Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
File: AS206735.roa (raw, json)
Hash identifier: AXp5YOBslUIvRqBQEhFO57mWmEre7felRmrSsH8Ztu4=
Subject key identifier: 4C:3E:FC:81:FB:A7:F1:AF:B6:AE:DC:50:56:79:E0:0A:9C:5F:54:D0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 3BEC179096F0B7C61F727673B78A52164E2D22DD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
Signing time: Tue 23 Jul 2024 13:48:15 +0000
ROA not before: Tue 23 Jul 2024 13:43:15 +0000
ROA not after: Tue 22 Jul 2025 13:48:15 +0000
asID: 206735
IP address blocks: 141.11.52.0/24 maxlen: 24
141.11.53.0/24 maxlen: 24
141.11.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ec:17:90:96:f0:b7:c6:1f:72:76:73:b7:8a:52:16:4e:2d:22:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jul 23 13:43:15 2024 GMT
Not After : Jul 22 13:48:15 2025 GMT
Subject: CN=4C3EFC81FBA7F1AFB6AEDC505679E00A9C5F54D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:e9:ac:d4:d6:80:05:05:6c:05:99:cb:ed:
bc:1f:61:15:b9:f6:f8:1e:58:3b:43:1e:de:51:e3:
0a:88:29:b5:bd:5e:df:9d:71:b5:ca:36:38:21:a3:
0a:4b:df:8f:ab:10:c6:a1:d2:b4:c5:b8:e0:6d:1c:
85:24:a5:c8:f7:a5:59:b1:24:ca:02:08:29:0b:60:
6d:20:1d:4c:0b:a9:1c:c3:7e:40:a5:71:a5:0b:cd:
71:8d:1f:15:3b:5b:55:98:60:d2:bd:90:78:6d:06:
7b:f1:49:0b:82:f7:7d:70:1f:6e:76:ec:d9:72:f1:
d4:e5:23:a2:41:b9:3f:80:3d:31:aa:06:94:34:46:
26:1f:38:52:6e:32:06:0d:4e:a0:7f:ca:cb:aa:6b:
53:a7:f6:45:4b:0b:4a:ea:4b:aa:9c:ff:1b:b8:9a:
e0:5a:15:2a:90:5e:4c:ca:38:01:a9:38:e1:72:c5:
4a:d4:9e:d1:a5:9b:b2:8a:98:77:50:09:d9:b7:ee:
b1:bf:0a:7d:80:82:ad:61:03:b0:af:46:a5:bc:d8:
d8:47:ff:ab:c8:37:78:f4:23:bf:a6:02:bf:c2:65:
19:d1:bd:66:e2:57:86:79:1a:b4:38:c5:07:6c:36:
e1:ce:80:67:f2:f8:01:23:e4:69:17:9f:c9:11:10:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3E:FC:81:FB:A7:F1:AF:B6:AE:DC:50:56:79:E0:0A:9C:5F:54:D0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS206735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.52.0/23
141.11.189.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b5:38:8b:b3:b4:16:6f:ca:fa:7c:14:8c:16:41:6a:74:c3:
dd:f4:db:23:d6:e9:24:8f:fb:b8:9b:35:3a:05:49:22:5d:bd:
be:64:91:9a:8b:21:bc:a3:bc:ec:02:fa:34:7a:e2:c0:be:5a:
56:dd:ba:f5:bb:43:42:fa:f6:e6:00:94:78:6a:b8:a1:e6:84:
c8:7e:68:77:6f:10:62:6d:90:f1:76:2c:bf:ba:bd:59:8a:31:
ec:27:3a:9d:10:85:8c:f4:36:1d:1e:35:36:f0:0f:2c:87:10:
c5:65:8f:f1:50:6c:81:58:69:4e:37:6a:fa:cd:10:ad:c0:36:
f9:b9:40:19:6b:d4:1c:94:7c:ec:dd:3c:63:83:89:05:d4:34:
8d:9c:fe:06:77:e5:aa:fc:65:bb:43:dd:5d:de:1a:df:54:07:
f9:a0:9a:6c:c1:ac:87:8a:44:9e:9d:76:78:af:31:f3:a0:9a:
78:fd:be:95:c7:d6:f4:d5:5c:76:b8:d3:4c:5e:9f:57:e0:fc:
78:35:9b:3d:d8:67:95:05:ad:cd:4e:ae:39:eb:e3:0c:64:17:
96:1b:44:ef:50:a0:cc:bb:8d:e2:20:17:1c:58:0a:f9:29:e2:
2b:9f:a0:69:01:87:1a:36:cc:87:92:a7:11:ae:f1:e3:e1:ed:
c3:73:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:20 2024 by rpki-client on console-fra.rpki-client.org