Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215062.roa
File: AS215062.roa (raw, json)
Hash identifier: dBNxdgMtZiVbphkJXQhZmUdwallAYD7ttoduXrEAy1c=
Subject key identifier: 79:F7:C1:40:AA:59:F3:EF:F2:CB:9C:B3:2A:0F:44:D4:FE:E6:DF:8E
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3CBD935C6131923701933560947DEF3ACCCFF85A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215062.roa
Signing time: Fri 23 Aug 2024 08:01:23 +0000
ROA not before: Fri 23 Aug 2024 07:56:23 +0000
ROA not after: Fri 22 Aug 2025 08:01:23 +0000
asID: 215062
IP address blocks: 2a0f:85c1:3c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:bd:93:5c:61:31:92:37:01:93:35:60:94:7d:ef:3a:cc:cf:f8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:23 2024 GMT
Not After : Aug 22 08:01:23 2025 GMT
Subject: CN=79F7C140AA59F3EFF2CB9CB32A0F44D4FEE6DF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:34:29:e2:d3:8b:a8:db:59:88:af:50:32:
79:3c:75:4b:6e:14:0b:62:da:07:e4:5d:44:44:65:
24:ef:8a:ce:d4:09:1e:ef:94:91:4d:7d:10:9e:21:
46:e5:b6:34:38:00:3b:8c:09:ec:13:65:c7:28:21:
e1:7b:94:3d:4c:98:f3:94:54:59:06:fa:be:54:66:
d6:c3:15:18:4f:c3:f4:2c:d5:5e:71:d4:ec:54:80:
c3:3e:3f:3e:77:98:66:01:0e:3c:55:6e:f0:cd:77:
58:28:f1:3f:5e:86:08:e3:df:28:99:d2:97:80:ba:
1b:f0:af:66:2b:9a:4f:76:d5:54:57:66:ef:ec:75:
f0:20:28:de:96:44:9c:ae:e7:fe:f0:98:0b:58:43:
63:5c:36:d3:c3:e4:08:80:4a:f9:41:fc:cb:e2:91:
6e:cf:87:8e:a5:3a:f2:b9:6b:af:36:5c:ac:26:65:
f7:7a:2b:18:73:e5:7f:52:5b:16:c0:86:68:a6:69:
1a:4e:f7:ef:62:63:de:50:bf:a2:59:64:13:d4:b4:
90:9c:8c:2d:eb:f5:1f:e0:05:20:48:78:ac:3c:2f:
22:d1:6d:d2:5f:f4:94:dd:13:37:d5:ff:3b:5e:93:
22:b5:d0:ed:c3:78:32:0b:bb:d4:c7:c8:c9:14:da:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F7:C1:40:AA:59:F3:EF:F2:CB:9C:B3:2A:0F:44:D4:FE:E6:DF:8E
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215062.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3c7::/48
Signature Algorithm: sha256WithRSAEncryption
06:e1:f3:16:ff:55:ab:33:5f:6b:cd:53:6f:4c:f0:b0:ab:02:
74:ef:24:cb:1f:a8:5b:10:f6:73:1d:73:18:4c:32:2c:c4:19:
4d:e2:74:d2:5d:1d:32:9b:20:35:e6:8f:6b:12:dc:28:ee:31:
95:bc:05:b3:4c:b1:a9:79:7b:c0:c3:59:8f:40:4c:ad:1b:32:
f1:c2:f2:20:3d:86:ea:16:a6:95:85:40:c0:f7:6b:89:8b:6b:
42:7d:69:3e:37:f9:d0:4d:f1:25:df:28:93:0e:dc:58:6e:51:
21:56:12:f7:df:91:52:f8:33:c8:cd:c3:9f:22:53:fd:08:dd:
6a:3a:47:42:12:1b:e6:2f:6c:4e:37:ce:a0:f6:bf:7d:b5:35:
be:b4:ce:ae:73:7d:02:5c:7c:58:e3:76:a3:58:f6:b5:b1:d5:
52:4b:72:b4:a1:82:06:91:b7:c6:cb:1d:ec:76:8e:5e:5b:56:
fd:ed:18:ef:ee:32:7c:bf:b1:2b:55:88:37:3e:8f:d6:84:88:
2b:ed:fc:97:b6:46:75:df:04:70:c3:c2:04:e7:70:a2:5a:2d:
a3:c0:bc:d9:31:e2:f2:01:0c:e4:2e:50:30:f4:bb:7b:cf:ef:
3d:15:1a:2b:85:69:db:06:ba:78:7b:21:4a:fb:8b:02:9b:1b:
62:0c:27:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org