Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
File: AS136510.roa (raw, json)
Hash identifier: XvOwYton+MmrD2000wu8pkixVxF/VG4n1RFMHZSNUGg=
Subject key identifier: 3F:34:31:10:2D:D6:EC:9A:4E:8D:DB:A0:46:07:72:53:CE:7A:17:69
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5F4C72CC42166265C2B7668B01225BBFA0E6CB22
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
Signing time: Mon 19 Aug 2024 09:41:31 +0000
ROA not before: Mon 19 Aug 2024 09:36:31 +0000
ROA not after: Mon 18 Aug 2025 09:41:31 +0000
asID: 136510
IP address blocks: 141.11.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:4c:72:cc:42:16:62:65:c2:b7:66:8b:01:22:5b:bf:a0:e6:cb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 19 09:36:31 2024 GMT
Not After : Aug 18 09:41:31 2025 GMT
Subject: CN=3F3431102DD6EC9A4E8DDBA046077253CE7A1769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:32:19:00:4e:12:55:32:e0:cf:a3:1b:bf:
84:00:21:b4:86:26:92:55:dd:6f:59:e4:91:aa:2f:
64:11:fe:c6:d4:b9:ce:6a:bc:ea:06:11:dc:00:f0:
d1:18:cb:b8:97:28:25:ba:3d:62:4d:4d:e1:30:78:
16:82:aa:2b:69:a0:ab:b5:3e:2b:8d:67:31:38:3c:
97:99:d1:ca:f2:82:67:9e:94:e6:35:0b:07:9b:6a:
7b:29:99:ba:fc:7b:02:f0:e7:a5:14:03:35:e3:d5:
e1:a0:f1:e8:80:31:31:57:9b:51:a2:9d:7e:b7:27:
67:51:e9:b1:8c:ab:ec:0a:5f:82:5f:60:b3:e7:28:
7a:df:a0:66:73:28:ea:cb:b6:70:ee:5c:25:50:09:
87:a5:9e:44:11:87:d4:ea:70:ed:ed:36:f3:d4:9c:
bd:36:6e:75:a1:f2:93:95:ee:ed:66:47:21:ec:6e:
9d:50:ef:81:e8:1f:bd:c3:0f:c0:48:a5:ed:c6:d5:
0c:7b:80:cf:3a:d8:cc:b7:e5:3b:3e:ca:cc:b1:d0:
dd:28:eb:f3:9c:5d:f6:82:15:3b:03:25:56:05:b0:
9f:ae:08:e1:34:21:5d:84:d3:58:5d:79:76:67:2c:
46:f4:e0:c0:b3:ef:8e:e2:d3:94:74:28:b5:15:d9:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:31:10:2D:D6:EC:9A:4E:8D:DB:A0:46:07:72:53:CE:7A:17:69
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS136510.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9b:45:80:9f:bb:10:b8:e1:16:8f:3d:4e:9d:d8:35:1f:dc:
6a:2a:43:93:eb:ae:8b:29:2c:d6:57:e5:22:40:f9:52:26:03:
99:db:83:e3:03:5c:0a:1f:af:7f:c7:4d:db:13:cc:19:51:7b:
4a:b4:92:c2:89:9d:cf:5a:a3:02:f9:1a:1a:92:ac:ec:48:f9:
4a:13:d3:3e:8d:e1:7c:92:67:20:f9:b8:bf:99:cb:97:77:76:
7a:57:17:a0:7c:54:79:0a:eb:19:c7:d9:2b:9d:ba:fb:dd:7c:
26:05:6d:ef:d7:10:93:f1:27:4f:3d:6c:09:99:3f:e7:b2:bb:
89:17:eb:30:0b:b0:8e:1d:fb:25:85:81:a2:87:7b:ea:8d:df:
f2:e6:1f:c0:50:ed:3f:f2:f5:c4:5a:50:ee:f0:cd:e8:63:65:
e5:98:d2:97:e4:c5:df:1f:c2:62:0f:d8:52:61:28:a0:a3:11:
93:cb:f0:0e:1a:e1:75:63:8f:2e:74:d7:8d:49:22:02:d6:2d:
06:9f:c6:37:20:9c:dd:e6:2e:fb:9d:f3:78:78:b6:4f:c7:18:
9c:b9:0d:07:80:ab:21:79:3a:28:6d:71:83:94:56:3a:bf:b2:
ff:7b:e9:8e:0e:4e:4d:cc:69:03:e8:f3:9b:c8:6f:08:e2:b8:
3b:c3:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 00:03:15 2024 by rpki-client on console-fra.rpki-client.org