Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214989.roa
File: AS214989.roa (raw, json)
Hash identifier: wnr6/XqCA7PaNOI24TJOJ6EAvG8s5wW0JfQc2OMDx/U=
Subject key identifier: 19:7A:85:64:72:F5:DE:88:77:44:B1:06:46:3C:12:DD:F1:87:DD:69
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 488015F0C76A3F6F73BD75F389441AF86D67AEE9
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214989.roa
Signing time: Fri 23 Aug 2024 08:01:23 +0000
ROA not before: Fri 23 Aug 2024 07:56:23 +0000
ROA not after: Fri 22 Aug 2025 08:01:23 +0000
asID: 214989
IP address blocks: 2a0f:85c1:3cf::/48 maxlen: 48
2a0f:85c1:3e0::/44 maxlen: 44
2a0f:85c1:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:80:15:f0:c7:6a:3f:6f:73:bd:75:f3:89:44:1a:f8:6d:67:ae:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:23 2024 GMT
Not After : Aug 22 08:01:23 2025 GMT
Subject: CN=197A856472F5DE887744B106463C12DDF187DD69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:42:af:cd:bd:df:be:1b:f6:39:30:ce:e9:
87:43:b2:fc:3b:4f:1f:6d:cf:83:c2:64:27:b5:55:
eb:05:9a:4b:62:4c:67:0d:ef:dd:e6:70:a1:8f:1f:
08:8f:85:ca:50:f3:b4:af:3e:06:53:0b:31:38:14:
81:5c:1a:40:ca:05:d1:f0:19:2a:5b:a2:c9:23:00:
de:2f:1b:6e:ec:aa:a7:ac:9a:56:5d:22:7b:f7:eb:
67:95:74:9a:18:47:5d:a9:7f:63:fb:c8:72:4f:46:
80:cf:a5:72:d8:f3:98:51:1a:23:8a:90:fb:07:d5:
53:37:ca:5b:2e:d0:74:22:5c:98:05:d8:5a:b5:be:
fd:91:d4:de:b9:f4:3c:c0:f5:e4:d1:30:ec:dd:77:
e5:4d:66:09:ae:fd:37:fa:dc:32:73:c8:21:8f:9d:
f2:8c:0b:1e:ae:b6:17:2b:da:49:64:39:86:a4:a9:
7a:9d:e1:6f:6f:88:28:d9:c6:14:e6:ac:f2:23:f6:
e1:ba:cf:5f:62:9f:89:3d:0f:d5:1e:4a:59:84:39:
af:78:bb:94:61:3c:95:14:37:ab:9b:30:be:9c:93:
75:e5:94:85:bc:da:63:04:e9:63:70:bd:9b:2c:17:
ca:92:94:81:10:f6:58:5c:79:28:35:a8:40:b8:3d:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:85:64:72:F5:DE:88:77:44:B1:06:46:3C:12:DD:F1:87:DD:69
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3cf::/48
2a0f:85c1:3e0::/44
2a0f:85c1:500::/40
Signature Algorithm: sha256WithRSAEncryption
af:20:4f:04:0c:95:30:0e:86:8a:c4:ab:ac:ad:26:a8:92:2b:
72:85:21:2c:e4:80:65:37:05:e4:18:3a:75:12:ed:3c:6f:43:
61:ec:c5:0e:79:c0:9a:dc:5e:05:ca:28:b2:e3:fb:1c:ab:2b:
c4:d0:73:1b:22:44:b7:7b:9a:b1:ff:df:b4:a5:89:29:6b:e9:
47:03:9a:2c:f0:ea:3c:ff:d9:e3:c1:22:88:1a:cf:19:2f:07:
a3:8d:09:c6:67:6f:f1:43:3b:c4:c5:45:6b:a4:af:34:75:18:
aa:45:dc:a0:3d:52:79:09:e2:f4:d3:21:6e:a3:28:f1:24:29:
91:64:bf:13:a0:f3:a8:d5:ea:51:c9:93:c8:87:86:94:c6:eb:
c8:e9:14:4f:57:00:f7:20:f3:a0:28:c9:f7:74:9b:4e:d3:ec:
12:fe:b3:76:5b:79:1f:b4:b3:3a:1c:d3:78:c7:d3:13:8d:fb:
a4:5e:6d:44:9c:0d:41:58:60:5e:1c:63:f3:98:fd:4b:37:c8:
a9:11:f4:2a:8d:93:64:2e:0c:c7:ab:38:d8:ec:f5:e5:05:ff:
6c:30:da:8f:d4:41:e7:03:9e:e8:e3:f8:e9:10:cc:9b:45:5d:
10:29:09:d0:19:b0:3b:e0:ea:66:e3:c5:f4:fc:b9:3b:98:5f:
1e:ef:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org