Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215993.roa
File: AS215993.roa (raw, json)
Hash identifier: Mpfb4/8eHYF/YnsfgJCfO4tFXWy76LOcwrNH9UDgnX0=
Subject key identifier: AF:26:B2:F8:54:79:2A:E3:F1:11:CD:D8:A2:3E:86:75:03:2B:85:12
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 59E4890ACEF832FA03F47E2E3F3E379EBAA6F5EC
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215993.roa
Signing time: Tue 17 Sep 2024 04:24:41 +0000
ROA not before: Tue 17 Sep 2024 04:19:41 +0000
ROA not after: Tue 16 Sep 2025 04:24:41 +0000
asID: 215993
IP address blocks: 2a0f:85c1:298::/48 maxlen: 48
2a0f:85c1:393::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:e4:89:0a:ce:f8:32:fa:03:f4:7e:2e:3f:3e:37:9e:ba:a6:f5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Sep 17 04:19:41 2024 GMT
Not After : Sep 16 04:24:41 2025 GMT
Subject: CN=AF26B2F854792AE3F111CDD8A23E8675032B8512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:48:4f:8f:85:ec:5f:bb:48:67:37:52:9d:
2c:2c:5e:95:3c:da:e5:78:7f:c9:71:13:fc:5f:79:
19:35:bf:6e:bc:14:d4:99:80:69:0e:5b:ae:78:0e:
4b:c2:0e:cf:1d:db:cc:68:08:4f:a0:c3:fb:8e:5e:
91:da:9b:bf:16:9e:b6:7a:0f:7e:e3:34:61:bf:21:
6b:0f:f9:5c:bb:2d:ed:e3:83:18:1c:c0:cd:65:06:
d5:55:2e:0b:89:a3:34:6c:5a:2a:0c:50:3e:e5:1d:
fa:26:2d:8e:e0:4a:e1:6c:ba:1e:11:86:dc:b9:a4:
eb:37:cd:1e:b9:8f:2d:3f:65:f9:ce:dd:f0:40:23:
09:5e:50:ad:21:9b:df:26:5b:c4:bb:13:e7:6b:01:
bb:68:bb:34:40:b6:92:f6:16:6b:b9:d1:b4:e7:de:
33:1d:51:2b:37:e9:9f:d1:2f:58:f3:54:02:c5:50:
3c:13:d3:74:fb:24:85:14:d7:c7:f2:33:20:f2:c8:
ad:38:e0:4d:05:a9:0f:5b:d3:71:53:f5:f1:fd:94:
97:3d:1d:88:53:7a:24:5f:e0:60:18:f0:7c:78:94:
4e:b2:03:a9:09:02:4d:6b:b8:79:35:0a:53:99:eb:
52:61:b7:25:df:e9:ee:f4:14:74:a9:a7:c0:ef:83:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:B2:F8:54:79:2A:E3:F1:11:CD:D8:A2:3E:86:75:03:2B:85:12
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215993.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:298::/48
2a0f:85c1:393::/48
Signature Algorithm: sha256WithRSAEncryption
8c:63:d3:cb:31:1e:53:81:4f:89:2e:8c:86:db:63:61:dd:26:
c5:52:7d:e1:56:03:22:20:0e:1c:49:a6:14:5f:65:83:ae:65:
df:6d:70:3f:96:06:87:87:3e:b5:f0:ea:6f:1d:59:cc:7e:a0:
14:15:fd:df:a5:15:e8:07:4d:7f:89:c3:27:63:8c:31:4a:2a:
65:80:4d:3b:fa:22:e7:29:25:db:5e:22:f4:dc:5e:0c:fc:95:
55:ea:17:63:62:b3:19:fd:50:a9:f8:a8:2a:1d:4a:19:32:97:
f5:19:4f:d8:75:d7:6a:35:48:f6:f3:a7:15:a5:1a:d1:30:c7:
71:c7:0e:31:05:c4:d8:03:9a:7e:3c:39:d1:e4:88:10:39:ff:
ef:33:98:5d:b4:e1:65:52:68:97:02:2c:da:d1:d6:86:e0:94:
ce:74:f3:89:d6:94:cf:a2:e4:b1:6a:21:ff:16:07:30:cb:6d:
5e:53:46:ad:ed:ef:86:b4:0f:0f:59:e9:29:65:45:ae:24:6c:
2c:c3:a4:61:51:d3:96:9f:43:c6:88:8d:33:2e:a9:ed:5b:38:
e8:e1:98:a1:5a:4a:d5:f5:8f:07:56:de:dc:c5:b5:a6:7f:56:
bc:be:42:aa:16:8f:ff:6e:bc:ab:d6:76:7c:a1:31:da:13:51:
15:ff:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org