Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
File: AS215134.roa (raw, json)
Hash identifier: fkJm00z6sAGkBT1U4YZMQYa7ZstGR1RFzu6YfEmL1JE=
Subject key identifier: 6B:1F:6F:AF:CD:AD:26:80:07:CD:49:17:7D:F5:D1:CF:81:E1:3C:41
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6C87F1DBFDF1DB0DBFB7824E2EAEC3D8A305369A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
Signing time: Fri 23 Aug 2024 08:01:14 +0000
ROA not before: Fri 23 Aug 2024 07:56:14 +0000
ROA not after: Fri 22 Aug 2025 08:01:14 +0000
asID: 215134
IP address blocks: 2a0f:85c1:3bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:87:f1:db:fd:f1:db:0d:bf:b7:82:4e:2e:ae:c3:d8:a3:05:36:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:14 2024 GMT
Not After : Aug 22 08:01:14 2025 GMT
Subject: CN=6B1F6FAFCDAD268007CD49177DF5D1CF81E13C41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:0f:a5:00:c3:7c:16:5c:24:0b:06:54:95:
8b:ff:ed:53:66:92:11:40:67:2c:10:4d:c7:d8:c6:
94:70:64:fc:b1:55:05:25:9a:a5:70:ef:21:9e:05:
0c:97:6a:a3:b0:7d:88:98:18:b7:db:88:35:dd:bb:
d1:ef:84:63:d4:14:db:5e:5c:95:ae:3a:bc:a2:c4:
58:3c:e3:83:3e:09:3c:65:bb:79:30:3a:b0:c8:a4:
f9:6a:dd:5b:86:22:df:84:9d:e7:69:d8:3e:55:3e:
2f:6a:e9:83:96:23:1c:be:80:24:f3:91:50:4b:23:
8b:b0:eb:37:97:f7:41:3c:fd:b2:3d:e5:39:9d:fa:
c4:bc:e3:a9:b3:48:cd:07:3c:a7:f7:7a:06:0a:cc:
a7:b4:42:2a:67:21:8d:85:47:6f:5b:56:3b:c2:a6:
cd:e9:7b:4b:c4:53:21:b5:cc:6c:13:e8:ee:57:05:
5c:76:31:02:65:1f:50:bb:b4:47:c9:d7:78:6e:38:
9c:c8:c7:74:47:b2:c0:2a:ad:00:18:15:d6:3d:fd:
2c:6c:6e:9f:74:c7:ae:ab:10:fb:14:6b:a0:dd:83:
0b:23:7f:6a:20:9f:46:54:88:a3:9a:0c:97:5d:2f:
75:31:12:40:53:f4:ac:9d:64:18:a3:5b:c7:7c:b4:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:6F:AF:CD:AD:26:80:07:CD:49:17:7D:F5:D1:CF:81:E1:3C:41
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3bc::/48
Signature Algorithm: sha256WithRSAEncryption
df:35:a3:9a:5c:a3:44:ca:f5:bf:cd:c5:d6:fb:17:97:8e:a4:
14:91:67:83:d9:d7:7c:90:fa:a8:31:50:8d:96:09:26:eb:3d:
b3:6b:2e:b9:78:97:9c:8c:a3:cc:d2:ad:3f:b1:a6:6c:b9:40:
50:ef:7e:15:9b:2e:02:a2:11:f7:73:5b:4a:fc:cb:1b:e0:11:
45:0e:84:48:4c:8b:55:42:ee:41:7b:38:a3:19:7f:db:ee:57:
b1:38:c2:dc:a1:72:33:8f:33:14:d6:59:42:ac:6a:a8:4c:89:
15:b5:02:68:9d:37:19:45:92:2a:35:f6:e1:4c:96:e8:8b:3e:
08:d9:42:52:12:3b:da:43:15:07:41:12:34:c2:23:80:f5:a7:
b4:9c:45:b9:07:ef:4c:d3:4f:09:a3:96:09:32:53:3f:e6:b8:
23:e9:21:c8:a4:67:4d:bb:41:4b:61:96:e9:31:72:c7:30:65:
a4:b9:9a:cc:b4:ec:f5:83:65:4c:47:4a:74:05:e5:a6:83:37:
b2:e1:74:b3:26:c8:1f:94:7d:e4:6b:9b:af:ed:4c:56:d6:6c:
d7:17:dc:20:2e:1a:fc:fc:1e:f0:f8:b8:76:3b:d0:78:05:4a:
bb:a2:36:3a:d1:f1:90:95:6d:8f:e7:3e:d9:dc:66:a1:eb:6d:
7c:0d:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org