Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214174.roa
File: AS214174.roa (raw, json)
Hash identifier: 4UxbBd51ENVmefURN2Yj7V3xDmBaUmPztqZhyq67Ycw=
Subject key identifier: D6:27:54:1B:B6:1B:41:58:FB:37:6D:FA:C6:E6:FE:7F:29:91:60:D7
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 024FB40BBE35C3F4032626E698A8203941E097AC
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214174.roa
Signing time: Sat 23 Nov 2024 09:19:09 +0000
ROA not before: Sat 23 Nov 2024 09:14:09 +0000
ROA not after: Sat 22 Nov 2025 09:19:09 +0000
asID: 214174
IP address blocks: 141.11.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:4f:b4:0b:be:35:c3:f4:03:26:26:e6:98:a8:20:39:41:e0:97:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 23 09:14:09 2024 GMT
Not After : Nov 22 09:19:09 2025 GMT
Subject: CN=D627541BB61B4158FB376DFAC6E6FE7F299160D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:ab:9f:44:94:f0:1b:9f:57:6a:0f:b1:c2:
b7:2e:19:5e:f1:83:b8:5d:d3:00:51:e6:6d:1f:09:
5a:ab:a8:9e:e0:dc:71:1e:90:15:28:09:ba:34:dd:
37:37:db:89:4a:ba:31:5d:20:13:8b:18:68:83:94:
d1:1c:4d:07:da:69:f5:4f:14:75:df:12:3f:a1:cb:
a6:ed:ac:9b:ae:dc:62:8c:34:d1:04:37:6d:a5:bd:
34:e0:61:af:1e:3d:ca:b5:7e:57:d9:30:91:c1:b4:
2a:74:d9:e1:c4:9d:e2:13:19:dc:a8:0d:49:4d:7f:
89:96:f4:88:9c:a9:18:7b:f1:e7:7d:db:1f:70:17:
9b:32:f8:de:e1:be:fd:85:2c:0d:fd:f5:0f:5f:bf:
87:30:b4:9e:39:30:c6:df:17:4e:b3:01:71:ad:e0:
d4:9c:12:13:4d:09:be:19:95:95:8f:8e:2d:db:3c:
77:7d:f1:23:40:f8:95:87:26:9b:e5:25:b4:ef:e6:
5c:fe:1d:ad:fe:74:80:08:d8:ba:d0:d1:cd:f0:f2:
9a:9a:eb:fd:89:68:31:4f:79:7f:0a:74:d6:e9:a6:
b1:1c:e5:3f:4c:99:64:33:7e:15:19:92:ec:3d:ca:
80:2c:a5:3f:8d:26:54:12:f2:ae:09:88:4f:96:d3:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:54:1B:B6:1B:41:58:FB:37:6D:FA:C6:E6:FE:7F:29:91:60:D7
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.172.0/23
Signature Algorithm: sha256WithRSAEncryption
56:bb:47:9b:ce:27:3d:c2:e4:91:ed:fc:7d:5f:89:e5:45:fa:
6d:dd:bd:3f:88:b2:6f:fc:1b:c8:19:8e:d0:30:de:f5:79:cf:
d0:0a:07:1d:ee:bf:57:c7:37:d4:17:00:5e:bc:61:c8:98:de:
91:fa:cb:52:af:2f:33:48:06:f1:92:09:ce:cf:6f:7f:de:d8:
8f:4d:10:b8:19:05:9c:a8:fb:25:5a:a9:b1:4c:ca:fd:b1:b8:
e2:33:f0:47:2f:76:c3:e5:30:f4:8b:f2:c3:4f:31:7f:99:5a:
88:a6:5d:76:0f:d0:81:4b:64:c9:aa:d5:e1:f1:2b:f3:47:59:
d1:8e:97:76:d8:c1:88:ba:91:9c:ea:3e:5b:36:72:18:43:8c:
2e:3a:e3:ae:60:63:fc:63:64:12:27:84:06:cb:27:aa:f4:a0:
f1:79:1f:a8:ef:4b:04:85:51:b6:71:6c:93:5f:c9:71:54:fb:
9b:61:76:cd:84:d6:f8:12:eb:85:2e:a6:06:12:32:9d:bf:aa:
1c:6a:f4:5a:34:64:e6:1e:04:35:d9:fc:8d:69:7c:62:87:dc:
6a:8b:58:7b:98:80:bb:01:cd:ba:c9:6c:18:70:05:7c:a0:49:
9a:c7:29:a2:c5:be:63:c3:58:6f:9c:45:5d:20:b2:61:7d:31:
3a:6a:73:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:03 2025 by rpki-client