Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
File: AS215729.roa (raw, json)
Hash identifier: REMJnNJ5vTA1vKRcerqfsMEy/GisIZWr8PoMymXjU84=
Subject key identifier: 82:09:62:6B:CC:B6:1A:DD:57:A9:45:AF:00:E6:E8:8E:D3:E4:D0:66
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 6C0F745C7FE6DB9D739FEE5D760433EE73A05F27
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
Signing time: Fri 23 Aug 2024 08:01:17 +0000
ROA not before: Fri 23 Aug 2024 07:56:17 +0000
ROA not after: Fri 22 Aug 2025 08:01:17 +0000
asID: 215729
IP address blocks: 2a0f:85c1:351::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0f:74:5c:7f:e6:db:9d:73:9f:ee:5d:76:04:33:ee:73:a0:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:17 2024 GMT
Not After : Aug 22 08:01:17 2025 GMT
Subject: CN=8209626BCCB61ADD57A945AF00E6E88ED3E4D066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:7a:a2:27:8c:ef:80:1d:f7:ac:74:05:06:
8d:56:03:08:52:cc:30:35:2e:c3:fd:41:dc:0a:69:
dc:ab:96:22:db:89:66:42:69:b7:da:4b:bb:ac:9a:
7f:be:2e:c8:52:53:9b:8b:66:38:2f:da:eb:8a:ac:
cc:85:c0:af:2b:bd:fe:7f:4d:78:2b:63:c2:3e:6a:
b5:9c:03:51:d2:6a:57:01:01:09:a8:93:f4:93:c9:
de:62:fc:ec:91:c8:18:86:e2:3e:df:da:11:aa:7f:
4f:0e:59:3e:c1:7d:1d:2f:89:7f:8c:e5:df:90:f8:
8f:4a:42:ca:ca:31:bb:2d:b8:10:28:c5:33:be:ba:
31:68:19:80:3d:ea:d3:db:3a:32:0a:11:da:dc:50:
f0:c8:49:1e:ea:9d:e6:37:79:18:3a:91:f1:12:3a:
74:02:3d:ec:6f:55:72:4d:4b:86:ff:22:04:90:48:
2f:62:11:f4:e2:06:51:a2:e1:a7:cc:74:1a:d5:2c:
3f:cd:95:76:d5:97:93:0e:30:99:8c:8a:90:e6:df:
f8:6e:d2:48:c5:da:78:4d:a3:07:b2:35:ea:f1:72:
14:1b:c7:8e:f2:c8:41:6d:64:21:97:de:b5:9e:7a:
e1:05:d4:7a:08:2c:75:cb:7b:91:fb:d9:9e:c5:87:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:62:6B:CC:B6:1A:DD:57:A9:45:AF:00:E6:E8:8E:D3:E4:D0:66
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215729.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:351::/48
Signature Algorithm: sha256WithRSAEncryption
c5:44:7c:73:6f:18:44:73:b6:40:29:8a:d1:b9:69:94:54:76:
ce:cf:c4:38:dc:4f:e7:e7:ca:cb:35:61:b2:51:ef:c1:ea:91:
09:1d:7c:c9:ff:74:25:b3:8f:a9:6d:5a:32:ad:39:0a:21:b7:
60:87:af:04:ef:6a:0f:88:3a:13:be:8d:b1:76:61:98:97:f3:
af:0e:b8:a1:3c:fd:ec:e2:d3:b8:e6:a5:b3:3f:24:1f:bb:7f:
95:83:5e:90:bc:00:95:3b:26:e7:9d:7b:4d:6c:fd:c5:d8:0c:
25:a4:1e:ce:b5:23:af:44:49:f9:da:3a:e9:1c:48:13:1c:56:
a1:e6:83:3f:ca:f8:d6:04:d3:03:21:0d:2a:32:9e:85:84:48:
5b:0d:fb:bb:4e:eb:3f:b3:56:b3:2c:24:d3:50:05:7c:9a:ab:
21:3b:3a:65:27:8f:f0:00:6b:34:19:a7:90:93:83:75:bd:6a:
8e:bb:51:51:a3:4a:20:0c:cf:a9:75:dc:a0:3f:4e:77:3c:cf:
80:61:fa:85:f9:e3:db:07:cc:f6:f1:15:74:0b:40:f6:d9:89:
85:63:5d:d3:51:aa:eb:a7:69:c7:d9:03:f5:d2:b2:4c:c0:1c:
d5:81:27:8b:41:05:eb:25:54:e4:79:e7:7f:08:d2:46:7b:80:
e4:2c:7c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org