Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48976.roa
File: AS48976.roa (raw, json)
Hash identifier: dLcdNZGcalFuqVoMZh9vJilRZtWbYFdqrkY8gv9EmKI=
Subject key identifier: 68:4B:E8:DB:8B:AA:50:1E:2D:D3:0B:95:2C:EF:AB:73:05:BE:73:72
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 32E4716072F871A271A113FF386EAB3C9B37FCB3
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48976.roa
Signing time: Wed 15 Jan 2025 16:37:17 +0000
ROA not before: Wed 15 Jan 2025 16:32:17 +0000
ROA not after: Wed 14 Jan 2026 16:37:17 +0000
asID: 48976
IP address blocks: 84.54.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e4:71:60:72:f8:71:a2:71:a1:13:ff:38:6e:ab:3c:9b:37:fc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 16:32:17 2025 GMT
Not After : Jan 14 16:37:17 2026 GMT
Subject: CN=684BE8DB8BAA501E2DD30B952CEFAB7305BE7372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:7e:05:61:4f:a5:1b:40:aa:79:39:36:9e:
14:54:2b:c6:83:12:64:16:57:ce:88:bb:cc:36:2f:
59:f4:16:a2:c8:76:60:72:01:3a:b0:43:24:28:23:
d7:6d:36:35:d4:28:2c:ac:36:9f:ab:9a:a0:3f:dc:
b2:f9:c8:39:54:a0:d3:98:88:97:e6:31:e9:23:e1:
5d:68:b0:a5:66:86:52:fc:ac:b9:01:cf:59:f6:71:
a6:d5:c6:29:ee:9d:35:14:15:d3:16:bc:ae:27:a1:
34:4a:b8:bb:a7:1f:74:02:2d:5a:e3:77:0e:57:3b:
a1:12:bf:4d:09:18:28:94:b1:3f:45:da:91:1e:df:
ee:b1:82:30:68:c4:9a:9a:b1:29:98:01:b1:20:3c:
22:c6:cd:61:de:91:e2:df:ef:4e:09:ac:a1:a8:01:
e2:5c:d2:46:33:df:ae:89:71:72:bc:61:f2:36:3c:
63:25:80:5b:cb:0d:e1:3e:8e:0a:de:ce:fe:59:78:
fc:53:61:3a:a0:e9:54:ed:fd:d6:8f:12:3a:bb:98:
81:af:3c:0d:f6:fd:a3:f1:bf:3b:ff:e3:88:2b:15:
89:4e:85:43:a0:49:84:78:85:bf:7e:34:cb:93:c7:
4a:8e:16:4f:c4:ee:88:6b:5d:81:57:84:92:94:19:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:E8:DB:8B:AA:50:1E:2D:D3:0B:95:2C:EF:AB:73:05:BE:73:72
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS48976.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.2.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f9:70:ef:fd:11:1f:d1:24:d9:4b:bd:74:e0:ae:34:21:80:
0f:6b:89:d5:23:5c:f0:fa:b1:46:d5:00:11:e0:fb:61:33:83:
4e:2e:00:11:9a:6d:0a:04:86:ab:11:94:ac:d0:59:a1:53:bd:
ff:b6:e3:ed:92:81:07:11:29:64:13:a0:ef:e3:9a:92:9f:c9:
83:d1:0b:0f:ae:08:ff:4c:e9:74:4f:1d:9f:c6:3c:24:83:bd:
46:aa:2e:b8:58:e8:79:b2:36:01:59:24:7c:bf:02:e3:16:0c:
a1:48:a9:06:eb:d1:88:df:1e:73:3a:07:3e:93:85:72:0a:62:
96:43:23:2e:1b:37:14:74:f8:30:3f:d1:f0:f2:02:bb:bc:7a:
eb:a4:e4:d9:56:69:9f:5f:c4:e3:2b:73:b0:16:83:93:2c:45:
e2:a5:72:18:26:96:f2:d7:8b:16:9c:b9:f8:52:f0:d4:c5:f5:
88:74:a6:bd:e1:95:3a:5a:19:6a:b3:ac:6d:db:a0:b3:fc:ae:
96:a8:e9:c5:d6:2b:a9:4d:b5:39:89:03:b2:b2:13:1e:6f:85:
d5:b6:55:7e:15:1b:35:06:96:93:ec:75:35:71:44:cf:7d:49:
5b:45:03:62:1b:8a:ed:82:b9:7b:49:55:69:f2:29:af:c8:a3:
eb:fb:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:52 2025 by rpki-client