Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215295.roa
File: AS215295.roa (raw, json)
Hash identifier: TM5jU/In9ruPinX/VCAibtWkFJGSAb0jVpqrDLwZb40=
Subject key identifier: 84:E1:85:3C:42:5C:2C:47:42:99:33:33:92:45:20:48:3F:A0:09:49
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2B24BB96497A22BB64E282494EF25F6E0270FF8C
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215295.roa
Signing time: Thu 07 Nov 2024 18:09:45 +0000
ROA not before: Thu 07 Nov 2024 18:04:45 +0000
ROA not after: Thu 06 Nov 2025 18:09:45 +0000
asID: 215295
IP address blocks: 2a0f:85c1:399::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:24:bb:96:49:7a:22:bb:64:e2:82:49:4e:f2:5f:6e:02:70:ff:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Nov 7 18:04:45 2024 GMT
Not After : Nov 6 18:09:45 2025 GMT
Subject: CN=84E1853C425C2C4742993333924520483FA00949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d7:23:70:6c:e9:c2:9a:9b:ea:dc:a8:33:90:
16:53:79:c0:59:aa:6b:74:f1:0d:50:8b:90:d6:fd:
13:ad:be:81:12:31:eb:7a:36:27:0f:8b:bf:c4:bb:
02:c2:88:ed:89:54:56:75:3e:10:6b:55:99:a0:21:
d3:8c:0f:68:ba:9f:da:72:c7:34:6a:ca:2b:96:9c:
ab:27:54:e9:02:31:fa:a3:2b:2b:3a:5f:22:2a:45:
a8:d1:58:4e:9e:50:af:03:e8:88:2b:57:9a:bd:cf:
d2:8f:ee:db:35:e9:63:0c:f1:dd:14:fa:fa:79:bd:
23:f0:2d:ff:de:48:bb:de:a2:85:fb:27:64:32:a0:
2a:17:18:8d:42:67:b1:b8:01:ce:c4:0c:e8:35:a9:
5b:ef:1e:10:82:1b:0b:67:4b:05:c8:30:fb:49:26:
ac:e2:2e:a0:ef:ef:af:7f:d0:3e:bf:9d:6b:46:1c:
1b:b1:c1:02:cc:1d:53:0e:3e:75:1e:09:1e:8e:77:
e8:a6:ac:0a:d6:13:04:94:5d:c1:d9:74:5f:0e:1a:
a8:59:de:0e:d7:97:bd:14:3e:9d:11:25:c0:1f:ef:
b6:f5:c3:72:ad:11:e9:bf:06:3b:fd:9d:90:67:a0:
f1:34:f4:fa:a6:95:5d:79:36:f5:2a:dc:43:79:9c:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:85:3C:42:5C:2C:47:42:99:33:33:92:45:20:48:3F:A0:09:49
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215295.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:399::/48
Signature Algorithm: sha256WithRSAEncryption
8c:78:76:fe:8d:7a:0c:9a:0c:5a:47:9d:22:c3:ae:90:00:92:
d2:3e:0d:1d:64:8d:e2:3f:5e:e6:f4:c1:0d:a9:37:79:99:58:
cb:4a:4f:e6:7d:d4:de:23:78:25:dd:23:c2:7a:72:d3:bd:f6:
05:29:0f:ce:c3:b7:cf:18:88:0d:50:63:39:6c:be:e8:c9:14:
16:ee:7f:cd:b3:00:51:34:ec:1f:91:63:a4:28:e6:60:8c:9a:
bb:35:bb:f3:e2:a0:bc:9b:3e:c9:37:ad:05:c4:9d:f9:c5:96:
59:95:13:d5:4c:d2:85:5b:57:f3:db:cc:fc:a1:a5:3e:fa:98:
18:47:76:fa:a2:86:76:67:73:e4:9a:c4:4c:4a:5a:6e:ad:ff:
60:ff:23:a5:5f:64:9d:c9:ae:3f:4c:85:e7:99:d2:78:a3:be:
6f:f3:ca:99:6e:6c:06:ff:93:1a:d7:e4:e1:d4:e0:a4:c4:d4:
51:e0:36:e2:32:39:e9:03:b9:a9:17:05:c6:55:f5:c4:79:4c:
2c:11:67:b5:84:eb:c0:f5:e8:e3:4c:72:fe:ea:13:a5:74:cd:
eb:c8:9a:46:22:c2:61:1c:9e:33:68:da:7c:5c:23:4f:d3:91:
d3:c3:f3:6f:26:86:a2:9e:f3:74:61:29:3f:d1:bc:0c:21:f3:
5a:61:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org