Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
File: AS215313.roa (raw, json)
Hash identifier: 7Kx9GG9Th2xilLVvf5fTYGqW2WCe+FS+sj3gsAl2u8M=
Subject key identifier: 09:BF:70:75:16:4B:22:DE:0E:7B:59:D2:0F:3C:60:65:A0:49:01:56
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 0F27E3B341C8CD88486D0383C7606435BFD26D7B
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
Signing time: Fri 23 Aug 2024 08:01:27 +0000
ROA not before: Fri 23 Aug 2024 07:56:27 +0000
ROA not after: Fri 22 Aug 2025 08:01:27 +0000
asID: 215313
IP address blocks: 2a0f:85c1:398::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:27:e3:b3:41:c8:cd:88:48:6d:03:83:c7:60:64:35:bf:d2:6d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:27 2024 GMT
Not After : Aug 22 08:01:27 2025 GMT
Subject: CN=09BF7075164B22DE0E7B59D20F3C6065A0490156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:81:97:96:d4:1c:db:d1:19:f2:e4:48:9f:
ca:1f:fc:d9:32:e1:79:af:e8:c5:c8:8e:18:b3:ad:
60:fb:5d:99:39:96:79:5a:11:49:e0:95:76:1e:5f:
d9:01:2e:4b:bc:fc:cd:8d:83:25:0a:24:61:44:87:
d3:ee:b1:9e:6e:14:8d:ab:ba:df:da:b3:80:17:64:
ea:e1:a6:ef:ab:70:cb:06:aa:7b:ec:b0:fb:18:4c:
4d:1f:1a:71:4b:3b:fd:4e:55:b9:68:53:68:b8:72:
e8:fc:b8:35:e8:bc:6b:72:23:c6:93:6e:41:95:f3:
e4:b3:dc:64:9e:8d:b4:f5:2b:ef:fc:19:ee:a4:23:
57:94:85:f8:c9:62:21:c6:b6:b1:3d:30:65:ba:44:
59:59:d9:58:19:00:49:d1:45:40:bb:4d:af:f8:06:
cf:4c:c8:2b:fd:bb:cc:ee:0c:d0:bc:e2:38:d1:e2:
22:61:6b:5a:23:bc:a5:4c:1c:3f:dc:9c:c9:0d:ea:
88:1e:13:c3:5a:74:7b:fb:99:05:05:05:3f:95:d8:
76:e5:b1:0a:68:65:d8:59:56:cd:fa:0c:53:6c:a6:
0f:ae:eb:ce:26:dd:04:21:91:7c:29:bb:da:5b:e5:
21:dd:4b:41:74:f9:3a:ae:8d:87:fb:24:e9:8a:d8:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:70:75:16:4B:22:DE:0E:7B:59:D2:0F:3C:60:65:A0:49:01:56
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215313.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:398::/48
Signature Algorithm: sha256WithRSAEncryption
61:a3:ed:6e:d9:01:22:27:15:86:f5:92:34:bb:14:ea:50:68:
ad:a3:30:93:20:d2:2c:1d:d0:ba:04:16:e6:b0:5e:32:b6:03:
21:3a:4f:a3:04:14:10:70:8d:f8:86:82:e8:3a:e1:2b:34:16:
a3:26:41:f6:f8:70:67:02:44:55:dc:23:99:3c:df:00:31:ca:
cc:ee:78:25:0e:68:ae:ce:52:66:a9:45:d3:bd:90:6c:02:5e:
a7:5c:24:18:0d:20:a8:d1:5a:21:40:b7:3c:30:75:34:98:55:
ba:c6:b8:4f:f4:53:8f:d1:5f:da:e7:f9:a1:cd:d2:47:be:1e:
b2:01:27:b2:3e:1a:df:f5:11:f3:08:2a:7c:7b:68:c1:f8:e4:
c1:bf:60:ef:5b:e0:62:a9:09:79:d2:d3:8a:26:85:7a:8c:32:
b9:f4:83:be:e7:d4:61:98:a4:8c:67:61:dd:97:6d:fe:5a:71:
8f:b1:6b:f8:80:bb:34:67:83:b6:b1:04:19:2f:1a:c1:7d:52:
94:f9:e0:62:bf:ee:c7:e5:5b:c9:8b:bc:f5:28:5f:60:7e:b0:
db:fc:b2:42:e8:56:2e:d1:04:09:19:6f:85:7f:b6:39:94:36:
78:19:ec:da:e2:53:09:80:c7:2e:0c:71:24:88:c2:21:5d:7a:
2a:75:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org