Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135542.roa
File: AS135542.roa (raw, json)
Hash identifier: pFXMUu5UmzrvADhVcJKH8mBBoV/tBvOWcUg6VwzpBuQ=
Subject key identifier: BB:8B:6C:95:A2:94:B7:F6:3A:19:C5:57:52:4C:B8:A5:2B:1B:E2:62
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4B11D22D389F5C3C85E94FB4C7CEC00E1C86824C
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135542.roa
Signing time: Sat 24 Jun 2023 11:27:49 +0000
ROA not before: Sat 24 Jun 2023 11:22:49 +0000
ROA not after: Sat 22 Jun 2024 11:27:49 +0000
asID: 135542
IP address blocks: 141.11.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:11:d2:2d:38:9f:5c:3c:85:e9:4f:b4:c7:ce:c0:0e:1c:86:82:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 24 11:22:49 2023 GMT
Not After : Jun 22 11:27:49 2024 GMT
Subject: CN=BB8B6C95A294B7F63A19C557524CB8A52B1BE262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:cd:eb:10:d8:98:69:75:6b:f3:61:1d:41:
94:ea:f4:06:c5:b1:fc:80:2c:0f:c4:6e:f1:9c:74:
4a:bc:f0:d0:40:05:f0:36:b6:ab:7e:94:36:92:71:
49:12:46:88:90:46:47:c1:2d:00:b9:c2:6e:bb:37:
64:c1:9c:2a:c5:7c:8d:b7:40:d9:b6:a6:24:b5:82:
1c:62:be:c0:76:10:d1:e8:0c:dc:bd:1a:88:da:f0:
66:44:e1:5d:be:4f:fe:a7:a2:aa:c2:8a:ca:89:43:
b1:a7:0a:14:89:a8:61:96:8a:bc:23:c3:16:0f:bb:
fc:46:90:56:3e:70:8a:02:48:10:42:5a:54:15:b0:
13:57:2b:c2:d9:65:d2:a4:24:c8:0c:17:00:cc:67:
0f:39:f7:63:bc:f4:ec:9c:80:af:02:98:6f:c7:e8:
2b:e0:af:ca:9c:33:c0:cf:f6:1f:2d:6d:3c:18:23:
0b:b9:c8:6d:09:2e:b5:a1:bb:a1:af:e8:44:20:0a:
72:16:bd:18:06:0c:0d:86:5b:e1:1f:0c:b4:7e:50:
e4:12:57:4d:2d:72:f1:74:38:27:54:9d:d9:59:47:
7f:71:d9:d7:cf:9d:ef:d1:8f:5d:b2:2d:59:51:5c:
37:c5:97:97:00:62:3b:30:1c:e8:56:c4:e2:ba:b5:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:6C:95:A2:94:B7:F6:3A:19:C5:57:52:4C:B8:A5:2B:1B:E2:62
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS135542.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.252.0/23
Signature Algorithm: sha256WithRSAEncryption
45:ae:95:6c:fb:a2:72:33:69:36:f5:bd:9c:27:08:5f:3b:8f:
09:47:f3:e0:0b:f3:31:76:b6:ce:6a:10:ae:d7:f1:c0:e4:f5:
2c:66:22:41:ae:2c:0f:e4:38:59:0e:81:e2:99:03:07:05:ca:
c9:56:ad:db:ee:8e:31:c0:0a:ed:28:8f:70:1d:fb:ec:b5:6a:
d8:1e:94:68:5c:b0:a5:b4:09:e5:46:6d:d6:da:85:d8:ee:26:
eb:b8:83:6c:58:73:45:54:3e:1a:bb:20:06:81:e4:d0:16:04:
69:ea:c8:d5:67:53:4d:e0:a4:6d:06:dd:74:a9:b2:59:5d:41:
4b:e1:18:9a:98:23:f8:71:a1:c0:d7:ac:d4:5d:4e:75:52:8d:
91:e6:f2:5d:f0:f0:75:27:a2:57:68:5c:97:a3:48:97:9d:44:
41:e8:7a:6d:03:91:91:19:d9:b5:47:29:14:6d:5b:7a:9e:e2:
ab:fe:9a:05:f2:2e:8e:3e:96:4c:b5:58:19:2e:84:8d:fa:c3:
77:96:12:0e:93:a4:f4:09:c5:80:74:a9:76:a9:7c:91:80:3f:
89:34:0b:3e:96:19:08:f3:22:8a:fd:42:12:3e:9f:b2:3e:6f:
22:8e:cf:24:ee:76:de:1d:38:01:55:69:07:19:39:85:36:a2:
19:15:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:38:07 2024 by rpki-client on console-ams.rpki-client.org