:d9:8f:0c:76:34:56:b0:79:fe:55:24:54:2d:32:
15:bf:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org