Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214809.roa
File: AS214809.roa (raw, json)
Hash identifier: qLGryxO77ALKLDsJh6nnQ/7rBrNYUp2N5zMqufl4K2I=
Subject key identifier: 58:0C:20:E3:20:71:A3:3B:8A:CB:5F:0C:D8:E4:DD:79:74:40:62:F4
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0852E1CE938AC24511BB33023B20B775B627DB56
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214809.roa
Signing time: Fri 23 Aug 2024 08:01:17 +0000
ROA not before: Fri 23 Aug 2024 07:56:17 +0000
ROA not after: Fri 22 Aug 2025 08:01:17 +0000
asID: 214809
IP address blocks: 2a0f:85c1:807::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:52:e1:ce:93:8a:c2:45:11:bb:33:02:3b:20:b7:75:b6:27:db:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:17 2024 GMT
Not After : Aug 22 08:01:17 2025 GMT
Subject: CN=580C20E32071A33B8ACB5F0CD8E4DD79744062F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:1e:51:c3:d7:9b:65:34:7c:d4:f6:89:13:
1f:b5:14:c4:87:79:78:3a:ec:4d:f1:49:77:f8:47:
53:90:91:40:f4:6f:a0:a4:1e:04:a4:c2:bd:5c:68:
03:52:6a:7a:b2:f6:a3:fe:a6:18:63:57:0c:bc:3d:
90:ab:d2:dc:d8:e5:9d:59:23:90:66:b7:c6:29:d6:
80:97:4a:5b:49:fd:ea:37:57:fc:c1:35:c0:6e:b2:
da:3e:9c:90:c8:24:32:1f:c5:cb:81:da:35:a2:27:
4e:20:c4:7e:7e:be:fe:4b:7d:45:55:cc:70:c3:a2:
bb:17:ea:0b:91:e4:d9:dc:ba:9b:f8:31:40:46:d9:
e5:be:c8:e6:af:fb:de:c3:44:f9:71:2c:29:db:e1:
87:ed:7e:8a:ac:ee:d2:b2:4e:d1:f1:1e:d9:4d:8e:
14:c6:61:3d:1b:61:f9:12:e5:80:a4:ae:c2:38:01:
10:fd:37:e2:1e:95:ce:cb:65:d4:30:60:ca:cc:10:
a3:99:78:5e:e5:3b:a5:37:f3:8f:fb:a3:fd:23:82:
63:31:32:36:5b:fd:df:ed:d8:21:85:7a:55:d0:a5:
e4:c2:cc:7b:b9:d2:33:78:ac:bd:e1:98:a0:4d:21:
ea:24:5b:78:4c:83:e0:db:4a:dd:82:95:dd:74:ad:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0C:20:E3:20:71:A3:3B:8A:CB:5F:0C:D8:E4:DD:79:74:40:62:F4
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214809.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:807::/48
Signature Algorithm: sha256WithRSAEncryption
33:f0:bc:2d:f0:40:2c:f2:17:62:ca:90:b7:36:12:15:3a:0f:
c5:57:f8:5a:ab:49:c0:98:06:eb:10:51:e0:14:ef:7a:67:5e:
40:95:e2:0e:7c:2d:85:84:53:ac:20:f5:30:ef:7a:1f:f0:5e:
8b:c0:b2:e3:76:17:47:29:ea:ed:1c:30:e6:a1:ed:f0:1a:cf:
7e:60:ba:e4:16:60:02:ba:53:50:08:dd:42:17:c6:d4:e6:4f:
4c:ae:ad:43:5b:b1:c8:71:2a:0c:2c:4b:20:71:60:65:f6:a2:
da:f0:86:46:2c:d7:b9:71:63:65:41:ee:10:be:17:87:b6:61:
6a:79:be:92:0d:d7:2f:82:6e:d2:ac:69:ee:d2:0c:22:5d:f3:
30:7a:0f:7e:f4:5e:bb:e8:6a:2b:3e:c6:9c:9b:43:ac:e2:87:
7f:65:d8:67:35:51:40:87:e4:eb:46:3b:fa:9d:ba:df:48:7d:
2e:20:8c:f9:f5:54:47:51:29:71:15:74:cc:65:e1:bb:ec:9a:
aa:f0:83:3e:f1:54:c4:22:18:c4:0a:ad:20:c9:23:67:ad:06:
36:af:aa:44:07:50:a6:03:a8:4c:0d:59:f8:8b:d2:c1:58:e6:
4a:1f:ab:41:6f:84:f8:2e:f5:14:e2:5a:31:fc:e5:9f:16:47:
93:4e:c0:8b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUCFLhzpOKwkURuzMCOyC3dbYn21YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MTdaFw0yNTA4MjIwODAxMTdaMDMxMTAvBgNV
BAMTKDU4MEMyMEUzMjA3MUEzM0I4QUNCNUYwQ0Q4RTRERDc5NzQ0MDYyRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzfh5Rw9ebZTR81PaJEx+1FMSH
eXg67E3xSXf4R1OQkUD0b6CkHgSkwr1caANSanqy9qP+phhjVwy8PZCr0tzY5Z1Z
I5Bmt8Yp1oCXSltJ/eo3V/zBNcBusto+nJDIJDIfxcuB2jWiJ04gxH5+vv5LfUVV
zHDDorsX6guR5Nncupv4MUBG2eW+yOav+97DRPlxLCnb4Yftfoqs7tKyTtHxHtlN
jhTGYT0bYfkS5YCkrsI4ARD9N+Ielc7LZdQwYMrMEKOZeF7lO6U384/7o/0jgmMx
MjZb/d/t2CGFelXQpeTCzHu50jN4rL3hmKBNIeokW3hMg+DbSt2Cld10rTM5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUWAwg4yBxozuKy18M2OTdeXRAYvQwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0ODA5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgHMA0GCSqGSIb3DQEBCwUAA4IBAQAz8Lwt8EAs8hdiypC3NhIVOg/FV/haq0nA
mAbrEFHgFO96Z15AleIOfC2FhFOsIPUw73of8F6LwLLjdhdHKertHDDmoe3wGs9+
YLrkFmACulNQCN1CF8bU5k9Mrq1DW7HIcSoMLEsgcWBl9qLa8IZGLNe5cWNlQe4Q
vheHtmFqeb6SDdcvgm7SrGnu0gwiXfMweg9+9F676GorPsacm0Os4od/ZdhnNVFA
h+TrRjv6nbrfSH0uIIz59VRHUSlxFXTMZeG77Jqq8IM+8VTEIhjECq0gySNnrQY2
r6pEB1CmA6hMDVn4i9LBWOZKH6tBb4T4LvUU4lox/OWfFkeTTsCL
-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:44 2024 by rpki-client on console-fra.rpki-client.org