Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214983.roa
File: AS214983.roa (raw, json)
Hash identifier: hyRIVgKRaqFJYKjQ3mHpzHccziuGpq80T8vZZvUvBWQ=
Subject key identifier: 42:E3:6E:03:AD:D8:D2:49:90:59:8B:16:CF:1A:2A:00:37:6E:81:EE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4549A732FFEED440C1337A50AA15C041D009EDFE
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214983.roa
Signing time: Fri 23 Aug 2024 08:01:16 +0000
ROA not before: Fri 23 Aug 2024 07:56:16 +0000
ROA not after: Fri 22 Aug 2025 08:01:16 +0000
asID: 214983
IP address blocks: 2a0f:85c1:3d3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:49:a7:32:ff:ee:d4:40:c1:33:7a:50:aa:15:c0:41:d0:09:ed:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:16 2024 GMT
Not After : Aug 22 08:01:16 2025 GMT
Subject: CN=42E36E03ADD8D24990598B16CF1A2A00376E81EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:b8:27:b0:57:47:76:a4:1f:ee:e3:84:ca:
9d:30:ee:15:dc:14:24:bf:9a:81:e1:e1:be:71:24:
dc:9c:de:cd:15:c3:4f:08:c1:21:65:98:79:52:16:
56:03:10:ce:a3:e8:29:5e:67:0c:46:6e:24:b2:3a:
9f:cc:3b:a1:67:f9:31:8c:b0:a1:9b:2a:a3:11:43:
36:a4:62:0f:97:7e:ac:db:46:3a:79:85:cc:17:a6:
96:38:aa:92:6a:da:4d:51:46:0b:ea:b0:c0:9e:d0:
58:dd:2c:ec:4d:05:4e:df:0e:6b:94:5f:7d:85:cf:
c6:90:bb:9b:15:2c:fb:ba:d9:cd:25:3c:6a:04:e4:
96:ff:58:0c:57:09:ae:e1:50:10:f8:dd:24:4e:06:
5c:8b:57:d6:d5:36:df:dd:da:da:eb:f9:15:17:e4:
b6:52:7e:87:1f:0e:b2:5f:89:ba:fa:fe:f2:1a:a2:
90:1c:f9:11:29:cc:14:bd:6a:41:3c:21:60:c7:f6:
33:4a:8d:da:f7:45:fa:25:97:62:9b:94:22:55:f9:
56:15:b3:ac:f7:5c:d0:5a:f5:dc:28:8b:fb:86:e2:
22:55:b5:d2:f4:44:79:8e:17:5f:88:c5:da:c2:06:
9d:52:9f:e2:68:bf:12:52:59:de:59:a1:76:cd:95:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E3:6E:03:AD:D8:D2:49:90:59:8B:16:CF:1A:2A:00:37:6E:81:EE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214983.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3d3::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e4:67:82:70:17:da:43:8b:8a:5c:28:8d:a0:e3:39:b2:06:
03:1a:f3:68:bb:8a:10:09:aa:94:d9:22:c6:09:bf:77:6a:65:
f4:84:7b:2a:b3:aa:81:72:9b:b8:bc:fa:1d:52:bb:05:1b:68:
3a:1f:d8:dd:cf:07:ec:ad:19:f1:5d:ac:14:1d:2f:84:3e:87:
4b:4f:1e:5b:24:c9:11:55:5a:80:29:3f:fd:5b:68:7f:6a:ab:
23:93:15:0e:c9:ba:0c:4f:f8:11:d2:57:22:76:fe:62:0e:b0:
68:f6:db:8c:b3:7a:e4:d3:cc:dd:f1:b6:d5:ce:44:e4:21:b1:
e6:e0:1e:a4:81:a5:81:00:c4:77:70:18:4d:dc:65:45:4d:99:
d8:57:70:57:5b:dd:d4:ba:08:d3:71:31:b0:6d:4b:2d:b0:ab:
51:57:b4:3c:36:ee:00:d9:32:32:63:2b:fc:77:89:59:11:7c:
34:c8:fe:4b:ac:d3:a0:6e:0d:08:74:55:8c:b3:85:f9:b0:ff:
04:3e:38:6a:2f:56:2c:8f:6b:a5:c2:71:c0:7c:9d:e0:5f:1f:
d8:b3:95:6c:89:fb:00:e8:5b:96:c0:a8:8e:d6:b1:51:03:77:
ca:a4:d2:4b:f1:a0:90:ed:d8:dc:7e:da:b8:47:8b:bc:70:ba:
dc:c8:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org