Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44876.roa
File: AS44876.roa (raw, json)
Hash identifier: 2SUhTf+4GtxGrI3TlJEaw8rC+x4ZqSg54puOytr9PL8=
Subject key identifier: 72:44:40:6B:53:AB:97:EA:4F:28:09:89:07:DE:2F:B9:F6:C3:31:EB
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 183004332F48FD9C489C3E8D8EB69C61E6301EE2
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44876.roa
Signing time: Fri 23 Aug 2024 08:01:18 +0000
ROA not before: Fri 23 Aug 2024 07:56:18 +0000
ROA not after: Fri 22 Aug 2025 08:01:18 +0000
asID: 44876
IP address blocks: 2a0f:85c1:326::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:30:04:33:2f:48:fd:9c:48:9c:3e:8d:8e:b6:9c:61:e6:30:1e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:18 2024 GMT
Not After : Aug 22 08:01:18 2025 GMT
Subject: CN=7244406B53AB97EA4F28098907DE2FB9F6C331EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:65:87:01:80:71:e4:b0:17:47:cb:23:6b:
a9:ed:95:0a:ed:db:c3:70:f9:66:56:c4:46:11:ca:
c2:33:84:04:77:d9:01:48:f4:67:c9:d7:1a:ec:ae:
47:93:1c:5f:cd:b8:90:ea:9b:a6:8c:1e:46:4a:16:
df:7d:07:3e:9d:32:0c:42:b2:77:d5:2d:0f:8c:60:
e5:af:20:84:65:af:4f:48:fb:50:ed:4a:2d:09:e1:
4d:9c:e7:b2:2c:ba:99:98:f7:4c:f8:4c:6e:88:66:
22:8e:b7:21:63:ba:63:2d:bc:fc:e6:83:60:96:7a:
2b:04:fa:f5:6b:49:90:b1:6f:a7:05:62:24:4f:a8:
56:4a:01:44:ce:81:43:62:c5:49:c2:c1:b5:2b:2d:
b8:2e:6c:7c:08:12:f3:db:54:ad:5a:cc:be:93:1e:
20:76:c4:f8:a5:85:b3:72:a7:52:aa:8f:d5:09:61:
df:8c:24:d8:4b:34:89:f6:da:a7:e1:e0:88:b8:fd:
7e:86:b0:95:8d:1e:55:fc:9f:44:a3:8f:9b:ce:0d:
4b:c7:cf:ae:8c:c2:50:36:27:9e:ea:6d:89:c9:9b:
61:09:1d:08:8f:8c:75:0b:f4:76:5c:69:d6:39:69:
32:cf:1c:0c:3c:c4:de:b6:ca:1b:a4:09:07:38:32:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:44:40:6B:53:AB:97:EA:4F:28:09:89:07:DE:2F:B9:F6:C3:31:EB
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44876.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:326::/48
Signature Algorithm: sha256WithRSAEncryption
ae:40:60:65:62:9e:85:74:01:15:5d:bd:6d:c2:65:5b:b5:9f:
2e:45:5a:15:0b:67:8b:8d:ab:ad:27:7a:26:63:1a:ff:dc:df:
b5:0f:d8:40:39:db:38:d5:cb:e7:91:e7:4a:57:82:b2:7d:11:
ec:8d:db:87:28:7e:47:16:72:bc:f3:e8:76:fe:24:11:f6:10:
39:8e:62:2c:74:7b:73:95:3f:0e:47:02:d0:7f:5d:56:3e:2e:
c7:b3:61:18:80:88:10:79:63:aa:a7:2c:42:5a:4c:4d:ae:75:
69:6f:81:d2:74:3b:92:55:23:e4:7f:f8:00:e9:11:df:dc:7c:
2b:f8:c2:ab:a0:da:98:3f:e3:3c:f3:a0:f3:95:5c:aa:5d:32:
42:49:ff:ba:94:61:64:3f:e7:15:4a:e3:a5:e5:b9:5c:f3:51:
7e:d7:1c:a6:eb:c5:5d:1f:61:1d:3a:e5:ea:74:69:93:ff:ae:
2d:9a:56:c6:56:18:d9:b0:65:ae:36:ba:74:ee:0c:d2:d0:5f:
d9:a7:c5:d6:28:15:6d:29:5d:9b:76:3c:fb:ff:2d:07:df:0d:
06:4a:37:e5:b2:6a:24:24:d4:d9:f5:65:b2:dd:75:dc:e5:1b:
e1:eb:c9:79:8a:ae:9c:38:f5:9b:38:5d:33:e0:6f:43:55:d2:
6a:9f:30:68
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUGDAEMy9I/ZxInD6NjracYeYwHuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNDA4MjMwNzU2MThaFw0yNTA4MjIwODAxMThaMDMxMTAvBgNV
BAMTKDcyNDQ0MDZCNTNBQjk3RUE0RjI4MDk4OTA3REUyRkI5RjZDMzMxRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJ2WHAYBx5LAXR8sja6ntlQrt
28Nw+WZWxEYRysIzhAR32QFI9GfJ1xrsrkeTHF/NuJDqm6aMHkZKFt99Bz6dMgxC
snfVLQ+MYOWvIIRlr09I+1DtSi0J4U2c57IsupmY90z4TG6IZiKOtyFjumMtvPzm
g2CWeisE+vVrSZCxb6cFYiRPqFZKAUTOgUNixUnCwbUrLbgubHwIEvPbVK1azL6T
HiB2xPilhbNyp1Kqj9UJYd+MJNhLNIn22qfh4Ii4/X6GsJWNHlX8n0Sjj5vODUvH
z66MwlA2J57qbYnJm2EJHQiPjHUL9HZcadY5aTLPHAw8xN62yhukCQc4MlzrAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUckRAa1Orl+pPKAmJB94vufbDMeswHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTNDQ4NzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqD4XB
AyYwDQYJKoZIhvcNAQELBQADggEBAK5AYGVinoV0ARVdvW3CZVu1ny5FWhULZ4uN
q60neiZjGv/c37UP2EA52zjVy+eR50pXgrJ9EeyN24cofkcWcrzz6Hb+JBH2EDmO
Yix0e3OVPw5HAtB/XVY+LsezYRiAiBB5Y6qnLEJaTE2udWlvgdJ0O5JVI+R/+ADp
Ed/cfCv4wqug2pg/4zzzoPOVXKpdMkJJ/7qUYWQ/5xVK46XluVzzUX7XHKbrxV0f
YR065ep0aZP/ri2aVsZWGNmwZa42unTuDNLQX9mnxdYoFW0pXZt2PPv/LQffDQZK
N+WyaiQk1Nn1ZbLdddzlG+HryXmKrpw49Zs4XTPgb0NV0mqfMGg=
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org