Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215207.roa
File: AS215207.roa (raw, json)
Hash identifier: 49TEigi+x+iNjqZupk0bemU4SEpYwf7PfZvJMhcJI4E=
Subject key identifier: 45:32:10:7B:74:39:47:34:EA:0B:68:32:FD:23:A9:1A:CB:97:0C:59
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2F9885542668DF8FACAB36491C94B6B94E11FA42
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215207.roa
Signing time: Fri 23 Aug 2024 08:01:15 +0000
ROA not before: Fri 23 Aug 2024 07:56:15 +0000
ROA not after: Fri 22 Aug 2025 08:01:15 +0000
asID: 215207
IP address blocks: 2a0f:85c1:3aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:98:85:54:26:68:df:8f:ac:ab:36:49:1c:94:b6:b9:4e:11:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:15 2024 GMT
Not After : Aug 22 08:01:15 2025 GMT
Subject: CN=4532107B74394734EA0B6832FD23A91ACB970C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:cd:42:5d:09:77:9d:38:0a:74:c7:33:eb:
14:e7:98:b7:7e:d1:ff:43:24:56:4b:87:31:90:36:
2e:19:9d:3a:35:ca:94:65:b0:8f:44:03:ee:54:f9:
2d:5b:64:8f:d9:ef:21:78:42:e1:c1:8b:f5:f7:29:
83:75:0b:fc:17:82:dc:10:6a:e7:c7:0c:5b:1c:b3:
4e:56:5d:04:ca:34:6a:b5:2a:a1:bd:47:b0:38:9f:
f6:9b:6d:c1:6b:b5:e9:0f:f4:ca:27:05:1b:df:38:
af:08:8a:14:73:73:65:f1:33:ae:ce:4f:23:37:82:
97:9e:9c:d0:74:b9:13:af:24:9e:76:f2:65:b5:d9:
fb:d4:97:29:5d:eb:3a:68:70:5a:5d:3b:01:c7:a8:
bb:fe:c7:7f:30:52:a4:6d:8d:b8:0a:52:60:16:85:
e8:16:b9:e9:45:18:8f:ad:db:ee:67:48:a8:91:af:
60:10:64:34:8d:ab:1d:8f:41:0d:e9:9c:89:8f:bb:
ce:95:04:ea:6d:44:87:db:18:18:f8:bd:39:72:0c:
00:6f:51:79:42:49:1e:1e:6f:d5:de:bc:3f:66:b1:
9b:e3:5a:a7:3c:6f:94:3e:4b:6e:c5:99:81:09:db:
d5:0d:01:49:33:22:61:21:52:c4:84:fe:da:1e:4b:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:32:10:7B:74:39:47:34:EA:0B:68:32:FD:23:A9:1A:CB:97:0C:59
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215207.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3aa::/48
Signature Algorithm: sha256WithRSAEncryption
d6:b8:ce:6a:97:0b:3e:24:ea:27:c2:be:b4:97:f9:83:95:70:
12:07:41:aa:79:64:93:4f:85:e2:17:ae:2c:7b:2a:03:96:f7:
32:31:29:ff:c2:df:d6:f3:2c:f9:0a:3c:7c:d6:d2:53:32:fd:
fe:dc:e5:b0:45:ff:13:0e:f7:d6:a0:3b:96:77:9b:2c:13:91:
ca:30:93:43:e1:65:c0:26:4c:26:ac:eb:ce:7d:12:11:3a:0d:
ce:40:58:26:3c:28:cb:74:44:87:f8:df:7d:88:6b:d1:70:f3:
21:9c:49:ef:84:c2:b9:1e:b1:9d:61:56:84:56:3e:c7:6f:ea:
31:60:33:98:7f:ff:e8:3b:b4:93:5f:9b:93:c8:e7:7f:e3:e9:
24:9b:34:60:c6:2c:d5:c5:8a:0f:39:d5:d0:f3:71:58:2e:c7:
c6:fe:96:7e:8e:3d:e4:94:6f:17:04:2f:06:aa:38:29:ff:2f:
6c:06:15:ee:01:8e:13:c6:43:bd:22:09:ff:2e:ab:1b:dd:20:
84:9b:5a:36:f3:5b:eb:9e:c4:ef:47:34:45:75:55:14:6d:f3:
7c:8d:c6:10:2e:a9:89:5d:47:ed:47:48:7c:3d:84:ce:9e:71:
9c:e5:d5:39:8f:6a:84:ca:6c:ce:5e:a2:a6:a8:e4:d1:16:98:
67:25:fc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org