Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215028.roa
File: AS215028.roa (raw, json)
Hash identifier: QA4nsAWYrBTaDeThghv78Xx0YsyWN3HznV4VVNTbTYU=
Subject key identifier: C7:84:2D:70:CC:82:74:E1:10:70:AD:29:C4:08:CC:52:6D:10:04:BB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 75F08F0E298D062803D0F51554484A13F3358CCD
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215028.roa
Signing time: Fri 23 Aug 2024 08:01:18 +0000
ROA not before: Fri 23 Aug 2024 07:56:18 +0000
ROA not after: Fri 22 Aug 2025 08:01:18 +0000
asID: 215028
IP address blocks: 2a0f:85c1:3b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f0:8f:0e:29:8d:06:28:03:d0:f5:15:54:48:4a:13:f3:35:8c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:18 2024 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=C7842D70CC8274E11070AD29C408CC526D1004BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:17:dc:31:79:0f:e4:35:fb:c2:78:1b:97:
18:77:bb:ff:7a:6c:19:4a:37:e7:09:92:01:55:d0:
85:7d:20:ac:ec:09:4e:fc:6f:87:47:be:4f:f8:4d:
6e:2b:03:51:44:b9:cb:ea:da:e6:09:b5:b7:47:8a:
e9:63:26:65:d7:d9:a6:e4:7f:2a:e8:e4:5f:c8:93:
58:31:53:c3:fd:40:a3:57:75:43:2e:6e:97:36:f6:
07:96:b7:82:8e:41:18:ea:ce:f0:7e:a8:7d:21:c2:
16:f5:fe:d6:f8:cb:71:d8:58:50:72:9c:15:8a:e7:
6e:83:65:c8:56:85:75:da:60:a6:90:d6:97:b0:c8:
a7:ff:d1:b4:f5:37:1b:28:5e:95:cf:1e:ff:29:1a:
61:17:57:73:9b:21:85:9d:0a:06:e3:3b:6d:8f:ed:
5e:21:cf:c6:ca:c9:51:88:90:c5:42:65:9c:1e:ee:
15:93:b3:ce:6c:31:8e:be:37:20:ab:64:e5:7f:ec:
0c:5b:02:1a:8e:78:f7:38:44:0c:6c:71:e3:23:7f:
f8:4a:63:11:58:6f:e8:85:c2:a2:87:a1:04:f5:16:
96:5b:b3:5d:4b:de:c9:f3:8a:fb:b4:c6:36:99:2e:
9f:71:0f:fa:fb:e1:38:d7:ef:93:dc:8f:84:39:e3:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:2D:70:CC:82:74:E1:10:70:AD:29:C4:08:CC:52:6D:10:04:BB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215028.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b3::/48
Signature Algorithm: sha256WithRSAEncryption
71:62:af:ce:f2:cb:9e:87:8a:ce:60:59:14:0e:25:71:47:5e:
ce:b1:e9:af:a8:d3:6a:ad:0a:fc:ae:d2:8b:69:00:80:22:f5:
12:72:e8:db:fb:6e:53:97:9d:f5:c2:bf:a8:c9:9a:0c:bb:d0:
69:d6:d6:36:f6:58:c7:95:a0:51:37:78:a4:4d:b8:e3:ab:0d:
15:33:29:78:4f:48:b0:a4:e0:f3:db:da:04:fb:84:11:02:4d:
0c:ff:22:84:e7:15:92:b0:ae:d0:37:75:db:8d:b5:13:9d:95:
d8:53:9a:60:c0:d5:73:a4:3b:91:f5:4c:63:a2:83:42:26:f5:
f8:06:8e:54:61:38:bb:11:0a:98:8f:87:ec:b2:89:a1:87:aa:
fb:c6:67:2d:48:66:1c:a5:6a:23:9e:0b:80:3d:c5:8a:7e:cd:
99:f4:6b:d5:97:0b:0c:2c:dc:e7:0e:96:ab:7d:53:c3:24:d5:
9f:de:1e:60:99:f1:45:60:ed:ea:5c:ae:d6:b8:18:52:d4:64:
fb:7a:35:a3:95:c7:b8:0a:51:80:5f:d2:2c:40:00:1f:69:66:
9c:f6:43:97:3e:7b:6c:b4:41:a8:c7:5d:82:69:d4:e7:f6:ef:
90:4c:12:d8:92:b2:61:6e:d2:e5:2d:3a:7b:74:2c:24:a7:91:
84:3c:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org