Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215223.roa
File: AS215223.roa (raw, json)
Hash identifier: q66biVNMQX61YFMSNTTdr5wg1dyRKgG/SZqgBICpGdo=
Subject key identifier: 85:EA:2C:A1:D5:7C:2D:69:E7:E3:AB:63:48:82:8F:90:72:1E:5D:CF
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3FB9DE834B95C529AFC62F0C94F417C6F47C37A1
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215223.roa
Signing time: Fri 23 Aug 2024 08:01:25 +0000
ROA not before: Fri 23 Aug 2024 07:56:25 +0000
ROA not after: Fri 22 Aug 2025 08:01:25 +0000
asID: 215223
IP address blocks: 2a0f:85c1:3a6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b9:de:83:4b:95:c5:29:af:c6:2f:0c:94:f4:17:c6:f4:7c:37:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:25 2024 GMT
Not After : Aug 22 08:01:25 2025 GMT
Subject: CN=85EA2CA1D57C2D69E7E3AB6348828F90721E5DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:a4:7b:34:9b:74:19:1d:18:87:c9:79:86:
75:45:ad:e8:38:0b:dd:4c:a4:9d:ff:de:68:c5:d7:
da:88:78:b3:ac:0c:7c:b4:d0:7d:d8:8d:1a:b3:c2:
46:61:ea:ad:55:81:1e:4e:58:7a:d6:e1:4b:b3:54:
e2:26:74:09:21:c2:eb:7c:9e:36:0d:39:1e:aa:93:
77:e7:75:94:c0:6e:aa:69:7e:56:10:2b:82:a4:2d:
40:6a:a7:f2:36:f1:3d:1d:b5:4b:02:71:c8:9c:80:
0f:bf:e1:a2:35:6f:ad:b2:d3:03:34:cf:75:85:14:
85:88:a7:e7:a8:96:32:97:93:d7:10:0e:aa:03:d8:
95:34:12:5f:1f:ff:20:b6:dc:55:d1:00:17:3c:56:
fb:b3:3c:9a:2a:b9:14:06:87:4f:6f:af:4e:bc:67:
d5:ea:f5:9a:cb:f7:84:2e:f3:86:c9:64:1c:75:66:
63:a5:c2:3e:7b:5d:62:85:0e:31:74:93:90:f7:85:
02:36:10:4f:4a:ed:af:bd:91:4f:f6:cd:e6:56:8f:
f9:2a:a9:6f:a8:36:49:d1:82:31:73:84:81:39:52:
d3:e3:5e:e3:38:ed:8c:5d:0f:19:9b:11:11:16:e4:
08:b4:ea:ef:9a:eb:6d:bc:2b:71:81:ac:c6:e2:d4:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:2C:A1:D5:7C:2D:69:E7:E3:AB:63:48:82:8F:90:72:1E:5D:CF
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a6::/48
Signature Algorithm: sha256WithRSAEncryption
3f:e9:a9:42:e4:90:a8:cf:d0:c5:10:23:12:66:fd:61:af:22:
85:99:37:8d:21:7c:cf:83:f0:d7:84:5c:31:2b:ae:c7:c5:f9:
00:ac:95:29:6e:c7:7c:d6:4d:31:67:e5:ff:97:ba:80:6d:54:
5a:8f:07:5c:ab:2f:48:a5:2e:66:b8:9d:20:43:32:4b:67:98:
e1:dd:e2:77:d1:d0:63:8e:0d:e9:10:0e:24:ff:11:3e:f7:ca:
12:d6:d3:fd:e8:fe:71:b5:3a:2a:12:2a:26:0d:40:97:a8:f7:
00:90:76:4b:0b:99:46:3c:45:c4:71:7a:ca:1f:4a:02:5a:12:
89:04:91:2b:90:c0:29:23:42:60:1f:a0:21:bc:ad:97:80:14:
f9:33:e7:18:31:00:2b:71:37:73:08:a5:5b:8e:d2:34:24:56:
76:09:28:07:1b:4f:42:fe:32:9f:f3:9f:74:0e:40:5b:ac:3f:
15:d2:28:e3:e9:59:42:04:e9:24:3b:72:e5:60:c3:d4:d5:19:
75:6c:d9:99:32:e8:31:be:e0:4f:fd:ce:00:90:b1:0d:d3:3b:
6f:60:74:7c:b6:4d:1e:9b:09:44:a0:d5:59:52:12:35:67:93:
3f:04:fb:21:f6:27:8a:02:5f:c9:a8:5a:38:a9:0b:0e:ed:93:
60:f1:34:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org