Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa
File: AS141968.roa (raw, json)
Hash identifier: ih1Vwe8M0QVAp+J01cSijB1euQvKZFoREW9T44KqIHc=
Subject key identifier: 6D:1C:9C:20:FF:87:D8:23:F2:BE:12:E5:89:07:B6:B7:A3:13:16:82
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3127A4F62B5EB763711F0555B09CF07B9F2B3BAA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa
Signing time: Tue 24 Sep 2024 11:37:25 +0000
ROA not before: Tue 24 Sep 2024 11:32:25 +0000
ROA not after: Tue 23 Sep 2025 11:37:25 +0000
asID: 141968
IP address blocks: 141.11.25.0/24 maxlen: 24
141.11.160.0/24 maxlen: 24
141.11.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:27:a4:f6:2b:5e:b7:63:71:1f:05:55:b0:9c:f0:7b:9f:2b:3b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 24 11:32:25 2024 GMT
Not After : Sep 23 11:37:25 2025 GMT
Subject: CN=6D1C9C20FF87D823F2BE12E58907B6B7A3131682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:22:01:54:fe:c7:b7:2a:a5:1b:1f:fd:49:
fd:15:f7:33:2c:9e:d3:34:7f:ee:3e:fe:65:99:a5:
db:76:df:94:12:c9:87:5f:16:22:4e:c1:d1:47:f2:
4b:70:5c:6e:5f:ac:81:b5:bd:45:19:59:6c:dd:8a:
ab:bb:13:10:a8:db:4c:b4:05:53:8d:83:a3:3b:3d:
08:d4:2b:e4:da:54:a1:a7:a6:66:0e:f9:d6:f8:49:
17:5d:58:10:1f:96:56:ee:7a:2f:5d:6a:c1:d1:c9:
d0:90:2e:18:a6:14:91:f5:c2:92:3d:da:bd:4a:f1:
13:45:84:74:53:11:2c:e9:47:18:1a:d0:07:d3:e3:
9a:ab:0b:ee:46:07:a7:7a:6c:9a:6d:de:cf:9f:d4:
40:1d:b2:42:8a:b1:87:3f:37:31:25:df:c7:8e:07:
6e:f9:a5:55:2a:e9:b7:d3:98:13:a4:92:94:94:fa:
8a:2f:cc:9b:cf:f1:39:98:73:d2:be:53:ac:a4:a2:
aa:92:8c:45:d4:88:d4:06:fc:be:a2:47:70:c6:a1:
bf:52:4a:d8:e9:4a:fa:53:2b:f4:89:dc:21:69:65:
62:22:bd:9d:12:8e:a0:d2:46:fa:94:fc:f2:35:dc:
94:cc:af:88:40:8b:3a:7f:0d:e5:33:30:fa:a8:c7:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:9C:20:FF:87:D8:23:F2:BE:12:E5:89:07:B6:B7:A3:13:16:82
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS141968.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.25.0/24
141.11.160.0/24
141.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:89:a9:29:01:c6:25:5f:ad:2c:ef:c5:b5:7b:af:90:8c:36:
62:c9:d7:20:d6:30:e0:c6:1e:f2:9a:65:aa:b4:53:df:a4:93:
28:ef:99:6e:ed:1a:e5:0f:c2:6e:e8:3e:e5:5f:1c:c0:9a:c7:
4b:83:0f:72:65:07:90:cc:ce:e1:2b:2d:d7:22:5e:a3:28:9e:
53:a2:e0:75:44:6e:51:7f:d9:27:8e:b3:d3:41:02:09:18:02:
12:70:43:af:81:1e:f5:91:c8:67:f3:bf:9b:33:88:9f:44:67:
e6:98:ed:20:79:b7:0c:44:ca:47:cb:d8:b5:d4:57:48:40:b8:
52:b2:aa:ab:77:73:9b:b5:c6:3f:9f:e7:f0:33:dd:bf:45:b1:
5f:ef:21:9e:a6:11:0c:cf:13:24:ef:55:55:ab:22:1d:89:9f:
b5:a0:a2:71:1c:95:8a:cd:6f:78:de:d8:e1:1e:89:78:3c:c6:
f0:48:48:df:82:37:95:90:3e:4c:aa:fd:7f:2e:83:75:20:b6:
39:d5:2a:9a:72:cd:94:fa:e3:29:30:a2:80:6b:48:38:be:5e:
9f:4b:2f:01:81:a8:4d:df:c3:76:dc:d5:15:fb:4a:5e:67:8b:
ed:07:80:cb:c3:2a:3c:24:b6:cd:79:e4:be:2b:e3:2b:4c:c9:
38:1d:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:14 2024 by rpki-client on console-ams.rpki-client.org