Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214841.roa
File: AS214841.roa (raw, json)
Hash identifier: 6g6sy3Nu/Qnfmp5dQaA497vAreeQmHqmglfd/oS23MA=
Subject key identifier: 1E:90:52:D5:93:1A:AB:BD:D0:53:13:F5:21:44:C9:A0:27:E2:E5:F2
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2CDCAE5716EDF881932D5FDF6FFE6D2E45FF78DD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214841.roa
Signing time: Fri 23 Aug 2024 08:01:19 +0000
ROA not before: Fri 23 Aug 2024 07:56:19 +0000
ROA not after: Fri 22 Aug 2025 08:01:19 +0000
asID: 214841
IP address blocks: 2a0f:85c1:801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:dc:ae:57:16:ed:f8:81:93:2d:5f:df:6f:fe:6d:2e:45:ff:78:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:19 2024 GMT
Not After : Aug 22 08:01:19 2025 GMT
Subject: CN=1E9052D5931AABBDD05313F52144C9A027E2E5F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:05:c9:a6:ca:c0:1d:5a:98:6a:30:c4:09:
fe:d4:32:7b:cd:2c:65:c0:37:2b:b4:2e:b3:f5:89:
91:7c:e0:38:fe:93:c1:08:06:bf:c4:07:f7:60:68:
9b:0a:f3:fb:11:d8:b6:d6:fe:36:75:38:cd:3f:2d:
87:08:ee:62:32:2c:22:19:78:cd:c6:85:e5:f3:96:
fa:6b:16:1a:1a:e7:ba:1a:4e:d5:0f:b2:f5:c2:69:
2d:e0:db:2b:50:c7:a9:65:c8:8f:95:6a:3c:b4:60:
33:f0:e4:14:9f:d9:06:55:2f:45:aa:47:3f:ce:17:
cd:3b:ae:75:85:c0:6b:d5:96:d4:ab:30:5c:35:34:
49:0b:c8:de:0f:c0:0d:c2:87:6b:61:d9:79:9f:fc:
ec:96:f8:43:da:ce:10:58:68:de:88:6f:c7:70:8e:
13:ec:ce:ad:95:c6:61:dd:e7:dc:84:18:9e:af:8f:
80:95:8e:11:00:f3:02:90:96:c7:20:1b:3f:56:c8:
59:a1:e6:7b:1e:f3:d0:ec:b3:d1:7c:97:49:bc:7f:
0b:05:ab:6d:2a:e2:c6:a8:08:54:ff:af:f3:87:ca:
ba:1c:ec:6a:6b:9b:a0:a6:59:62:8d:21:bf:5b:03:
27:42:e2:4c:b4:a4:4e:62:87:2c:59:dd:a1:22:b7:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:90:52:D5:93:1A:AB:BD:D0:53:13:F5:21:44:C9:A0:27:E2:E5:F2
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:801::/48
Signature Algorithm: sha256WithRSAEncryption
e3:40:ed:5e:31:2e:6b:1d:49:67:66:56:4b:da:89:79:2c:15:
d9:1e:54:d7:9e:46:5f:8c:a7:94:21:9f:88:e8:1f:e4:b0:fe:
83:47:2a:18:43:b6:e5:93:46:5f:69:b8:af:db:fb:d3:67:47:
b7:3a:69:f5:7d:c6:51:a9:91:ed:87:30:39:f7:7a:6f:b3:60:
cd:c7:8b:8e:2f:dd:44:97:51:99:a2:8a:dd:22:b3:ee:d5:ab:
ab:7c:b1:9e:69:31:18:a9:0d:d7:7f:65:d7:26:3d:f3:29:09:
4f:23:df:86:e8:63:3c:c4:86:39:e6:6e:4e:d8:4b:d6:00:2f:
96:e9:6a:9a:82:e8:d8:62:6b:b8:c2:3c:c9:cc:41:45:d6:48:
fd:ed:14:ed:c1:d7:66:98:40:21:fc:d0:13:f4:99:ef:71:88:
65:23:3f:8e:b4:47:6b:e6:f5:18:a0:d8:6b:b6:f9:e2:db:c9:
76:e2:79:75:fe:c3:d9:08:21:51:b1:aa:1d:44:7b:d7:5f:17:
fb:5b:6a:de:23:51:a8:dc:d6:3e:61:68:77:c7:f4:5d:b1:c1:
af:32:bd:ce:4c:e9:72:d2:53:6a:c5:c2:e9:a8:d8:bd:f3:36:
08:e8:30:f8:98:27:78:4d:69:f5:42:08:ab:30:76:cd:b5:b9:
53:96:d7:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIULNyuVxbt+IGTLV/fb/5tLkX/eN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MTlaFw0yNTA4MjIwODAxMTlaMDMxMTAvBgNV
BAMTKDFFOTA1MkQ1OTMxQUFCQkREMDUzMTNGNTIxNDRDOUEwMjdFMkU1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrewXJpsrAHVqYajDECf7UMnvN
LGXANyu0LrP1iZF84Dj+k8EIBr/EB/dgaJsK8/sR2LbW/jZ1OM0/LYcI7mIyLCIZ
eM3GheXzlvprFhoa57oaTtUPsvXCaS3g2ytQx6llyI+Vajy0YDPw5BSf2QZVL0Wq
Rz/OF807rnWFwGvVltSrMFw1NEkLyN4PwA3Ch2th2Xmf/OyW+EPazhBYaN6Ib8dw
jhPszq2VxmHd59yEGJ6vj4CVjhEA8wKQlscgGz9WyFmh5nse89Dss9F8l0m8fwsF
q20q4saoCFT/r/OHyroc7Gprm6CmWWKNIb9bAydC4ky0pE5ihyxZ3aEitwHRAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUHpBS1ZMaq73QUxP1IUTJoCfi5fIwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0ODQxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQgBMA0GCSqGSIb3DQEBCwUAA4IBAQDjQO1eMS5rHUlnZlZL2ol5LBXZHlTXnkZf
jKeUIZ+I6B/ksP6DRyoYQ7blk0Zfabiv2/vTZ0e3Omn1fcZRqZHthzA593pvs2DN
x4uOL91El1GZoordIrPu1aurfLGeaTEYqQ3Xf2XXJj3zKQlPI9+G6GM8xIY55m5O
2EvWAC+W6WqagujYYmu4wjzJzEFF1kj97RTtwddmmEAh/NAT9JnvcYhlIz+OtEdr
5vUYoNhrtvni28l24nl1/sPZCCFRsaodRHvXXxf7W2reI1Go3NY+YWh3x/RdscGv
Mr3OTOly0lNqxcLpqNi98zYI6DD4mCd4TWn1QgirMHbNtblTlte+
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org