Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
File: AS215522.roa (raw, json)
Hash identifier: C0WjpE7IyV3dLAwnGXt3bP6XaSIpGFyh/hel30fk3o8=
Subject key identifier: AD:79:EB:EE:D6:42:A4:28:13:3E:68:23:0E:41:01:B6:0B:A0:14:89
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3D3F8A7608D08817AD2D32E2E3BD3802C4AB39EF
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
Signing time: Tue 17 Sep 2024 04:26:05 +0000
ROA not before: Tue 17 Sep 2024 04:21:05 +0000
ROA not after: Tue 16 Sep 2025 04:26:05 +0000
asID: 215522
IP address blocks: 2a0f:85c1:36c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:3f:8a:76:08:d0:88:17:ad:2d:32:e2:e3:bd:38:02:c4:ab:39:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 04:21:05 2024 GMT
Not After : Sep 16 04:26:05 2025 GMT
Subject: CN=AD79EBEED642A428133E68230E4101B60BA01489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:73:66:26:d6:52:be:c5:5e:c9:54:77:4a:
28:2f:eb:e3:28:80:73:46:df:4d:ac:77:0c:b4:63:
e9:99:5b:00:56:f2:06:4e:e0:21:30:58:8a:21:84:
f7:e9:ac:09:2d:fd:4a:69:67:67:75:0e:17:62:5e:
eb:d4:b4:8b:9b:4d:30:31:58:b6:94:6f:4d:e8:a4:
4b:61:f7:38:c5:b3:d3:c2:93:fb:82:35:69:f9:c9:
63:2d:c2:1b:65:3c:92:88:4b:20:45:b2:88:f4:69:
5b:fe:af:38:ba:1c:28:f3:19:b0:1c:4a:cf:e0:32:
41:06:30:85:09:f1:72:10:b6:32:3d:3a:55:6a:9c:
fd:e9:6a:0e:d7:f4:e4:4c:cd:0c:bb:d5:d8:0f:a9:
9b:a9:04:2c:ca:27:64:47:d9:25:38:de:83:c8:51:
bb:d8:14:41:64:06:bd:f2:d0:05:02:f7:26:51:d2:
a6:fb:7b:35:98:e8:91:b8:eb:da:9b:0e:f1:b4:db:
48:94:48:af:d4:69:0c:d2:9a:d3:27:ba:5a:0e:66:
e9:3f:82:8a:41:30:d5:ca:b5:da:23:bd:49:c3:dd:
cc:47:34:3e:0f:95:86:70:76:e1:5f:85:c1:03:88:
ee:9b:ef:fe:ec:56:78:df:e8:fc:03:68:3d:d5:c9:
52:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:79:EB:EE:D6:42:A4:28:13:3E:68:23:0E:41:01:B6:0B:A0:14:89
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:36c::/48
Signature Algorithm: sha256WithRSAEncryption
c9:7a:b9:5e:90:28:93:1c:51:3b:15:cd:ee:6a:d4:60:11:0b:
02:0e:b7:41:86:98:d5:a1:e9:98:c1:e7:c1:11:8a:a4:b7:e7:
06:05:31:a8:ff:cb:fa:5a:22:4e:1d:7e:e3:00:0e:8b:79:6c:
c6:63:50:44:86:5e:65:5c:a7:9b:7c:4d:2a:d5:e5:d3:7e:c7:
c3:71:15:e3:eb:dd:24:5a:bf:45:49:4a:c2:aa:04:c5:45:e5:
e1:2e:a9:8e:91:c5:18:8b:2a:e1:46:7b:cd:e3:88:74:e1:b7:
79:53:85:3b:d2:9a:cf:90:8a:c4:18:36:c7:37:00:fa:a3:d4:
01:14:79:45:0b:ec:f0:80:4e:06:e1:d4:d2:f5:87:be:9f:38:
43:3d:b9:98:d3:1d:81:20:58:7b:c9:d0:d1:dc:f9:ec:07:61:
e8:ad:41:14:79:d2:51:2c:3b:10:f9:98:0b:06:56:2b:ed:26:
6f:8d:9c:63:e1:73:fc:5b:00:bb:e6:74:7b:1f:f0:53:6c:33:
c6:ef:81:41:6b:cf:3d:98:9e:d4:04:ae:82:df:db:98:7e:91:
5a:d4:b9:25:5f:b3:8e:7a:c7:82:63:27:c8:fe:75:fc:b3:5e:
15:c1:54:28:40:3e:b7:d2:82:f5:b2:09:0f:51:d0:2c:0b:e1:
16:e8:1c:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUPT+KdgjQiBetLTLi4704AsSrOe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA5MTcwNDIxMDVaFw0yNTA5MTYwNDI2MDVaMDMxMTAvBgNV
BAMTKEFENzlFQkVFRDY0MkE0MjgxMzNFNjgyMzBFNDEwMUI2MEJBMDE0ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+kXNmJtZSvsVeyVR3Sigv6+Mo
gHNG302sdwy0Y+mZWwBW8gZO4CEwWIohhPfprAkt/UppZ2d1DhdiXuvUtIubTTAx
WLaUb03opEth9zjFs9PCk/uCNWn5yWMtwhtlPJKISyBFsoj0aVv+rzi6HCjzGbAc
Ss/gMkEGMIUJ8XIQtjI9OlVqnP3pag7X9ORMzQy71dgPqZupBCzKJ2RH2SU43oPI
UbvYFEFkBr3y0AUC9yZR0qb7ezWY6JG469qbDvG020iUSK/UaQzSmtMnuloOZuk/
gopBMNXKtdojvUnD3cxHND4PlYZwduFfhcEDiO6b7/7sVnjf6PwDaD3VyVIxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUrXnr7tZCpCgTPmgjDkEBtgugFIkwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1NTIyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQNsMA0GCSqGSIb3DQEBCwUAA4IBAQDJerlekCiTHFE7Fc3uatRgEQsCDrdBhpjV
oemYwefBEYqkt+cGBTGo/8v6WiJOHX7jAA6LeWzGY1BEhl5lXKebfE0q1eXTfsfD
cRXj690kWr9FSUrCqgTFReXhLqmOkcUYiyrhRnvN44h04bd5U4U70prPkIrEGDbH
NwD6o9QBFHlFC+zwgE4G4dTS9Ye+nzhDPbmY0x2BIFh7ydDR3PnsB2HorUEUedJR
LDsQ+ZgLBlYr7SZvjZxj4XP8WwC75nR7H/BTbDPG74FBa889mJ7UBK6C39uYfpFa
1LklX7OOeseCYyfI/nX8s14VwVQoQD630oL1sgkPUdAsC+EW6Bwp
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org