Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215532.roa
File: AS215532.roa (raw, json)
Hash identifier: 6IQ8/fRmzU56oUzBfjtiCNYbGtFRgcPk5JUWwcXjBAA=
Subject key identifier: C7:E4:7B:C1:BE:C0:34:60:F5:CB:A4:83:61:2C:BC:B4:FE:6C:FB:D9
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 5950416BCB759F6536B5E5118AA1901D6E08A55D
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215532.roa
Signing time: Fri 23 Aug 2024 08:01:25 +0000
ROA not before: Fri 23 Aug 2024 07:56:25 +0000
ROA not after: Fri 22 Aug 2025 08:01:25 +0000
asID: 215532
IP address blocks: 2a0f:85c1:36d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:50:41:6b:cb:75:9f:65:36:b5:e5:11:8a:a1:90:1d:6e:08:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:25 2024 GMT
Not After : Aug 22 08:01:25 2025 GMT
Subject: CN=C7E47BC1BEC03460F5CBA483612CBCB4FE6CFBD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:a2:19:47:a7:12:28:e0:c5:7f:6c:9f:9a:
ac:1e:63:b0:20:15:9c:e1:3d:82:f7:9f:1f:76:31:
ec:80:4c:86:bf:8a:47:5c:ca:db:b0:a9:72:a3:8c:
91:6c:c2:f4:e0:cc:63:12:d5:99:0f:a1:83:3f:19:
0a:7c:3d:6b:81:ce:b4:cc:cb:5e:1c:5a:43:ff:5a:
6a:2c:c6:d9:b9:6f:5b:12:a6:ea:f2:af:36:7f:b3:
b1:53:61:99:ed:87:21:1b:a9:da:5a:20:6f:95:18:
cd:cd:b5:33:6c:53:6f:a5:de:a6:a5:eb:03:e2:44:
27:2f:70:c1:81:0f:5d:da:dd:2d:66:6a:1e:2e:b8:
e2:5d:b7:b7:ec:8c:9d:3d:52:79:5c:20:bc:d5:9a:
10:26:b0:f8:b1:3a:1a:f7:47:08:1e:18:d0:be:f2:
88:b2:71:ab:47:c7:1e:be:b6:86:fe:eb:1e:c8:27:
0b:41:4a:49:73:e7:84:a5:72:73:2d:5c:e4:11:6e:
96:2e:d0:8f:1a:f0:2b:24:47:63:97:fa:4d:85:6a:
c8:8e:1d:59:93:62:cd:3c:af:83:34:da:99:63:cd:
3d:b4:a9:14:cb:44:59:74:34:1d:81:81:01:4f:b0:
e8:17:cd:a8:d8:4f:f7:50:bf:ef:c6:c5:de:11:16:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:7B:C1:BE:C0:34:60:F5:CB:A4:83:61:2C:BC:B4:FE:6C:FB:D9
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:36d::/48
Signature Algorithm: sha256WithRSAEncryption
75:bc:87:97:8c:8c:2c:74:94:5b:1c:1d:42:1f:10:69:dd:e9:
9b:c1:cb:07:99:68:f6:78:cb:50:e1:e2:08:27:96:ea:6b:75:
ef:16:34:c4:23:66:f6:6b:35:e2:bb:0c:0e:2f:5e:6d:b0:6b:
d7:d8:4c:e3:73:e9:2b:0d:97:71:33:f5:29:48:10:e3:c9:9b:
3e:f1:a3:e6:3d:c2:f4:45:f1:73:47:76:d5:67:d4:12:9f:e6:
5d:80:69:84:43:c7:70:75:87:86:85:48:5e:76:08:fa:68:b1:
73:d7:d1:25:3f:1c:ad:3e:47:6b:ae:49:97:74:24:32:7c:5d:
04:83:19:5c:ec:94:97:7b:b4:0e:15:b5:62:b6:c5:c5:b7:2b:
7d:c1:76:ae:68:67:27:0a:9f:82:ec:c6:60:c5:97:92:01:e2:
d5:a3:f4:9f:40:9a:e1:ce:d6:7f:41:1e:69:7b:1b:af:ad:bc:
e8:f9:16:06:31:f4:0f:67:c4:dd:c1:b9:2a:5c:3d:cb:13:c1:
4d:be:46:69:ee:71:b1:80:2a:86:17:3c:61:e1:88:06:90:9d:
5e:f4:0e:83:4a:99:d4:94:bd:28:c0:3a:68:12:ae:c6:27:a9:
89:11:a4:63:51:8b:96:13:93:ed:dd:74:54:e6:6a:10:84:f0:
e4:09:45:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org