Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS44822.roa
File: AS44822.roa (raw, json)
Hash identifier: VUELfUF/rGGdiBG2LdUpr9SiI+oUpEezqLVu0FuCAAM=
Subject key identifier: 2C:A8:18:AE:67:BC:10:EB:03:9C:61:D9:BF:6D:63:75:9B:A4:65:E9
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7DB916331E497F10BEC8A6B39213222BA7BE7FAC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS44822.roa
Signing time: Tue 04 Feb 2025 00:17:09 +0000
ROA not before: Tue 04 Feb 2025 00:12:09 +0000
ROA not after: Tue 03 Feb 2026 00:17:09 +0000
asID: 44822
IP address blocks: 2a14:7580:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b9:16:33:1e:49:7f:10:be:c8:a6:b3:92:13:22:2b:a7:be:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Feb 4 00:12:09 2025 GMT
Not After : Feb 3 00:17:09 2026 GMT
Subject: CN=2CA818AE67BC10EB039C61D9BF6D63759BA465E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:70:79:0b:6b:89:9a:c8:ad:43:b6:13:f5:
d8:d3:78:82:7b:4e:a7:78:da:a1:f4:ee:a8:11:7f:
d5:ac:99:10:00:45:d9:27:79:1a:a9:3a:6e:1b:6d:
ae:12:ed:2f:9a:b2:33:db:bc:34:8b:8d:e6:cc:cb:
41:0e:2f:30:8f:34:82:0a:4d:3f:5a:67:6c:1f:f0:
2a:c9:95:92:4b:aa:c7:6e:38:21:e0:cf:9b:14:67:
ed:ae:d4:98:27:c4:bb:41:eb:a8:7e:92:86:06:ef:
7e:89:ad:c3:29:a8:1c:0a:07:d6:a5:c4:cf:84:54:
0e:6b:9a:ab:94:18:cf:81:18:9c:be:3c:9c:c0:3a:
c2:d7:32:7f:99:67:db:29:ab:d6:4b:a0:e0:72:2a:
35:3b:66:9c:61:59:48:98:e8:48:80:c3:d7:49:83:
49:ab:0f:6c:6d:51:67:fa:14:23:3d:b2:9f:a5:c7:
c8:92:ea:2c:3d:b7:93:b6:03:0d:1e:e8:d9:cf:3b:
33:b3:c0:b7:c8:88:30:73:c1:31:28:d2:82:a4:1c:
37:52:b8:ae:50:a4:1b:b3:4c:75:b2:c6:ea:bd:1d:
d3:51:7d:e4:17:cc:7c:85:ea:65:89:51:3f:71:10:
3c:5f:e5:02:21:7a:e5:2b:97:32:a7:82:0b:6c:8b:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:18:AE:67:BC:10:EB:03:9C:61:D9:BF:6D:63:75:9B:A4:65:E9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS44822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:3000::/36
Signature Algorithm: sha256WithRSAEncryption
61:e7:bf:84:7e:6a:84:6d:21:6d:f8:d7:08:96:4b:4b:56:30:
f6:47:b3:94:78:19:ad:a3:74:77:2f:aa:77:8a:b7:c6:ef:0e:
4a:93:d1:f1:8e:e5:3b:ca:83:2b:ef:b2:d5:0d:6b:08:f7:8b:
b7:d5:29:78:ee:39:47:36:00:3a:26:e7:9f:1d:6c:19:69:ad:
96:96:36:8b:1a:71:ac:4f:26:10:1c:cf:f8:4a:bf:10:77:d6:
43:a4:8a:d7:c0:13:cb:d3:e3:47:c7:07:95:e2:d5:e4:db:d9:
5d:b0:cb:39:4b:f5:54:0d:f0:65:8c:09:1a:58:47:04:db:3a:
5f:d8:f5:05:2c:1b:08:fc:1f:a8:54:9c:b7:61:bc:09:c5:49:
0e:cc:dd:80:aa:38:9f:d2:54:be:c2:e1:e0:1a:a0:06:7d:51:
b2:26:e4:5b:51:97:83:bc:4e:3e:da:69:1e:eb:69:99:04:79:
96:e1:76:05:ff:0d:d6:85:d2:13:3e:f5:f8:ee:f4:ec:e6:b4:
30:2f:3b:64:37:cf:79:81:8c:39:26:81:49:ef:66:01:18:cf:
96:51:da:25:22:ea:83:6e:cf:b0:87:82:d9:25:c1:d1:e6:f9:
b8:84:b6:a8:04:a1:9f:c1:48:5d:e5:e2:a0:47:fc:9a:b0:e9:
02:25:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:42:01 2025 by rpki-client