Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44822.roa
File: AS44822.roa (raw, json)
Hash identifier: 7wZbh4ta8/3tPwsMhVI1RloL19D1E34KuBr4+yKcqUo=
Subject key identifier: 24:2B:F3:B8:56:5B:9D:88:44:70:AE:5A:31:18:BD:87:74:CF:0D:B5
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 392DBA0AFC306E164F01C2E5292528EC9577C2B4
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44822.roa
Signing time: Fri 23 Aug 2024 08:01:21 +0000
ROA not before: Fri 23 Aug 2024 07:56:21 +0000
ROA not after: Fri 22 Aug 2025 08:01:21 +0000
asID: 44822
IP address blocks: 2a0f:85c1:327::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2d:ba:0a:fc:30:6e:16:4f:01:c2:e5:29:25:28:ec:95:77:c2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:21 2024 GMT
Not After : Aug 22 08:01:21 2025 GMT
Subject: CN=242BF3B8565B9D884470AE5A3118BD8774CF0DB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:43:4a:23:ae:75:4e:25:36:63:3a:d5:8f:0d:
a6:9a:9a:2b:fc:1a:49:5c:87:bb:b3:2c:ed:04:43:
b2:9f:05:64:61:90:22:6c:7f:21:0b:ac:04:4d:b8:
37:58:66:08:21:6b:cc:d7:ef:2f:d3:7e:95:12:03:
a6:dd:6c:b0:b0:ea:40:56:c4:0d:ca:86:74:51:c7:
5c:fb:5e:2b:b1:1a:43:64:cc:5a:a0:24:e9:66:31:
b3:b5:a2:3e:3d:0b:76:3a:aa:78:db:95:93:85:77:
70:f9:c7:a7:6e:00:51:c0:4b:83:e0:37:66:1e:cc:
2e:20:d5:de:a4:37:a0:16:62:88:71:10:00:5b:ea:
ab:87:95:00:62:a3:a2:bb:87:99:07:f2:18:68:48:
d8:0b:58:24:48:31:b6:b7:71:f6:24:d7:51:d1:51:
fd:bb:95:01:3e:85:f2:c9:94:f5:c7:54:06:b7:b6:
6c:00:34:4d:ee:98:13:37:73:9c:13:f1:f8:14:1d:
85:36:fd:90:e5:d0:3a:92:ba:0a:08:60:20:ce:64:
63:d4:90:14:d0:38:55:17:5d:9c:67:27:bb:33:13:
31:37:eb:36:fd:46:3a:90:25:b5:86:f1:be:4a:98:
10:c2:45:ff:65:24:74:ae:13:8f:76:78:43:28:13:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:F3:B8:56:5B:9D:88:44:70:AE:5A:31:18:BD:87:74:CF:0D:B5
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:327::/48
Signature Algorithm: sha256WithRSAEncryption
be:88:50:b8:6d:75:f6:54:34:15:6a:9c:e9:71:39:88:be:9a:
e6:21:a9:22:82:7b:77:ed:e8:48:46:ba:d2:79:26:f5:c2:43:
90:fe:ed:35:96:a3:11:bf:dc:50:34:08:ca:66:e7:aa:8e:23:
fc:cd:13:b2:04:2f:cf:2c:a0:ad:3d:0e:9c:07:1c:76:36:99:
ad:41:ee:a4:84:27:c0:02:cc:ff:dc:56:ec:c7:6d:38:09:0c:
11:d5:1f:d1:23:8b:7d:dc:0d:94:15:cf:1b:db:88:2e:cd:ad:
fa:0a:14:be:c9:93:1e:49:e1:e8:d9:2a:7b:9e:80:c0:e2:f2:
a6:36:43:89:59:28:ad:d9:db:ba:2c:18:6c:82:8d:5d:d2:33:
ee:d9:3f:e5:53:7d:33:f9:67:5d:41:a4:74:4a:b6:f3:23:39:
e6:bf:fa:45:ec:83:9e:9b:54:54:4f:42:15:c8:ea:fd:bd:e5:
25:90:52:34:c4:65:c6:bf:77:2e:d8:26:11:d9:fb:27:cc:d0:
8c:ca:6b:6c:68:48:ea:8f:5a:29:c6:10:fa:da:7c:4c:72:a6:
2a:94:04:f4:c9:e3:02:bf:bf:a0:a1:f4:92:74:19:21:10:ab:
e2:77:90:94:f0:f9:f4:3c:44:f4:ec:ee:7e:a8:f6:cb:29:cc:
98:9d:29:69
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUOS26CvwwbhZPAcLlKSUo7JV3wrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MjFaFw0yNTA4MjIwODAxMjFaMDMxMTAvBgNV
BAMTKDI0MkJGM0I4NTY1QjlEODg0NDcwQUU1QTMxMThCRDg3NzRDRjBEQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeQ0ojrnVOJTZjOtWPDaaamiv8
Gklch7uzLO0EQ7KfBWRhkCJsfyELrARNuDdYZggha8zX7y/TfpUSA6bdbLCw6kBW
xA3KhnRRx1z7XiuxGkNkzFqgJOlmMbO1oj49C3Y6qnjblZOFd3D5x6duAFHAS4Pg
N2YezC4g1d6kN6AWYohxEABb6quHlQBio6K7h5kH8hhoSNgLWCRIMba3cfYk11HR
Uf27lQE+hfLJlPXHVAa3tmwANE3umBM3c5wT8fgUHYU2/ZDl0DqSugoIYCDOZGPU
kBTQOFUXXZxnJ7szEzE36zb9RjqQJbWG8b5KmBDCRf9lJHSuE492eEMoE2k5AgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUJCvzuFZbnYhEcK5aMRi9h3TPDbUwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTNDQ4MjIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqD4XB
AycwDQYJKoZIhvcNAQELBQADggEBAL6IULhtdfZUNBVqnOlxOYi+muYhqSKCe3ft
6EhGutJ5JvXCQ5D+7TWWoxG/3FA0CMpm56qOI/zNE7IEL88soK09DpwHHHY2ma1B
7qSEJ8ACzP/cVuzHbTgJDBHVH9Eji33cDZQVzxvbiC7NrfoKFL7Jkx5J4ejZKnue
gMDi8qY2Q4lZKK3Z27osGGyCjV3SM+7ZP+VTfTP5Z11BpHRKtvMjOea/+kXsg56b
VFRPQhXI6v295SWQUjTEZca/dy7YJhHZ+yfM0IzKa2xoSOqPWinGEPrafExypiqU
BPTJ4wK/v6Ch9JJ0GSEQq+J3kJTw+fQ8RPTs7n6o9sspzJidKWk=
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:08 2024 by rpki-client on console-ams.rpki-client.org