Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215087.roa
File: AS215087.roa (raw, json)
Hash identifier: +MoV8QNh/Fkb3hm5wZkV6lDrpwb4mDEUB2f4QoR92Ck=
Subject key identifier: 54:1C:3D:8B:1D:9E:5A:E6:E1:E0:8F:57:99:62:31:17:87:48:9A:3C
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5E0475BA0B9B308E2CB4080E67650E299C3F80D1
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215087.roa
Signing time: Fri 23 Aug 2024 08:01:18 +0000
ROA not before: Fri 23 Aug 2024 07:56:18 +0000
ROA not after: Fri 22 Aug 2025 08:01:18 +0000
asID: 215087
IP address blocks: 2a0f:85c1:3b6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:04:75:ba:0b:9b:30:8e:2c:b4:08:0e:67:65:0e:29:9c:3f:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:18 2024 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=541C3D8B1D9E5AE6E1E08F579962311787489A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:d5:a0:05:ff:48:65:21:93:35:ef:3d:58:
1b:71:38:20:b3:bd:ea:6f:f5:ba:ef:30:68:25:f6:
60:29:a4:91:ad:ba:1c:2a:aa:4c:8b:4e:be:6b:26:
ae:4e:3d:6e:26:97:54:0a:f9:19:59:73:6c:f7:e9:
ef:14:81:2c:dc:eb:b1:d3:cd:ea:a9:07:1c:15:03:
0e:f0:4b:71:35:3a:11:08:75:fe:f9:6b:a5:82:a6:
01:2e:0c:6b:dd:42:2c:a3:fa:de:b5:17:dc:f5:5a:
1b:2c:ca:79:c0:4f:6f:d3:2e:4c:ae:e7:8f:9f:a5:
8a:b9:11:20:05:79:7b:7b:c9:23:01:81:95:fe:5f:
ef:46:ec:c1:95:22:7d:f4:85:a6:88:dd:92:21:37:
5d:2f:03:6c:63:a5:65:25:7b:e4:bd:f9:cd:aa:d8:
53:98:e6:16:e2:7c:6e:17:ed:8e:8d:b9:5c:b5:5f:
67:77:36:56:9a:d6:fc:26:4f:98:a1:b3:ae:7f:fc:
a9:b2:32:ec:f6:fd:58:4b:2f:f3:b2:dc:57:bc:f4:
6c:82:54:6b:cc:f2:20:9b:a1:f6:4a:ea:85:4c:1b:
48:7c:7b:ed:d0:0b:45:87:8f:b5:5c:92:a7:84:2d:
c9:a0:f1:47:63:c8:5f:96:ed:00:c0:b4:cb:d1:04:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:3D:8B:1D:9E:5A:E6:E1:E0:8F:57:99:62:31:17:87:48:9A:3C
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3b6::/48
Signature Algorithm: sha256WithRSAEncryption
0d:e9:01:6d:3e:68:af:92:91:61:ef:83:1b:95:de:63:d6:01:
b2:4b:06:63:72:b6:7a:f2:92:de:9a:7a:27:09:e8:89:75:d7:
a3:bd:40:8c:8c:f5:1a:1a:86:04:fd:7d:26:db:21:22:d9:c1:
1c:f2:04:98:8b:b3:b8:26:d7:e6:e2:6a:57:8a:7d:00:bb:19:
32:eb:0e:1f:95:07:64:f5:b6:bb:2b:9b:74:44:99:3b:ee:16:
2f:dd:d8:5f:2e:80:ba:ac:9d:da:eb:30:bc:8a:2d:65:c9:c0:
4a:33:98:fb:10:fd:60:eb:c7:cd:0b:34:5e:9d:1c:e9:ac:c7:
04:e5:10:32:c3:f5:86:ea:fa:12:af:3c:1f:a9:86:3d:9d:cf:
e9:91:a8:7c:e4:88:54:8b:a9:95:ce:0e:e1:ae:08:2e:e7:14:
fd:78:fe:c8:dd:05:22:7a:dd:2d:6f:c3:27:80:de:a1:61:79:
21:7e:04:0a:7a:a0:ee:f8:bf:68:5b:ed:d7:95:60:c6:ca:ca:
06:19:c7:55:28:1c:d9:8e:3a:7f:96:b7:e4:60:50:d0:5c:52:
35:cf:b7:96:39:8a:70:a8:5d:1f:dc:12:5b:17:69:ad:1e:48:
f8:27:de:df:52:4d:08:aa:fe:10:ab:79:d1:31:cb:80:03:b7:
e2:d2:b2:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUXgR1ugubMI4stAgOZ2UOKZw/gNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MThaFw0yNTA4MjIwODAxMThaMDMxMTAvBgNV
BAMTKDU0MUMzRDhCMUQ5RTVBRTZFMUUwOEY1Nzk5NjIzMTE3ODc0ODlBM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfIdWgBf9IZSGTNe89WBtxOCCz
vepv9brvMGgl9mAppJGtuhwqqkyLTr5rJq5OPW4ml1QK+RlZc2z36e8UgSzc67HT
zeqpBxwVAw7wS3E1OhEIdf75a6WCpgEuDGvdQiyj+t61F9z1WhssynnAT2/TLkyu
54+fpYq5ESAFeXt7ySMBgZX+X+9G7MGVIn30haaI3ZIhN10vA2xjpWUle+S9+c2q
2FOY5hbifG4X7Y6NuVy1X2d3Nlaa1vwmT5ihs65//KmyMuz2/VhLL/Oy3Fe89GyC
VGvM8iCbofZK6oVMG0h8e+3QC0WHj7VckqeELcmg8UdjyF+W7QDAtMvRBMe1AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUVBw9ix2eWubh4I9XmWIxF4dImjwwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1MDg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQO2MA0GCSqGSIb3DQEBCwUAA4IBAQAN6QFtPmivkpFh74Mbld5j1gGySwZjcrZ6
8pLemnonCeiJddejvUCMjPUaGoYE/X0m2yEi2cEc8gSYi7O4Jtfm4mpXin0Auxky
6w4flQdk9ba7K5t0RJk77hYv3dhfLoC6rJ3a6zC8ii1lycBKM5j7EP1g68fNCzRe
nRzprMcE5RAyw/WG6voSrzwfqYY9nc/pkah85IhUi6mVzg7hrggu5xT9eP7I3QUi
et0tb8MngN6hYXkhfgQKeqDu+L9oW+3XlWDGysoGGcdVKBzZjjp/lrfkYFDQXFI1
z7eWOYpwqF0f3BJbF2mtHkj4J97fUk0Iqv4Qq3nRMcuAA7fi0rJy
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org