Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214910.roa
File: AS214910.roa (raw, json)
Hash identifier: 9xFyJ8hQKznDIFh8NcSaKEmljhdoj+pqPeenIAK9qjE=
Subject key identifier: 18:97:41:65:31:27:0E:4E:3F:57:51:87:3E:AF:EF:A0:47:EA:AB:D8
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0B1D6D8AC3F30AECA10A24D0E58C157EC72E9ECA
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214910.roa
Signing time: Fri 23 Aug 2024 08:01:15 +0000
ROA not before: Fri 23 Aug 2024 07:56:15 +0000
ROA not after: Fri 22 Aug 2025 08:01:15 +0000
asID: 214910
IP address blocks: 2a0f:85c1:3f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1d:6d:8a:c3:f3:0a:ec:a1:0a:24:d0:e5:8c:15:7e:c7:2e:9e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:15 2024 GMT
Not After : Aug 22 08:01:15 2025 GMT
Subject: CN=1897416531270E4E3F5751873EAFEFA047EAABD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:01:76:47:2e:58:61:6e:b0:56:20:93:c0:
8e:86:cb:ff:34:00:42:f5:e7:35:7f:89:f3:4e:32:
23:26:28:04:c4:60:59:00:9d:e9:dc:2d:bc:a6:6f:
09:86:34:94:84:5e:15:ad:66:61:8d:26:63:38:b4:
8c:a9:78:54:72:8b:1a:53:96:06:e2:25:78:b2:f7:
6c:36:aa:0c:40:ff:01:2e:c8:c4:7c:aa:24:69:97:
a6:5f:19:16:c6:38:18:9d:4f:42:7e:16:6f:1a:03:
b5:c7:8f:50:38:8a:33:53:e1:f4:75:b1:4a:4c:c1:
2a:ae:bd:29:bb:a2:67:45:c6:26:e7:98:2a:8b:64:
0f:bd:28:5b:6c:87:a4:21:97:89:0d:27:ed:61:cb:
ab:67:d5:a7:97:a4:30:30:2c:a5:28:a4:1b:b1:a4:
21:e4:1e:2d:53:06:db:9f:4d:79:01:dd:f9:04:39:
1c:6f:82:c5:33:d7:ba:6e:3f:ae:3f:d2:7a:04:d0:
28:7f:18:16:21:27:88:6b:cd:3d:12:17:3f:80:60:
44:4d:cc:f2:80:60:a3:02:23:6d:a5:49:73:2e:c9:
90:b9:3b:8f:89:fa:e9:9b:65:41:76:2d:c3:f5:e0:
43:01:32:44:8f:70:98:b9:9c:13:38:4d:3d:d8:a0:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:41:65:31:27:0E:4E:3F:57:51:87:3E:AF:EF:A0:47:EA:AB:D8
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3f6::/48
Signature Algorithm: sha256WithRSAEncryption
66:29:b2:77:51:db:5a:79:19:20:f6:ed:d9:44:1a:8b:c6:5b:
25:0a:22:ab:4b:4a:bb:37:56:77:86:ec:35:25:22:8f:02:80:
3c:cd:ca:64:81:50:b2:8f:ce:13:56:0f:5f:a3:bb:33:c6:da:
07:ea:15:43:0f:a6:79:62:8d:84:54:d6:34:0b:ba:a2:a4:b9:
50:df:bf:56:76:d6:31:86:65:22:06:cd:c0:7f:b6:49:e9:92:
11:7a:23:e4:74:33:4e:83:f7:34:3e:ac:3f:fe:a0:e8:cd:1c:
e1:f4:7c:04:7e:9e:5f:3c:01:be:97:ac:6a:61:40:70:a7:11:
38:93:74:af:1d:bd:63:2b:8e:7a:f2:03:cc:e4:2e:19:f1:17:
17:11:ec:69:a4:b8:33:77:d9:d1:27:ed:ff:78:f2:fa:f7:8d:
a1:84:67:56:bb:b7:f0:41:78:aa:60:66:96:ba:2c:2d:8a:2d:
f9:9f:90:98:09:cd:4e:b9:05:8e:70:9f:02:09:53:d0:f9:fc:
e9:b5:e6:d2:87:0d:f6:1b:41:2b:37:db:0f:45:2a:43:ec:01:
34:c2:ac:f6:88:db:0e:06:21:1e:e4:5d:c4:f4:0c:ff:04:9b:
93:46:0d:58:b8:00:0b:7f:19:47:28:97:a1:f9:f5:8c:85:41:
ff:4a:c6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org