Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
File: AS214818.roa (raw, json)
Hash identifier: Oayx/EN2jpex8ef3Mv+qr2rDhOI33C1eZCKG/nmJL/E=
Subject key identifier: C1:2E:76:64:E7:35:86:F3:70:B9:6E:84:A7:95:5F:AA:2A:D1:D2:43
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 74E0B3FC3CA42CA4F9236DE2A0DA758A66852D77
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
Signing time: Fri 23 Aug 2024 08:01:26 +0000
ROA not before: Fri 23 Aug 2024 07:56:26 +0000
ROA not after: Fri 22 Aug 2025 08:01:26 +0000
asID: 214818
IP address blocks: 2a0f:85c1:808::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e0:b3:fc:3c:a4:2c:a4:f9:23:6d:e2:a0:da:75:8a:66:85:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:26 2024 GMT
Not After : Aug 22 08:01:26 2025 GMT
Subject: CN=C12E7664E73586F370B96E84A7955FAA2AD1D243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d6:af:cf:f5:97:a7:84:ae:a7:63:2e:84:b7:
6e:26:85:c9:70:57:cc:70:9e:8f:d2:09:6c:c5:78:
ce:9a:8a:5f:ea:17:08:03:ed:95:ec:f7:89:f4:aa:
4d:8a:a7:a1:91:1c:7e:09:f1:57:cb:7c:23:54:57:
25:6b:ff:1c:da:7d:f9:dc:ab:29:48:c1:67:b9:df:
83:31:1c:f7:99:ab:09:60:f5:17:c2:8e:44:35:68:
d0:4e:c1:d1:b2:a5:a6:7e:fa:d9:05:50:e7:d7:dc:
0f:6f:0c:b2:09:00:58:13:b5:e0:36:fb:0f:75:18:
c7:db:1a:65:db:c8:b4:18:ac:25:4f:f8:dd:27:b3:
56:a4:75:02:e7:74:2b:44:1e:cc:13:29:7c:c9:06:
63:7a:71:08:3b:c8:4e:6d:e4:c1:13:8b:ea:68:9b:
6d:3f:23:f3:b4:cd:d5:c4:41:e9:81:8a:d7:37:cb:
82:11:2c:99:18:b6:20:c8:ff:fa:7c:b8:fe:eb:31:
b1:6a:2b:12:a4:68:23:13:3c:55:05:8c:2e:56:97:
f9:c4:8a:df:ed:be:cd:1e:ae:1d:d8:d5:c5:73:c5:
20:48:91:a1:1d:fa:b2:e9:63:0a:96:d1:e5:49:a4:
06:8e:4f:fd:d2:55:fb:89:81:66:fb:3a:e7:6f:1a:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:76:64:E7:35:86:F3:70:B9:6E:84:A7:95:5F:AA:2A:D1:D2:43
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:808::/48
Signature Algorithm: sha256WithRSAEncryption
58:f9:cd:8a:00:db:52:e9:d6:ef:b2:55:ef:2a:2e:f3:c4:ae:
e5:47:7f:6c:8a:dd:19:37:ad:ee:75:e8:fe:06:0a:b5:bc:2d:
02:72:eb:f6:f5:d2:2c:d3:41:e8:74:da:4e:0c:65:2b:de:41:
b8:1c:d4:b5:27:ee:d6:94:52:bf:ab:fd:d8:ba:33:5a:32:2f:
bf:87:7a:ba:05:29:58:cc:33:cb:c8:95:3d:c2:c1:bc:9c:6a:
05:8c:cf:69:d5:7d:e6:c7:04:db:0b:3f:56:27:0e:4d:b2:12:
da:13:e8:31:b8:fd:75:50:f3:97:a1:9c:d5:d9:3d:94:2c:01:
2f:1e:7f:79:df:f6:92:61:20:c5:fd:fe:d5:3c:08:bb:54:a1:
76:b8:51:32:05:30:27:7b:0d:35:11:bc:54:0b:dd:57:21:ea:
a0:27:e7:ae:14:91:62:88:0b:27:c7:39:85:8f:23:1f:9b:6c:
9f:97:8a:82:6e:70:9e:0d:c6:7d:95:fa:d7:71:ba:a2:86:af:
3a:87:9a:95:57:6c:e1:18:c8:75:e5:34:42:71:61:d8:4e:a2:
e4:2c:f7:dd:ef:03:83:ca:be:60:42:e2:01:a6:cc:f0:16:ea:
58:74:e9:0a:6e:97:de:c0:4d:2e:bc:61:ab:b8:f0:34:42:4b:
4a:a4:cb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org