Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215674.roa
File: AS215674.roa (raw, json)
Hash identifier: sTlrenec3midoE0mW4AMnRL+WyTvl1H3p3x44MTZTvY=
Subject key identifier: 6B:45:B4:6B:E3:AB:F5:99:2E:80:C5:A6:E0:47:C8:B7:53:A2:80:84
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 72E18E8326D8A1AFEDA7F3C5AF85A211F23AC4AB
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215674.roa
Signing time: Fri 23 Aug 2024 08:01:25 +0000
ROA not before: Fri 23 Aug 2024 07:56:25 +0000
ROA not after: Fri 22 Aug 2025 08:01:25 +0000
asID: 215674
IP address blocks: 2a0f:85c1:359::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e1:8e:83:26:d8:a1:af:ed:a7:f3:c5:af:85:a2:11:f2:3a:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:25 2024 GMT
Not After : Aug 22 08:01:25 2025 GMT
Subject: CN=6B45B46BE3ABF5992E80C5A6E047C8B753A28084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:d4:27:f4:35:39:e6:bc:29:8b:09:c9:29:
6c:f0:0c:81:c1:89:ed:53:d0:3e:1b:45:c5:2c:bc:
e2:ad:12:b3:81:4b:26:21:6e:e8:b3:3c:3a:57:09:
68:df:a3:57:1f:ae:d7:92:d0:28:69:f7:7c:4b:67:
91:5e:73:77:69:0c:5e:08:02:c7:f4:b9:92:15:a6:
41:35:cd:ff:4b:be:44:fd:82:36:9a:ee:7e:7d:55:
ff:ad:32:d8:c3:5a:0a:8c:9d:7f:71:7d:ba:0d:78:
b2:d8:5a:f7:14:28:66:23:db:33:97:b0:d8:a6:c5:
18:a2:33:68:10:c0:c2:bc:81:29:69:98:19:78:f2:
34:58:b4:ff:4f:4f:22:ec:73:8f:13:ae:57:fa:9c:
86:64:c9:08:39:ba:b2:36:c0:f1:97:51:b3:ab:7c:
da:19:18:56:fa:40:fa:f7:bf:4f:92:c8:b6:9b:5b:
79:33:fa:9e:ab:0f:52:12:43:dd:6a:3d:94:9e:0e:
9d:4c:ad:60:39:f0:e6:c6:df:84:95:af:47:ed:4a:
6a:fb:80:df:27:7b:19:ee:38:e2:46:2c:87:8c:37:
57:a0:d4:88:ca:c2:14:bc:57:5f:ad:41:5b:31:fc:
a9:6d:73:48:7e:a0:dc:05:9f:dc:c3:e2:94:7a:f6:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:B4:6B:E3:AB:F5:99:2E:80:C5:A6:E0:47:C8:B7:53:A2:80:84
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215674.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:359::/48
Signature Algorithm: sha256WithRSAEncryption
d2:24:73:f5:5a:42:66:d2:60:5a:84:aa:46:77:39:cf:a3:ee:
f2:d2:84:33:72:d7:31:67:78:8e:3b:dc:2d:28:f5:3f:fb:5e:
98:f3:e8:1a:7c:47:54:61:97:63:ba:1b:68:c9:87:17:9d:f6:
9a:c4:bd:aa:aa:0f:bc:22:f4:85:54:37:c4:d7:f3:d6:bf:9a:
41:92:54:16:51:e7:62:4a:3d:dd:1f:58:4b:e3:d0:f8:d4:6e:
0a:45:8a:1b:7d:4f:44:1a:f1:6b:ea:0f:7e:e7:0e:6f:82:85:
9d:43:b5:20:73:a6:7a:67:c6:40:d2:f5:96:6a:77:95:a5:28:
b4:03:7e:95:a0:98:91:22:0d:7a:61:f8:9a:4f:b0:f4:bc:51:
57:b1:48:80:dc:37:ac:94:fd:e9:25:bd:66:02:d4:d0:f2:b0:
87:c2:fa:dd:f7:fb:22:cc:9a:c9:bb:7c:ce:4f:2f:22:a3:ee:
78:01:10:dc:df:d3:ae:d9:0e:eb:1d:e7:e9:b6:54:0c:3e:23:
1f:c0:1e:94:f2:76:57:2c:43:ba:ce:df:89:72:88:53:1f:b7:
86:1f:ac:fe:ff:6c:55:03:50:5b:a7:bc:bf:24:58:10:41:19:
ab:e3:fb:07:31:48:57:a6:80:7e:dd:64:20:07:eb:33:28:60:
b2:a9:15:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUcuGOgybYoa/tp/PFr4WiEfI6xKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjVaFw0yNTA4MjIwODAxMjVaMDMxMTAvBgNV
BAMTKDZCNDVCNDZCRTNBQkY1OTkyRTgwQzVBNkUwNDdDOEI3NTNBMjgwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAkdQn9DU55rwpiwnJKWzwDIHB
ie1T0D4bRcUsvOKtErOBSyYhbuizPDpXCWjfo1cfrteS0Chp93xLZ5Fec3dpDF4I
Asf0uZIVpkE1zf9LvkT9gjaa7n59Vf+tMtjDWgqMnX9xfboNeLLYWvcUKGYj2zOX
sNimxRiiM2gQwMK8gSlpmBl48jRYtP9PTyLsc48Trlf6nIZkyQg5urI2wPGXUbOr
fNoZGFb6QPr3v0+SyLabW3kz+p6rD1ISQ91qPZSeDp1MrWA58ObG34SVr0ftSmr7
gN8nexnuOOJGLIeMN1eg1IjKwhS8V1+tQVsx/Kltc0h+oNwFn9zD4pR69mT5AgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUa0W0a+Or9ZkugMWm4EfIt1OigIQwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTMjE1Njc0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQNZMA0GCSqGSIb3DQEBCwUAA4IBAQDSJHP1WkJm0mBahKpGdznPo+7y0oQzctcx
Z3iOO9wtKPU/+16Y8+gafEdUYZdjuhtoyYcXnfaaxL2qqg+8IvSFVDfE1/PWv5pB
klQWUediSj3dH1hL49D41G4KRYobfU9EGvFr6g9+5w5vgoWdQ7Ugc6Z6Z8ZA0vWW
aneVpSi0A36VoJiRIg16YfiaT7D0vFFXsUiA3DeslP3pJb1mAtTQ8rCHwvrd9/si
zJrJu3zOTy8io+54ARDc39Ou2Q7rHefptlQMPiMfwB6U8nZXLEO6zt+JcohTH7eG
H6z+/2xVA1Bbp7y/JFgQQRmr4/sHMUhXpoB+3WQgB+szKGCyqRWT
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org