Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214848.roa
File: AS214848.roa (raw, json)
Hash identifier: BdutU46YKhm9+ZB4HBpheIVskaHFdZDrhlnF7Q/1Y5k=
Subject key identifier: E0:EA:85:42:AF:BB:A5:66:E1:C1:31:F1:67:B3:B3:A8:66:8E:11:1F
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0B6D5F767BD18C90408630CB8DE4C7F17E7EECF0
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214848.roa
Signing time: Fri 23 Aug 2024 08:01:22 +0000
ROA not before: Fri 23 Aug 2024 07:56:22 +0000
ROA not after: Fri 22 Aug 2025 08:01:22 +0000
asID: 214848
IP address blocks: 2a0f:85c1:3ca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:6d:5f:76:7b:d1:8c:90:40:86:30:cb:8d:e4:c7:f1:7e:7e:ec:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:22 2024 GMT
Not After : Aug 22 08:01:22 2025 GMT
Subject: CN=E0EA8542AFBBA566E1C131F167B3B3A8668E111F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:b7:d6:34:84:7e:4c:c6:f7:42:d4:d9:b0:
fe:8b:d9:ff:63:be:db:e2:e8:6c:bd:28:16:56:94:
9e:94:23:73:4b:68:a1:46:f1:39:57:cf:b7:fa:18:
5f:3a:2b:cf:64:0b:85:b6:6e:95:2a:97:10:82:26:
d4:e8:d3:9b:68:ac:b3:a7:24:02:ac:9c:8e:7e:4d:
36:a2:af:b9:da:2e:26:64:1d:4b:73:40:77:33:8e:
96:a0:73:b9:ce:48:ab:f6:5c:b1:2b:4a:8f:f0:1d:
8e:ae:04:90:ea:dd:c2:6b:61:e4:23:27:96:45:8c:
6c:d5:0d:76:64:1b:cd:c0:32:35:80:57:34:32:71:
5a:ae:21:9f:e9:0f:22:45:9c:22:0d:f2:f8:27:d7:
fb:d8:74:c8:62:07:58:15:84:3b:c1:4b:2f:4f:b0:
28:2b:f3:0b:cc:ca:8d:31:e6:46:cc:56:98:72:07:
0c:22:6c:63:0f:7a:7e:0f:92:a1:87:ae:e1:6b:1c:
d0:5f:e6:6d:c6:d8:ed:3e:8a:9f:4a:8d:74:f0:e8:
3f:f8:ae:1b:69:c9:21:70:bd:a5:58:cf:b8:f9:3c:
ca:38:b2:b1:88:54:d3:7b:af:5f:93:0b:60:6d:7a:
28:72:ff:e5:a2:eb:73:e5:a3:3b:11:9c:80:02:05:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EA:85:42:AF:BB:A5:66:E1:C1:31:F1:67:B3:B3:A8:66:8E:11:1F
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3ca::/48
Signature Algorithm: sha256WithRSAEncryption
6d:13:0b:7a:8c:ff:17:74:0a:d2:a0:34:c2:7f:df:8e:d5:5d:
de:59:b8:60:6d:0f:59:2e:22:d6:3b:98:57:fb:6b:c3:52:c1:
28:a7:fa:02:28:c3:80:8f:fa:c5:5d:d2:4a:5d:d8:97:66:6f:
7c:aa:38:88:e1:49:fa:00:e5:a9:24:dc:a1:b9:b0:e1:e8:06:
da:f0:0b:ba:30:54:3b:11:34:a0:42:dc:b4:37:49:b3:ab:ac:
36:af:b4:43:0f:61:cb:44:e8:4e:05:aa:92:62:7a:d2:4f:fb:
8a:c7:97:b4:75:f8:43:24:e4:0b:4c:2a:34:9c:35:ff:a1:90:
7f:f3:70:03:50:6d:03:b8:c8:b4:0e:a6:91:60:5d:33:e8:e7:
dd:68:49:41:72:05:bd:1c:be:1f:db:da:71:e9:7d:ac:0f:f8:
38:eb:87:65:43:81:94:75:6e:c5:3f:5b:6b:45:0a:5b:67:e2:
24:ac:62:12:11:46:e7:49:6a:14:b4:31:e7:85:9f:ab:74:0c:
c3:e5:d3:76:15:bc:8f:82:a9:84:f6:c3:97:69:04:f8:3c:41:
5b:a8:75:a9:a8:1f:98:d6:8f:af:1e:2c:cb:fc:c1:da:f4:6f:
3e:f7:11:46:55:18:45:65:e7:ac:7c:fa:4f:72:67:97:e2:bc:
47:63:a3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org