Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215108.roa
File: AS215108.roa (raw, json)
Hash identifier: xFe50ee56yOE4zFoS7xe5Gw+JZPv+cmlRxvu5zpkqKc=
Subject key identifier: 65:A9:CA:92:05:EF:8E:9F:07:0C:8C:1D:BC:FD:64:F0:3C:6F:00:7A
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4C7E762C26ADF7EE792ADAB73F41A94E96452F57
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215108.roa
Signing time: Fri 23 Aug 2024 08:01:26 +0000
ROA not before: Fri 23 Aug 2024 07:56:26 +0000
ROA not after: Fri 22 Aug 2025 08:01:26 +0000
asID: 215108
IP address blocks: 2a0f:85c1:3bf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:7e:76:2c:26:ad:f7:ee:79:2a:da:b7:3f:41:a9:4e:96:45:2f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:26 2024 GMT
Not After : Aug 22 08:01:26 2025 GMT
Subject: CN=65A9CA9205EF8E9F070C8C1DBCFD64F03C6F007A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:2f:22:c5:20:f4:63:b7:71:12:5e:a7:83:
0e:2f:bc:4b:68:ff:21:03:92:55:92:32:16:2e:6b:
43:e0:52:48:4c:7d:f1:2a:34:00:49:4b:16:24:a5:
88:8d:3f:35:b5:b9:e3:c3:44:0c:cd:93:35:e9:17:
c4:d4:17:6d:56:5d:4a:bd:3a:ca:83:d4:fa:45:46:
35:18:a5:72:20:92:86:f0:16:65:89:6f:8b:d5:e4:
d4:c5:26:2c:7b:de:75:93:f9:9e:e8:8b:20:93:5a:
55:94:54:96:46:5d:67:e4:55:fe:2b:76:46:ed:b7:
12:e8:b5:dd:3d:eb:97:45:71:44:55:4c:7f:0d:e5:
ee:71:ef:bf:9a:78:a5:dd:36:48:6a:ed:bf:77:c9:
4a:26:3f:7e:9e:d7:95:24:6c:9a:c5:6b:32:ee:90:
8f:57:2a:99:71:e3:5c:5e:c0:2d:f5:90:cb:58:2a:
cb:8b:80:66:52:39:38:41:42:7c:53:1f:c9:ce:7f:
9c:8b:82:a1:97:c7:2d:60:88:55:da:85:d8:3c:cf:
38:5b:65:1f:5a:ae:89:73:17:16:4d:d8:e7:29:66:
60:19:a0:a7:ce:65:ea:65:8e:32:51:3c:ad:4f:39:
75:6e:4f:21:0f:b5:5b:cb:d4:1d:88:b7:44:e4:24:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A9:CA:92:05:EF:8E:9F:07:0C:8C:1D:BC:FD:64:F0:3C:6F:00:7A
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215108.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3bf::/48
Signature Algorithm: sha256WithRSAEncryption
23:ca:fe:bc:87:b0:4d:32:c6:67:bc:76:b5:c1:66:82:4a:aa:
cd:d7:a8:59:35:a5:ad:90:8d:13:20:34:6a:b9:ea:eb:46:f3:
20:61:35:9b:4f:d5:d4:5b:d2:97:90:27:f0:aa:4d:05:b8:14:
5b:3c:d4:66:a8:c3:24:68:94:d6:11:e7:a1:48:50:8f:b4:95:
e7:a5:d0:ee:4d:8c:fe:25:6f:2f:72:6a:1d:b1:40:e0:61:b1:
88:56:c6:ee:9d:5e:79:f8:81:f6:3f:b3:b3:23:1c:05:69:1f:
87:5f:15:4a:e4:5d:d0:db:b3:ba:23:f7:8e:3a:2c:aa:b3:68:
ee:6f:58:ad:c4:4e:29:9c:fc:9f:67:2f:66:5d:59:67:35:5b:
cd:58:1e:99:dd:39:10:3a:5c:25:a1:85:b5:31:f0:1b:ed:71:
8d:38:b3:85:42:f9:72:45:92:dc:40:0e:46:b2:b8:77:c4:2a:
fb:1c:b2:f1:73:6b:ca:58:2d:aa:7d:90:85:45:09:24:22:03:
ce:13:e7:40:d8:03:ab:c5:44:44:b1:1c:83:56:7d:78:47:e6:
19:ec:8b:41:e1:41:41:a5:fa:88:94:4c:22:66:a9:34:59:8f:
dd:bb:38:a9:41:fa:a3:f9:72:92:53:b7:53:db:82:3e:e2:bb:
3e:b8:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org