Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215177.roa
File: AS215177.roa (raw, json)
Hash identifier: IGNP1tB/L1vSi2TakYeqsMbhZp0Od4l4/9xlB3HLYsU=
Subject key identifier: D4:68:74:60:93:13:84:AB:F8:42:65:89:C0:EC:AD:98:A9:C4:EB:96
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3C0D0A91793B11BE5A20C888256CDFD7E40B1A17
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215177.roa
Signing time: Fri 23 Aug 2024 08:01:23 +0000
ROA not before: Fri 23 Aug 2024 07:56:23 +0000
ROA not after: Fri 22 Aug 2025 08:01:23 +0000
asID: 215177
IP address blocks: 2a0f:85c1:3a9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:0d:0a:91:79:3b:11:be:5a:20:c8:88:25:6c:df:d7:e4:0b:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:23 2024 GMT
Not After : Aug 22 08:01:23 2025 GMT
Subject: CN=D4687460931384ABF8426589C0ECAD98A9C4EB96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:67:aa:9a:fc:dc:c5:40:74:db:f3:79:45:
cd:0d:ec:cf:90:5c:00:75:ae:8b:aa:17:fa:5d:88:
74:85:37:65:d4:6f:aa:1c:de:56:d2:07:23:b7:7a:
d0:bc:c9:eb:62:30:ec:ef:bc:0e:f0:be:c9:73:6c:
8f:35:c6:35:3b:54:08:2f:b6:04:fe:e1:84:59:d0:
ae:d0:15:80:3c:c8:98:8b:9a:b8:fa:1a:da:63:13:
42:72:5f:41:db:c5:6a:e4:bd:cb:92:75:56:26:30:
c3:82:7b:d9:f9:3a:2c:c6:dc:b9:7f:b0:20:09:7a:
1e:e5:7a:f8:9a:a4:a6:b9:09:88:72:53:b8:14:25:
30:7a:5a:cc:f4:50:62:39:50:8c:ae:32:10:cc:61:
bb:c3:18:32:64:96:60:a4:bc:20:58:99:5b:c2:5d:
da:0f:fc:e1:82:24:55:8d:3f:76:cc:84:56:04:e3:
93:1f:25:80:f5:ba:4a:fb:5e:00:14:11:1a:4b:32:
89:51:8a:08:5b:e0:2d:a1:70:c4:7c:27:e5:8e:62:
f4:49:55:00:ed:9a:b8:77:bb:c6:8f:c7:11:fe:7a:
ff:a2:6d:74:77:64:2f:f4:db:ee:d3:20:4f:d1:40:
5b:c7:71:70:2e:70:df:63:f7:49:e1:41:3e:7d:d5:
e9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:68:74:60:93:13:84:AB:F8:42:65:89:C0:EC:AD:98:A9:C4:EB:96
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215177.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a9::/48
Signature Algorithm: sha256WithRSAEncryption
b3:9d:3f:46:a3:57:79:70:80:43:95:4d:db:d9:78:68:24:19:
20:d3:7b:da:9e:8a:cd:3c:ed:d9:2d:47:ba:d5:78:59:1c:0e:
6e:f0:6f:19:5e:33:46:32:98:04:64:b6:88:3a:c2:8e:0a:b1:
9b:d5:9f:9e:3f:12:47:52:83:98:89:e1:ea:12:48:ac:04:0b:
af:6f:dc:88:ed:1d:c1:a2:69:bc:e1:77:7e:30:b5:95:fd:70:
5f:aa:3e:1b:36:bf:33:08:2d:c6:62:92:54:58:38:5c:ef:19:
9a:ae:dd:8f:2f:30:d0:7b:ca:69:dd:fa:a1:64:f9:79:45:d3:
dd:d5:72:27:97:73:00:2d:b6:d7:3c:22:c8:74:01:6a:49:fc:
b1:ac:91:f1:e7:d4:28:6d:83:f2:af:20:91:48:71:2f:e0:c1:
87:26:b5:da:f3:74:a2:54:30:0a:de:66:4e:7a:5d:b9:39:37:
6e:d8:a0:8f:bf:4c:11:cc:a1:a4:56:69:d5:f0:42:73:ce:c9:
e8:dd:17:eb:8f:41:84:de:67:e6:d4:b5:cc:11:93:53:49:ba:
1b:7e:fa:67:be:85:a5:0a:ba:55:25:90:6b:2e:dd:25:44:1f:
08:4c:9b:1e:ff:10:cf:6d:e2:d8:0b:d3:8b:33:6c:80:52:c1:
23:19:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org