Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: TwBKWqwSdOHiOru5TnAYNGWB3HJ86T4nhsG1I2T1qho=
Subject key identifier: 28:16:6E:01:CC:79:C2:E7:86:A8:81:41:B4:3B:53:53:A2:F5:76:7B
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 47442D5195A474E0CDDFD7D758A653E5CBC5A2ED
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
Signing time: Tue 16 Jul 2024 14:01:13 +0000
ROA not before: Tue 16 Jul 2024 13:56:13 +0000
ROA not after: Tue 15 Jul 2025 14:01:13 +0000
asID: 152179
IP address blocks: 141.11.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:44:2d:51:95:a4:74:e0:cd:df:d7:d7:58:a6:53:e5:cb:c5:a2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 16 13:56:13 2024 GMT
Not After : Jul 15 14:01:13 2025 GMT
Subject: CN=28166E01CC79C2E786A88141B43B5353A2F5767B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:b9:08:2d:44:83:8c:44:87:7b:b6:1e:99:
b3:c8:19:e8:fb:3f:ab:49:71:e6:11:4a:0c:03:17:
8c:d9:71:5f:39:23:cc:08:f0:51:de:b2:1f:2b:7b:
bf:fc:3f:b3:8b:56:c1:1f:82:12:41:05:ad:53:fc:
d7:d1:72:34:3c:b1:ae:cc:2f:53:f8:63:d3:f9:42:
dd:d1:51:ed:ff:d0:d5:99:a7:c2:15:a8:14:68:95:
d7:ff:68:4e:c4:02:55:d9:18:ce:ca:b7:4f:ed:79:
0a:e6:d3:fe:04:b7:89:05:2d:93:34:ab:6e:81:4d:
79:6b:a4:29:46:3d:09:94:43:41:3e:96:2f:85:9a:
5a:d6:fc:06:df:4f:89:ad:c8:43:20:a5:8a:4b:e9:
83:c2:86:ef:f2:b7:d2:b1:df:6f:e6:fa:23:6c:04:
ba:cb:35:ee:de:b9:e2:c4:62:86:e3:51:bb:7c:88:
c1:2d:84:85:9d:7b:6a:b2:93:a0:b1:b6:18:72:12:
80:e8:1b:29:30:6a:7a:13:43:0f:55:c8:28:55:bf:
3c:42:79:55:66:bb:f8:3a:92:34:38:65:78:c0:56:
51:bd:be:80:2c:62:9e:80:6a:33:98:4c:f2:df:55:
c6:23:fa:54:78:b1:73:9e:5d:82:c5:c3:6f:ba:00:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:16:6E:01:CC:79:C2:E7:86:A8:81:41:B4:3B:53:53:A2:F5:76:7B
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.134.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:16:71:aa:47:34:3b:4a:4a:7b:cf:bb:90:14:08:65:e4:81:
5b:ab:59:73:80:cf:cf:9c:9d:9f:76:53:0a:a7:da:18:49:4c:
49:9b:d2:d6:bc:30:4b:5b:a4:ab:23:89:45:c4:ec:6e:b0:ff:
4d:9a:e2:14:c2:2e:e9:a4:ce:69:5b:72:24:da:f2:f7:56:b5:
36:4a:b6:ff:64:a1:1e:6e:5c:67:07:8a:0b:a2:41:ea:6e:b9:
9b:c8:f6:92:51:51:4b:19:63:2b:1e:eb:d1:7f:a8:a5:fc:8b:
7d:97:42:e5:a1:63:c8:8d:9b:c8:53:e5:fa:3c:8b:58:6b:08:
72:0f:93:57:4f:10:37:81:4e:17:92:ad:1d:82:4a:8d:40:37:
9f:c6:c8:22:a4:82:6a:c4:bb:bc:29:e1:4d:cc:8a:dc:89:f8:
b4:d7:74:f6:db:21:25:2f:a1:fc:21:76:3b:3c:8a:46:89:62:
94:bd:74:c7:df:56:6b:8c:b4:5e:b2:3f:46:8f:07:f7:ff:5e:
9b:54:aa:82:3e:56:d9:41:5f:9d:70:b6:bb:8b:6d:6a:14:c0:
19:2f:b8:36:e8:0c:fb:a8:80:6b:25:47:e4:04:df:14:55:cc:
74:f1:94:ca:e1:fe:de:6b:ab:68:a3:69:33:59:de:c3:bb:dc:
b5:27:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:30 2025 by rpki-client