Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214769.roa
File: AS214769.roa (raw, json)
Hash identifier: IQxAMfHlEZ7zcdp9pWs/ZDL1yKNAwlI8TFTn4jqlaVU=
Subject key identifier: 81:7B:39:A2:18:A7:58:9C:B9:85:99:0F:A6:4C:14:33:22:6F:C5:7E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 428F9396770E8C322A4519114DDC57B265BF875A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214769.roa
Signing time: Fri 23 Aug 2024 08:01:20 +0000
ROA not before: Fri 23 Aug 2024 07:56:20 +0000
ROA not after: Fri 22 Aug 2025 08:01:20 +0000
asID: 214769
IP address blocks: 2a0f:85c1:3d5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8f:93:96:77:0e:8c:32:2a:45:19:11:4d:dc:57:b2:65:bf:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:20 2024 GMT
Not After : Aug 22 08:01:20 2025 GMT
Subject: CN=817B39A218A7589CB985990FA64C1433226FC57E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:d7:28:75:6e:8c:76:76:45:d8:62:fe:05:
ac:2e:1b:8c:b0:c5:d6:98:29:8f:8d:7e:df:50:9a:
5e:7a:94:e0:e2:81:26:44:a7:4a:57:ad:d1:ed:71:
72:64:6d:3e:07:82:40:83:46:ed:fe:5e:ac:0d:d3:
25:7f:a5:f0:16:47:a1:b9:43:3f:63:a3:ee:f2:49:
4e:73:2f:f8:12:84:6a:0f:88:7d:f0:a2:4f:79:83:
26:a3:f3:b1:af:f9:91:d9:a0:c6:83:1c:85:2a:7d:
68:6d:f0:f8:4e:29:a3:d8:f9:a7:4c:2d:d7:39:1a:
3a:f8:c4:12:44:b3:e4:1a:44:25:bf:1c:a0:4f:46:
68:fd:4f:13:ce:14:7b:cb:f2:80:3b:8e:25:82:b6:
2e:47:72:a1:ca:cd:51:a9:fe:e7:a2:64:68:ff:4c:
65:13:16:96:ff:03:b1:f6:49:c9:85:e1:09:6d:96:
30:dc:71:a4:51:60:5d:9c:28:12:87:2f:8e:57:0f:
21:7f:c1:a0:5f:e8:56:45:50:1b:ee:74:7d:ee:9c:
3d:90:d7:43:6a:f8:85:5c:7b:60:c2:09:43:83:e3:
5d:fa:bd:5f:cc:46:b9:c2:5f:0b:79:c9:57:42:e8:
f2:dd:ef:49:c5:0e:48:49:e8:db:7c:37:62:97:a1:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:39:A2:18:A7:58:9C:B9:85:99:0F:A6:4C:14:33:22:6F:C5:7E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214769.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d5::/48
Signature Algorithm: sha256WithRSAEncryption
e6:ec:52:01:94:cb:96:b7:26:ad:86:72:ea:1a:37:aa:95:97:
36:f5:35:69:ca:4e:67:3a:90:6e:a5:1e:73:c3:3a:86:a3:0a:
a5:4f:6a:aa:f4:33:af:a4:4d:12:62:ad:47:f0:e4:a5:f8:d3:
84:26:31:1c:49:4c:1e:3b:1b:5b:91:2f:d5:e8:0c:73:05:47:
49:a2:af:ca:67:5a:0e:c9:67:1d:9a:57:15:4c:66:bf:c3:25:
b6:14:30:cf:55:26:a1:65:b4:d3:03:af:c2:b0:53:02:fa:e0:
b0:54:1d:a5:c6:07:bc:96:e3:f9:90:68:5b:aa:cf:13:32:ea:
1b:c4:6f:51:0d:c3:2f:59:b9:6b:a0:89:b8:29:11:22:a6:ce:
f6:ab:ee:65:d6:ba:0f:ea:69:54:bd:17:31:cb:04:9e:3a:dd:
0b:b7:e2:72:07:c5:ed:49:33:01:41:54:f0:ab:fd:02:39:31:
ea:3b:ec:7b:2d:59:c9:11:4b:59:5c:5c:c7:e8:a2:63:7a:b0:
1a:31:af:75:ba:d5:54:c5:4c:83:31:48:ec:1a:17:6a:67:c3:
3f:40:fa:ed:29:dd:ce:79:3d:b2:e2:45:8e:d6:ff:65:1d:1b:
29:a8:b2:3d:c6:c7:b9:e5:54:3e:98:55:b0:6d:15:49:a5:a9:
6f:a2:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org