Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
File: AS214906.roa (raw, json)
Hash identifier: RGpiLZRoeMS/ewuL/YxuWxQeXZ+ZlJxVYYA2GY5ENIs=
Subject key identifier: 4D:10:2E:AA:F1:79:2C:22:7A:87:4B:A6:24:B4:41:8E:42:91:82:5C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 658E6A66FC2C34BCF693E5C9E06C628CC78B8784
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
Signing time: Fri 23 Aug 2024 08:01:20 +0000
ROA not before: Fri 23 Aug 2024 07:56:20 +0000
ROA not after: Fri 22 Aug 2025 08:01:20 +0000
asID: 214906
IP address blocks: 2a0f:85c1:3f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8e:6a:66:fc:2c:34:bc:f6:93:e5:c9:e0:6c:62:8c:c7:8b:87:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:20 2024 GMT
Not After : Aug 22 08:01:20 2025 GMT
Subject: CN=4D102EAAF1792C227A874BA624B4418E4291825C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:5c:9a:fc:37:7c:93:ff:d4:4e:7a:6d:e3:
4b:f1:b7:15:2d:de:e7:23:a1:fc:7e:a2:b2:50:44:
ea:6c:55:e2:d7:41:0c:0b:e3:d4:18:fa:76:d1:bd:
1d:38:fa:15:f7:63:9f:89:dc:91:37:4b:aa:8f:f0:
6b:bd:40:94:7d:d7:19:bb:b5:9d:35:04:62:52:0b:
d5:26:30:15:50:dc:e3:28:89:05:20:ac:73:f8:0a:
1c:e5:8c:17:d2:81:d3:a5:1a:5c:e2:67:3f:3f:2a:
83:03:f8:29:aa:4b:1f:ba:58:54:c7:22:bf:d6:e9:
71:de:21:f3:75:b5:ae:62:6e:a1:b9:9e:88:d6:5b:
d4:48:8b:e1:b7:de:b3:72:37:6e:c9:62:7e:f2:9d:
70:4c:cc:4d:7b:a3:d0:65:db:b3:23:98:cf:08:8c:
cf:ba:4b:24:6b:bc:ef:0d:a4:f6:f4:d0:ef:b9:a4:
04:14:e8:38:8c:5c:c0:4e:00:13:08:99:a3:7a:b3:
3f:b6:15:33:df:81:24:f6:23:5f:a6:c0:5a:9f:25:
c9:eb:f9:ac:83:0d:6d:88:d8:c6:01:2e:c4:18:17:
f9:45:9e:52:62:95:58:68:48:de:df:a4:85:be:96:
24:1f:a4:c3:8d:b1:1b:c9:6e:fa:d7:ed:5a:68:d8:
26:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:10:2E:AA:F1:79:2C:22:7A:87:4B:A6:24:B4:41:8E:42:91:82:5C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f2::/48
Signature Algorithm: sha256WithRSAEncryption
48:e1:e6:be:fa:ed:88:8a:1d:6f:be:3c:d6:f1:46:d4:f0:06:
58:94:90:51:06:3a:66:bc:d6:27:65:ff:dd:71:b5:f6:31:31:
d7:62:20:0d:5a:6d:54:53:6c:ac:08:e5:0e:6e:1e:09:c6:f7:
29:28:87:bb:69:8b:79:e9:ca:ab:52:52:1d:c2:5a:a5:ff:3f:
16:0f:0d:55:ea:df:96:aa:eb:c8:77:10:f9:62:f4:59:95:66:
52:5f:90:67:fd:9f:c7:d5:2c:93:bf:9f:aa:07:87:da:01:e0:
eb:24:e3:24:c2:af:05:f8:7d:80:04:a3:27:17:c0:e1:78:26:
8c:00:54:ac:b2:9a:10:ae:d0:c7:0b:a4:2c:29:f3:be:78:8c:
5e:e1:4f:75:df:7d:22:8b:93:b1:40:9c:04:bf:56:02:78:b4:
36:9e:93:6c:71:d8:f8:14:e1:94:0b:dc:c3:2a:fe:56:7c:9a:
37:1a:ec:2f:3c:98:fa:fc:1c:ed:e2:20:a1:91:18:99:9a:96:
de:5a:ff:b0:3e:92:28:0c:c1:b0:a1:0b:a4:f2:31:b3:de:7b:
3e:89:6b:09:69:ac:70:8f:50:23:50:6f:75:73:0f:44:d5:19:
44:d1:d7:d9:cb:f8:bd:fa:41:1a:2c:e7:7d:6a:5b:78:aa:67:
27:c5:e3:99
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUZY5qZvwsNLz2k+XJ4GxijMeLh4QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjBaFw0yNTA4MjIwODAxMjBaMDMxMTAvBgNV
BAMTKDREMTAyRUFBRjE3OTJDMjI3QTg3NEJBNjI0QjQ0MThFNDI5MTgyNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypFya/Dd8k//UTnpt40vxtxUt
3ucjofx+orJQROpsVeLXQQwL49QY+nbRvR04+hX3Y5+J3JE3S6qP8Gu9QJR91xm7
tZ01BGJSC9UmMBVQ3OMoiQUgrHP4ChzljBfSgdOlGlziZz8/KoMD+CmqSx+6WFTH
Ir/W6XHeIfN1ta5ibqG5nojWW9RIi+G33rNyN27JYn7ynXBMzE17o9Bl27MjmM8I
jM+6SyRrvO8NpPb00O+5pAQU6DiMXMBOABMImaN6sz+2FTPfgST2I1+mwFqfJcnr
+ayDDW2I2MYBLsQYF/lFnlJilVhoSN7fpIW+liQfpMONsRvJbvrX7Vpo2CbNAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUTRAuqvF5LCJ6h0umJLRBjkKRglwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE0OTA2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQPyMA0GCSqGSIb3DQEBCwUAA4IBAQBI4ea++u2Iih1vvjzW8UbU8AZYlJBRBjpm
vNYnZf/dcbX2MTHXYiANWm1UU2ysCOUObh4JxvcpKIe7aYt56cqrUlIdwlql/z8W
Dw1V6t+WquvIdxD5YvRZlWZSX5Bn/Z/H1SyTv5+qB4faAeDrJOMkwq8F+H2ABKMn
F8DheCaMAFSsspoQrtDHC6QsKfO+eIxe4U91330ii5OxQJwEv1YCeLQ2npNscdj4
FOGUC9zDKv5WfJo3GuwvPJj6/Bzt4iChkRiZmpbeWv+wPpIoDMGwoQuk8jGz3ns+
iWsJaaxwj1AjUG91cw9E1RlE0dfZy/i9+kEaLOd9alt4qmcnxeOZ
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org