Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215171.roa
File: AS215171.roa (raw, json)
Hash identifier: uTzQoNB4TBoeHUAVFP5eoj1qc7+C9QflwSuGXs3E+1Q=
Subject key identifier: 38:0A:75:87:3A:94:2B:82:3A:3A:6C:F4:4A:CD:B4:A4:FD:F6:64:A0
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 22B2AEB9AC07B4D8DD5862715B09416E04D74A7B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215171.roa
Signing time: Fri 23 Aug 2024 08:01:27 +0000
ROA not before: Fri 23 Aug 2024 07:56:27 +0000
ROA not after: Fri 22 Aug 2025 08:01:27 +0000
asID: 215171
IP address blocks: 2a0f:85c1:3ae::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:ae:b9:ac:07:b4:d8:dd:58:62:71:5b:09:41:6e:04:d7:4a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:27 2024 GMT
Not After : Aug 22 08:01:27 2025 GMT
Subject: CN=380A75873A942B823A3A6CF44ACDB4A4FDF664A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:00:03:4e:2a:17:29:32:be:2d:43:f3:7d:
de:55:12:08:b8:d8:e4:bb:52:4f:80:48:89:ef:0c:
14:7d:be:e1:cc:02:4a:a8:66:1c:c4:68:59:72:d7:
9b:6f:51:03:4e:dc:6e:41:7b:40:89:93:2c:2b:f6:
0a:50:4c:f9:40:9b:2b:46:47:38:fb:3e:32:56:b8:
e4:6a:d5:db:05:c8:4c:36:eb:67:ab:2d:62:2f:83:
a1:ba:19:be:61:27:39:c5:75:a6:51:37:10:bf:c1:
90:ce:a6:f0:11:bb:b8:fb:84:01:00:3a:7d:29:72:
c2:55:ce:e3:4a:72:9c:78:0d:25:12:9d:4b:41:60:
46:94:5d:d5:6d:3b:29:9d:67:d0:ff:8b:1f:bd:62:
82:44:19:eb:bd:69:7a:da:f5:d1:99:8e:01:08:62:
7e:15:76:88:29:ba:c5:df:c7:29:b2:47:80:63:7f:
03:85:71:88:54:aa:ec:e1:67:e3:be:51:7b:ec:de:
01:33:80:15:a8:2f:4f:49:c9:8b:7e:d5:49:f9:ec:
b6:dd:f7:00:bf:6d:14:0d:49:41:16:1c:0f:b3:9a:
af:c3:6b:02:63:33:c3:ce:7a:8f:f6:18:43:35:a7:
3d:74:1d:a7:05:06:7d:45:32:30:85:f2:58:a2:5f:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0A:75:87:3A:94:2B:82:3A:3A:6C:F4:4A:CD:B4:A4:FD:F6:64:A0
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3ae::/48
Signature Algorithm: sha256WithRSAEncryption
bf:0a:b4:46:ae:84:54:c0:52:6d:b3:11:ef:1c:cf:1c:c6:b3:
fd:9a:81:c8:e3:9b:4c:78:a7:ea:ce:31:df:68:5f:44:c6:bb:
4d:0e:35:50:9c:85:96:14:f4:4b:77:40:dc:16:e5:34:41:71:
5d:d3:56:75:17:c0:ff:6c:53:b4:02:b3:69:f9:82:a7:ab:bb:
c7:66:12:e4:17:bc:59:b5:cb:f9:aa:01:d4:ae:a3:20:d3:f8:
c0:93:b4:e1:3f:ca:ad:72:9c:c6:72:53:d5:6a:db:08:ef:80:
97:12:c9:27:89:17:d2:c7:ef:01:9b:cf:90:fc:d3:c3:be:9a:
ca:00:b7:40:ce:31:39:a0:b7:4c:bc:e4:d0:03:33:fa:00:ab:
ed:ce:3a:ab:31:9f:ec:f0:5d:b5:60:0e:7f:77:58:82:12:df:
31:01:03:38:c2:bb:72:78:27:c1:42:e2:c9:97:af:ef:f9:4a:
65:07:20:ef:71:cc:cd:c0:18:2d:2b:1a:29:90:fc:68:ba:51:
67:0b:17:ac:f0:8d:38:95:32:2d:7f:20:6d:47:88:2b:da:0d:
3d:4d:7e:eb:37:ab:73:23:b6:14:85:09:b3:ee:ad:d9:35:8e:
72:9a:4e:21:d4:1c:39:02:b8:26:ee:e5:60:68:ab:b9:12:4f:
09:dc:e7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org