Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215246.roa
File: AS215246.roa (raw, json)
Hash identifier: 5CW1Ikr7ShZo42i9iduGfs0zo7SY2nR6SYkL6D9BCZM=
Subject key identifier: FE:03:5E:84:CD:B1:16:16:19:39:3B:19:37:47:C2:6C:67:10:62:25
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 41FE241378EEAD37FA8380EAC71230F9D641C154
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215246.roa
Signing time: Fri 23 Aug 2024 08:01:19 +0000
ROA not before: Fri 23 Aug 2024 07:56:19 +0000
ROA not after: Fri 22 Aug 2025 08:01:19 +0000
asID: 215246
IP address blocks: 2a0f:85c1:3a1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fe:24:13:78:ee:ad:37:fa:83:80:ea:c7:12:30:f9:d6:41:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:19 2024 GMT
Not After : Aug 22 08:01:19 2025 GMT
Subject: CN=FE035E84CDB1161619393B193747C26C67106225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:65:93:25:dd:13:9a:25:04:fa:4a:1a:80:
34:09:e0:47:21:84:b3:80:21:29:bd:0f:29:5d:af:
eb:83:c3:c6:15:3d:0b:c1:fa:4a:c3:42:cc:11:83:
c4:ca:d2:0b:4e:d4:3a:ed:38:05:e2:99:ec:28:62:
8c:8b:56:47:17:1c:0d:d5:4b:62:6b:79:fb:5c:54:
5b:01:54:a9:39:b3:cb:d7:b2:5b:7e:6d:49:cb:b4:
19:7b:84:7c:1c:c0:49:fb:bb:ee:db:12:bb:7d:05:
cd:74:c1:aa:f0:c6:44:15:2d:b5:19:56:34:84:70:
a2:33:12:08:ad:b2:92:c4:34:d2:00:54:c6:63:f5:
f3:c9:bc:dd:4e:1b:ad:18:6a:66:86:f4:74:dd:cc:
c3:f4:02:f1:da:26:73:3c:14:c8:5c:bb:4f:d4:92:
94:27:87:f1:f6:32:c1:13:b3:dc:2c:fa:1e:32:ba:
4f:83:42:28:87:44:98:e7:e5:f5:f2:7a:72:55:4b:
32:65:f4:7e:b3:c1:36:65:c1:89:24:2a:1f:15:cf:
dd:22:c5:ab:03:1f:e4:cb:e0:fb:60:da:38:c2:86:
18:9c:b5:72:83:cc:ad:48:84:03:77:17:0e:ef:79:
05:0a:5a:ff:58:ba:99:63:46:73:8c:2b:61:a6:57:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:03:5E:84:CD:B1:16:16:19:39:3B:19:37:47:C2:6C:67:10:62:25
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215246.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:3a1::/48
Signature Algorithm: sha256WithRSAEncryption
8c:22:7f:c7:23:40:74:7d:22:f2:0f:11:76:0c:47:06:b1:6f:
3c:f0:76:28:44:a1:9d:8d:6b:22:71:18:08:8c:0f:c0:ef:47:
16:ec:28:e0:e9:b3:10:91:42:fa:52:6d:37:44:b6:89:59:bd:
05:83:e4:1e:3b:da:c4:07:01:3a:67:ae:c8:9a:40:99:12:de:
d2:7a:b8:88:87:e1:00:47:94:74:7d:74:19:52:af:23:83:71:
b6:79:9f:2a:a8:16:a4:9a:08:d1:56:4c:07:eb:7e:a3:43:7e:
d3:40:97:e1:c8:37:5d:d2:80:12:70:25:19:94:4c:59:d9:b1:
c6:a8:a9:52:c0:a3:80:2c:9a:c9:2c:45:53:7c:7d:a6:cd:79:
03:b5:64:b8:b8:5c:de:f7:f5:88:2e:73:33:c7:ba:6c:59:0e:
a1:e0:5d:a1:48:29:f1:3e:43:a8:d0:4c:08:2c:ea:06:2e:43:
08:8d:76:ee:97:5d:b7:8d:11:30:3b:c1:66:5e:ff:54:03:47:
ae:2f:a4:e1:bc:ba:7f:e5:9e:40:e3:d9:b9:b5:ac:b3:0f:a3:
f5:4f:77:06:59:75:bc:54:de:05:54:70:f4:e6:6a:8a:ba:a8:
d9:1b:5a:4d:8f:76:bd:61:f4:78:4d:9d:f3:c6:22:cd:8a:92:
b0:e0:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org