Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: YosPPVMmb8joqSpCIlVW1+8+N4AMfSTAUbijvo3D+oo=
Subject key identifier: 30:B7:C5:5C:09:73:47:AE:EE:78:1D:E4:82:00:A2:5D:94:99:AE:F7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 568AD89B1CA8EFB0A808372B71DBC056BC19EE5F
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137409.roa
Signing time: Thu 01 Aug 2024 10:08:39 +0000
ROA not before: Thu 01 Aug 2024 10:03:39 +0000
ROA not after: Thu 31 Jul 2025 10:08:39 +0000
asID: 137409
IP address blocks: 141.11.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:8a:d8:9b:1c:a8:ef:b0:a8:08:37:2b:71:db:c0:56:bc:19:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Aug 1 10:03:39 2024 GMT
Not After : Jul 31 10:08:39 2025 GMT
Subject: CN=30B7C55C097347AEEE781DE48200A25D9499AEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:bb:2f:b6:00:af:0e:09:29:a0:e5:8f:90:
a2:a9:08:98:44:75:4e:c6:11:8b:4a:cd:6e:0a:b8:
60:ab:d0:a4:be:f8:c4:4e:47:9a:58:61:d3:82:65:
3d:d8:af:a0:56:9a:fe:54:7a:1e:d9:45:97:3d:82:
34:a6:1a:96:b9:b6:c8:bf:87:16:b1:f5:34:55:06:
6b:ea:83:64:e9:6d:4e:eb:8b:30:b1:ab:a7:1d:67:
fd:c8:52:39:c7:f1:27:44:fc:66:59:f2:67:f4:07:
1c:eb:73:89:33:31:72:13:87:71:da:ea:e5:2f:58:
5b:76:d2:f5:71:d1:d8:7b:48:ac:f1:3b:7a:43:f3:
61:11:ed:09:3d:e8:b6:be:74:ed:25:c1:86:26:68:
97:82:23:8e:c4:f6:9a:3b:e0:e6:e6:a9:0f:f3:db:
9c:45:e0:e8:96:e5:2b:e4:c9:1f:a4:26:88:35:87:
0d:fd:c7:65:f5:bb:4e:db:b8:c8:80:76:6e:9a:27:
4a:61:ed:ef:fb:7d:01:77:a8:72:ce:cf:84:ec:31:
0a:6b:e9:a0:3a:c9:b9:f7:a2:ab:e2:00:ed:5c:6d:
ca:ac:08:be:11:6b:7f:04:36:f9:47:78:62:d1:aa:
23:a7:ed:7f:47:cc:61:a8:00:a9:51:fc:1d:38:db:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B7:C5:5C:09:73:47:AE:EE:78:1D:E4:82:00:A2:5D:94:99:AE:F7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.36.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:0e:7e:c6:55:82:d5:8c:bb:2e:67:c5:e9:ed:8f:8d:c7:44:
5c:c7:ef:93:c6:5f:3c:a0:92:28:ad:0e:7a:84:ce:a0:3b:0f:
a6:94:f5:99:24:5f:a6:44:b8:2e:4f:26:ad:b5:1d:30:9c:fa:
85:de:94:11:d3:86:12:cc:d7:58:13:76:82:59:b6:e0:5a:24:
ae:ff:05:5a:20:ff:54:3f:e7:23:7f:e5:b2:68:46:0a:f7:a0:
d5:ee:48:c9:fe:92:01:96:d3:af:89:01:b9:65:7c:4c:7b:e1:
1b:fa:bf:f2:1d:d5:9a:d3:18:54:ec:99:3b:38:0d:b8:3f:ed:
1d:b1:be:ba:38:f3:37:08:6e:54:0e:1b:74:4a:c4:14:ec:48:
c2:ea:2c:de:d5:b8:bf:68:73:b2:b4:15:16:a0:17:0c:70:4c:
d4:6b:a6:37:6e:9d:f0:5c:dd:3d:fe:22:13:24:e7:70:d9:70:
6b:29:92:5d:61:97:34:23:41:49:4f:54:b4:c5:0e:e8:d9:a8:
2f:b1:dd:8f:fe:f3:0b:36:e0:80:38:69:7f:b1:09:57:95:44:
46:1f:c7:86:e4:78:03:9d:1c:25:1f:48:65:de:d8:aa:7c:cb:
90:ca:24:45:67:dc:f3:5c:f9:82:34:06:ee:f5:6a:bc:0b:a1:
96:3c:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:14 2024 by rpki-client on console-ams.rpki-client.org