Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401399.roa
File: AS401399.roa (raw, json)
Hash identifier: yFzxEIPfmcrCOIZ+XRv04hLqmgzQbJOXQvrVqWs1Y1A=
Subject key identifier: ED:E8:BA:69:A0:0D:8F:AA:37:DD:25:79:FA:6B:8C:98:94:75:45:87
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2F48C1930B1E1A7F758279CEA7EFA1B35B95FA26
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401399.roa
Signing time: Thu 10 Oct 2024 05:45:31 +0000
ROA not before: Thu 10 Oct 2024 05:40:31 +0000
ROA not after: Thu 09 Oct 2025 05:45:31 +0000
asID: 401399
IP address blocks: 2a0f:85c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:48:c1:93:0b:1e:1a:7f:75:82:79:ce:a7:ef:a1:b3:5b:95:fa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Oct 10 05:40:31 2024 GMT
Not After : Oct 9 05:45:31 2025 GMT
Subject: CN=EDE8BA69A00D8FAA37DD2579FA6B8C9894754587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:62:5d:3f:2d:d2:f3:6c:4b:a0:c3:a4:89:
f3:8b:f4:5f:17:7d:df:48:03:27:aa:1a:25:4a:fc:
ae:c4:6d:1e:a4:54:37:5d:24:56:c3:55:51:a1:84:
d7:a9:ae:7c:ff:55:31:3b:4a:68:11:cb:44:07:73:
55:e4:38:47:30:36:a6:52:02:f1:ca:1b:e9:17:13:
46:e1:18:a8:77:1d:40:d1:a3:fe:1b:22:56:76:ea:
97:00:51:3b:a4:2e:8f:c1:67:5d:ae:5e:a6:82:ce:
71:d7:37:6a:ff:a8:de:4f:61:a6:86:f1:53:e7:e5:
6f:a7:b7:d2:56:53:b5:ce:d1:b0:9e:20:7b:52:3b:
53:4a:9c:04:47:54:2f:89:fc:ae:24:3b:5a:90:11:
c1:9b:fe:ea:4e:00:c1:4e:f1:56:55:d4:a6:4b:68:
03:7c:f7:9d:9d:00:78:76:0f:04:11:e5:f1:93:7c:
a7:bb:74:ac:3e:79:76:db:d9:2d:7f:43:a9:6c:54:
88:43:5c:b4:dc:bc:0a:ec:0f:f8:38:6b:e8:8d:3d:
a9:84:24:a0:ab:ab:6c:35:f1:06:d6:34:7d:f2:7b:
7c:97:9a:56:72:70:1b:9b:04:67:40:32:8d:a3:f0:
87:b3:3b:06:c0:b2:e1:3e:62:ae:ef:cd:81:32:16:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E8:BA:69:A0:0D:8F:AA:37:DD:25:79:FA:6B:8C:98:94:75:45:87
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS401399.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1::/48
Signature Algorithm: sha256WithRSAEncryption
cc:19:57:d8:b7:30:92:74:1b:0d:38:5d:fc:59:2a:33:24:41:
07:79:c1:db:da:b4:6d:15:14:60:d4:8b:a1:39:d9:4b:2e:7d:
cd:07:a6:da:76:63:72:ae:3a:74:af:d5:07:c6:a5:fe:fe:17:
05:56:ad:d8:be:09:e5:81:c7:dd:2a:e5:4b:e6:d9:ea:1e:57:
55:b5:f7:8a:34:65:0d:cf:e8:0c:cc:a2:55:d8:4f:d7:e7:90:
55:22:d4:e9:07:0a:32:08:ba:84:9a:c0:e7:a5:1d:3d:9f:f8:
13:f0:e0:00:18:86:a9:d0:f6:3e:26:1f:54:61:69:51:46:2e:
99:d4:1b:42:97:bd:69:87:e4:7c:ac:69:de:a8:4c:e9:90:4a:
f1:31:fc:72:55:a8:d5:54:7d:a8:b7:a9:07:41:c0:db:68:2e:
75:f4:9e:ce:8a:39:3c:a7:1b:73:33:a1:5f:99:96:87:55:6a:
70:f2:8a:7b:73:00:42:97:14:59:3a:0c:52:4b:f4:38:be:33:
8c:65:97:1e:f1:bf:b2:95:48:e3:db:be:fd:c8:cd:89:95:8e:
64:a4:73:68:8d:32:6a:0a:82:f4:8f:fd:2e:38:fd:a7:21:15:
04:1c:41:59:cb:16:dd:0c:0f:32:ad:d6:f8:e4:65:c4:44:ba:
ae:d7:a7:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUL0jBkwseGn91gnnOp++hs1uV+iYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDEwMTAwNTQwMzFaFw0yNTEwMDkwNTQ1MzFaMDMxMTAvBgNV
BAMTKEVERThCQTY5QTAwRDhGQUEzN0REMjU3OUZBNkI4Qzk4OTQ3NTQ1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvmJdPy3S82xLoMOkifOL9F8X
fd9IAyeqGiVK/K7EbR6kVDddJFbDVVGhhNeprnz/VTE7SmgRy0QHc1XkOEcwNqZS
AvHKG+kXE0bhGKh3HUDRo/4bIlZ26pcAUTukLo/BZ12uXqaCznHXN2r/qN5PYaaG
8VPn5W+nt9JWU7XO0bCeIHtSO1NKnARHVC+J/K4kO1qQEcGb/upOAMFO8VZV1KZL
aAN8952dAHh2DwQR5fGTfKe7dKw+eXbb2S1/Q6lsVIhDXLTcvArsD/g4a+iNPamE
JKCrq2w18QbWNH3ye3yXmlZycBubBGdAMo2j8IezOwbAsuE+Yq7vzYEyFqFPAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU7ei6aaANj6o33SV5+muMmJR1RYcwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTNDAxMzk5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQAAMA0GCSqGSIb3DQEBCwUAA4IBAQDMGVfYtzCSdBsNOF38WSozJEEHecHb2rRt
FRRg1IuhOdlLLn3NB6badmNyrjp0r9UHxqX+/hcFVq3YvgnlgcfdKuVL5tnqHldV
tfeKNGUNz+gMzKJV2E/X55BVItTpBwoyCLqEmsDnpR09n/gT8OAAGIap0PY+Jh9U
YWlRRi6Z1BtCl71ph+R8rGneqEzpkErxMfxyVajVVH2ot6kHQcDbaC519J7Oijk8
pxtzM6FfmZaHVWpw8op7cwBClxRZOgxSS/Q4vjOMZZce8b+ylUjj2779yM2JlY5k
pHNojTJqCoL0j/0uOP2nIRUEHEFZyxbdDA8yrdb45GXERLqu16ex
-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org