Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214832.roa
File: AS214832.roa (raw, json)
Hash identifier: trzRDs9MVNJGeMnMJxH+Vid0/ZGZPMKYAPDSjXwRAtc=
Subject key identifier: 9A:F8:E7:BA:C4:50:0D:8B:F4:67:D8:A5:9C:BF:BF:18:00:D1:0D:87
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 7CE0B906ED3158A79BD642FBD5661B1F157164FF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214832.roa
Signing time: Fri 23 Aug 2024 08:01:17 +0000
ROA not before: Fri 23 Aug 2024 07:56:17 +0000
ROA not after: Fri 22 Aug 2025 08:01:17 +0000
asID: 214832
IP address blocks: 2a0f:85c1:805::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e0:b9:06:ed:31:58:a7:9b:d6:42:fb:d5:66:1b:1f:15:71:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:17 2024 GMT
Not After : Aug 22 08:01:17 2025 GMT
Subject: CN=9AF8E7BAC4500D8BF467D8A59CBFBF1800D10D87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:ef:97:aa:bf:f6:8a:57:c4:01:ba:62:9e:
83:72:24:33:e1:c3:e3:be:63:15:2f:80:5d:37:1e:
77:28:2e:3b:8f:82:0d:5c:7c:1d:68:dd:34:f4:e5:
38:51:e0:f1:11:d7:93:53:3b:ce:ca:e6:83:8f:3a:
f6:cc:d1:22:e2:d3:46:ec:6d:f4:d5:de:ae:24:5a:
a5:0c:2e:ad:7f:ed:09:62:91:55:33:3a:95:26:e2:
43:7a:5f:11:50:cf:a7:4d:ad:ea:0d:34:24:50:93:
13:79:0b:8c:21:58:17:33:58:5e:8d:b6:bd:17:bf:
11:0e:70:ba:f0:73:e2:58:1a:d3:08:18:03:0a:66:
ca:f2:16:04:36:48:5b:e0:ac:7e:db:74:f6:b1:92:
ec:d0:3b:d4:1b:05:0e:fa:80:6f:33:95:ed:b9:4d:
bf:7e:f7:02:6b:5a:21:f4:00:8a:08:83:32:59:d4:
9b:e9:d2:e9:c1:93:60:c8:51:74:ba:97:a1:33:a2:
ac:4e:10:f8:bd:2d:51:42:2e:c4:c7:29:22:2b:ab:
74:f5:ce:91:b8:28:a5:1b:b0:be:46:0b:54:d2:c5:
d1:16:0e:6a:36:21:2f:06:6e:cb:66:d4:96:1b:b2:
73:69:22:c6:7b:ba:ca:42:f9:81:6d:91:60:da:d8:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F8:E7:BA:C4:50:0D:8B:F4:67:D8:A5:9C:BF:BF:18:00:D1:0D:87
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:805::/48
Signature Algorithm: sha256WithRSAEncryption
ac:24:2d:da:49:24:32:ef:d4:0b:c9:8c:8b:30:5e:e9:a7:5f:
14:2f:c4:37:79:31:fe:81:aa:32:67:03:e6:cb:2d:5d:a2:c2:
ed:f1:e5:01:69:0e:b7:9b:c2:2f:b7:cb:47:3c:7b:82:cf:9a:
04:fd:ac:11:c9:3e:cb:ae:bf:c4:91:a6:d8:6b:89:1a:e5:17:
97:7c:22:c8:40:e1:ca:09:5c:f9:c6:67:04:48:a9:be:ee:5b:
45:98:30:37:47:a1:d9:09:cc:83:94:1f:dc:be:e0:52:5f:6e:
07:a1:43:66:89:a7:2b:0e:55:42:db:27:a3:f0:07:d7:87:38:
d2:56:13:58:2a:77:09:b5:9a:04:dd:85:bc:b5:29:1f:cb:c2:
44:6d:f4:6e:ce:2c:39:d4:05:8e:cf:61:c0:e9:17:95:17:d0:
98:85:f8:5e:9e:2f:9e:eb:8a:7e:15:41:32:cf:b9:c2:5e:cf:
22:c8:08:46:e0:5f:75:de:61:b7:5e:b6:6a:a6:22:0f:71:0f:
4f:53:c0:f6:62:7e:1f:5b:4b:e9:43:64:a0:22:ee:53:d9:6c:
8e:a6:db:11:12:11:36:f6:87:bf:40:3b:fe:5d:24:26:bf:d7:
42:4c:f3:21:8e:94:0d:43:36:42:82:2a:34:8b:2a:6f:0d:c9:
be:26:b0:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUfOC5Bu0xWKeb1kL71WYbHxVxZP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MTdaFw0yNTA4MjIwODAxMTdaMDMxMTAvBgNV
BAMTKDlBRjhFN0JBQzQ1MDBEOEJGNDY3RDhBNTlDQkZCRjE4MDBEMTBEODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLqO+Xqr/2ilfEAbpinoNyJDPh
w+O+YxUvgF03HncoLjuPgg1cfB1o3TT05ThR4PER15NTO87K5oOPOvbM0SLi00bs
bfTV3q4kWqUMLq1/7QlikVUzOpUm4kN6XxFQz6dNreoNNCRQkxN5C4whWBczWF6N
tr0XvxEOcLrwc+JYGtMIGAMKZsryFgQ2SFvgrH7bdPaxkuzQO9QbBQ76gG8zle25
Tb9+9wJrWiH0AIoIgzJZ1Jvp0unBk2DIUXS6l6EzoqxOEPi9LVFCLsTHKSIrq3T1
zpG4KKUbsL5GC1TSxdEWDmo2IS8Gbstm1JYbsnNpIsZ7uspC+YFtkWDa2GhtAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUmvjnusRQDYv0Z9ilnL+/GADRDYcwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0ODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgFMA0GCSqGSIb3DQEBCwUAA4IBAQCsJC3aSSQy79QLyYyLMF7pp18UL8Q3eTH+
gaoyZwPmyy1dosLt8eUBaQ63m8Ivt8tHPHuCz5oE/awRyT7Lrr/EkabYa4ka5ReX
fCLIQOHKCVz5xmcESKm+7ltFmDA3R6HZCcyDlB/cvuBSX24HoUNmiacrDlVC2yej
8AfXhzjSVhNYKncJtZoE3YW8tSkfy8JEbfRuziw51AWOz2HA6ReVF9CYhfheni+e
64p+FUEyz7nCXs8iyAhG4F913mG3XrZqpiIPcQ9PU8D2Yn4fW0vpQ2SgIu5T2WyO
ptsREhE29oe/QDv+XSQmv9dCTPMhjpQNQzZCgio0iypvDcm+JrBZ
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org