Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216052.roa
File: AS216052.roa (raw, json)
Hash identifier: hQ9FnHYE0BCDuveJS0ZwDIMUmPc9xCm7s3NQ1+VckgQ=
Subject key identifier: 60:D6:8E:FA:0E:90:18:0D:42:CA:1B:75:7E:BC:0D:31:B5:A0:04:85
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 794C28C8184A5DBB0CFC45EB760D3BD4FADD7EE4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216052.roa
Signing time: Fri 23 Aug 2024 08:01:18 +0000
ROA not before: Fri 23 Aug 2024 07:56:18 +0000
ROA not after: Fri 22 Aug 2025 08:01:18 +0000
asID: 216052
IP address blocks: 2a0f:85c1:324::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4c:28:c8:18:4a:5d:bb:0c:fc:45:eb:76:0d:3b:d4:fa:dd:7e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:18 2024 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=60D68EFA0E90180D42CA1B757EBC0D31B5A00485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:24:7d:51:7a:09:3b:f2:2c:ce:b0:a4:7f:
38:a6:f2:55:cf:24:5a:84:ea:03:b9:06:28:aa:c0:
de:a4:e2:21:a0:fc:e9:87:f8:67:d8:95:34:9e:69:
08:92:c5:9a:a9:56:10:6f:81:ee:45:ae:6a:20:5e:
b5:f6:cd:35:43:8b:24:bd:51:23:a2:a8:cd:0d:fb:
a0:8e:5d:63:f5:9b:ab:11:2d:6e:c6:f7:18:40:47:
bc:49:4c:b5:02:98:5b:f4:10:2d:63:91:24:31:15:
d4:23:04:eb:32:ed:cc:c0:e7:b0:23:13:98:df:63:
93:89:39:c2:4e:a7:c8:ea:a6:8c:da:6e:b7:49:05:
d4:dd:10:e3:26:7b:d3:e9:6b:63:82:62:53:70:21:
6d:bd:29:e2:66:5c:81:02:84:51:c2:2b:a1:bc:bc:
c8:57:6e:0b:71:b8:69:5b:84:fc:0c:ef:75:a3:bb:
4c:87:4b:3f:41:2f:63:bf:8b:6d:4d:db:64:b5:ab:
79:ce:d4:b8:80:fb:c9:ff:9f:69:5b:8c:04:29:a2:
1c:47:72:2d:26:88:6f:ac:c6:03:c9:0b:bd:28:ba:
98:0e:13:0e:49:3a:02:79:b7:24:0c:42:bd:e9:a2:
cc:46:1b:4d:0f:f5:8d:95:b5:b8:63:d2:b7:e3:52:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D6:8E:FA:0E:90:18:0D:42:CA:1B:75:7E:BC:0D:31:B5:A0:04:85
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS216052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:324::/48
Signature Algorithm: sha256WithRSAEncryption
4c:b4:7e:72:db:8b:ce:e1:6c:2e:51:ce:9b:46:0a:7a:8e:22:
58:85:53:b9:a0:dc:d7:25:e0:f4:2b:d5:1e:57:06:62:d2:e0:
3a:0e:c8:91:cc:68:78:0d:b8:65:33:c5:69:0e:78:aa:38:a7:
a4:ee:19:a1:41:2e:c8:f4:d9:75:82:4d:a8:40:0f:2b:64:31:
f0:cb:4e:f3:c0:91:7b:65:9e:de:33:f0:be:76:4f:47:e2:e5:
02:13:d7:ed:82:9a:15:d5:ab:41:fb:e1:81:b4:2d:37:c9:6b:
bf:dc:bb:2a:e2:72:f2:40:ed:02:ca:e4:df:ce:08:b9:15:35:
d0:c3:ee:fc:80:35:6d:6e:a9:64:74:f3:1c:c2:52:13:61:be:
2f:71:4d:ad:41:d9:10:b1:3c:80:89:5e:36:2f:c2:18:28:13:
51:79:9c:80:da:70:70:22:6b:a5:50:67:8c:c8:8e:7b:c3:2c:
c5:be:3f:6c:1a:dd:86:00:27:26:86:81:6f:cc:e1:b2:bf:f0:
9f:fd:85:92:08:46:a4:12:b4:a3:35:e5:de:02:d2:b6:0c:cb:
dd:50:04:f4:da:ab:a1:02:76:e2:05:31:22:2a:da:f4:f6:d8:
8f:d2:12:fd:d7:d5:93:2b:db:75:b1:1a:07:b5:35:00:17:b4:
64:0e:94:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org