Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
File: AS152179.roa (raw, json)
Hash identifier: /EjzMJOgMrm490kv5mT7pcKF06/jUHL/U+iSsbk4G+I=
Subject key identifier: 1A:9B:0B:9F:45:3F:14:8E:BB:44:6A:D8:3D:44:C2:A7:87:12:60:75
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 381945F2FBC0E1DA754E25197C3F8605E1B1F655
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
Signing time: Sun 07 Jan 2024 04:35:33 +0000
ROA not before: Sun 07 Jan 2024 04:30:33 +0000
ROA not after: Sun 05 Jan 2025 04:35:33 +0000
asID: 152179
IP address blocks: 141.11.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:19:45:f2:fb:c0:e1:da:75:4e:25:19:7c:3f:86:05:e1:b1:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 7 04:30:33 2024 GMT
Not After : Jan 5 04:35:33 2025 GMT
Subject: CN=1A9B0B9F453F148EBB446AD83D44C2A787126075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:5e:c7:4b:92:75:1f:24:38:14:a9:51:25:
bf:62:ea:cc:7b:5a:d2:b3:ba:50:5e:6e:88:c0:ca:
fd:76:1e:7b:52:05:7e:66:f5:9e:9b:99:22:61:77:
54:40:31:c4:79:3b:f7:53:b4:d0:ab:ce:fb:fe:05:
fb:f7:eb:88:0b:84:5f:f6:68:74:8d:5d:4f:49:8a:
ae:b4:01:a0:a2:11:0f:66:87:86:de:76:e0:7e:fd:
8a:88:6a:16:97:37:c8:c5:e1:37:71:8c:85:a8:b0:
e8:dd:55:43:f2:dd:08:05:b1:66:37:ec:36:3f:f2:
ff:67:57:f3:5a:dd:ee:92:11:6f:b2:ae:29:4a:5e:
33:13:89:ea:8d:b9:a2:2f:99:1b:d5:22:03:90:7f:
43:1a:74:70:f6:37:b4:ce:4f:53:1d:6b:d4:e6:b1:
83:2e:97:65:b3:3d:cf:28:14:61:6b:5d:e2:7e:d8:
34:fe:45:f9:89:04:ee:17:1e:c2:3e:0a:5a:4d:17:
7b:98:7b:72:0c:1c:df:b2:16:29:64:21:36:66:d8:
8f:79:a7:2f:5c:7b:af:b1:ff:2d:52:0c:d0:22:0d:
35:93:7a:4e:19:52:bb:78:97:a7:9c:4a:2b:86:e9:
31:8f:10:36:70:2b:dc:9c:63:61:d9:9e:6e:c9:a1:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:0B:9F:45:3F:14:8E:BB:44:6A:D8:3D:44:C2:A7:87:12:60:75
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS152179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.134.0/23
Signature Algorithm: sha256WithRSAEncryption
64:5a:5e:8b:f6:4e:40:f3:f3:38:6d:68:cd:1e:41:6a:cd:da:
fc:60:da:da:bc:33:42:09:89:fc:43:d2:7a:70:a0:35:af:bf:
fa:1d:d6:fa:d6:dd:2d:03:32:43:6e:a5:09:20:d1:b8:93:a3:
c9:50:9d:a1:ac:9c:2e:03:96:e1:e4:7b:4a:30:9a:88:51:2b:
92:10:fe:bd:d4:63:52:fe:68:f3:1c:fd:db:1d:2b:82:b0:7c:
dd:e7:58:62:08:94:49:91:a4:cd:39:5f:c1:5f:e1:02:36:b5:
c8:a2:3b:de:09:95:b1:8c:80:01:a1:23:ec:f5:36:39:7a:23:
f1:5b:86:17:3f:4b:10:82:29:08:b1:28:ee:1f:03:e4:29:de:
e2:a4:b9:d5:9a:18:3c:23:0e:ab:11:fc:d0:97:25:e3:9f:42:
ff:86:ad:20:6f:ca:c3:23:4d:7f:38:72:55:e3:7c:8e:3d:f5:
80:48:3e:65:82:0f:be:05:50:b7:62:78:d7:e1:28:3a:19:39:
99:f4:88:ec:10:ab:5c:39:6b:fa:f6:ec:b6:47:b4:0b:30:50:
b5:81:39:cb:99:32:05:eb:41:e4:e3:1c:f7:04:fc:61:5a:04:
14:61:f8:ed:89:2c:d8:54:df:9d:73:c1:ba:e5:f3:38:a3:50:
fb:db:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:35 2024 by rpki-client on console-fra.rpki-client.org