Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214654.roa
File: AS214654.roa (raw, json)
Hash identifier: GJbj+PwywqvBkIFTcgRA60LCYyb4kN8GjPXYQpjRaPE=
Subject key identifier: 3D:C9:A3:54:14:E7:E9:73:54:C2:A5:44:3F:11:53:AE:F3:73:48:53
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5353CD0A83DBEF370FC4E20047FCE9605F41FF05
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214654.roa
Signing time: Wed 06 Nov 2024 05:03:10 +0000
ROA not before: Wed 06 Nov 2024 04:58:10 +0000
ROA not after: Wed 05 Nov 2025 05:03:10 +0000
asID: 214654
IP address blocks: 141.11.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:53:cd:0a:83:db:ef:37:0f:c4:e2:00:47:fc:e9:60:5f:41:ff:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 6 04:58:10 2024 GMT
Not After : Nov 5 05:03:10 2025 GMT
Subject: CN=3DC9A35414E7E97354C2A5443F1153AEF3734853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:e1:fe:46:ed:5c:04:d3:6c:b2:71:bd:79:
e6:70:f2:77:cd:cd:2c:a7:87:c9:93:cc:3c:ad:ea:
00:76:4e:3b:05:1d:be:bb:7f:c5:83:c3:94:53:e7:
81:9b:79:b5:89:a4:fa:cf:cb:36:6f:38:12:90:a2:
03:47:61:b3:c8:15:2e:7e:69:3b:b5:82:6b:1e:49:
cc:2f:a5:fb:a6:63:e7:3f:23:0d:50:ab:e5:51:51:
db:34:7a:c1:d1:03:70:d2:12:5d:a6:5e:84:9c:3d:
16:5f:cb:88:ad:32:a1:a0:56:61:89:42:5e:e0:9d:
ec:65:95:d2:30:21:8c:b0:86:8c:c6:a9:40:3a:81:
a0:b2:7e:a1:73:25:54:31:8d:fd:ea:e6:7a:d1:72:
69:9e:f9:d6:3e:09:31:5c:52:91:5a:34:ba:72:77:
3b:7d:d2:8b:43:f0:ad:79:5e:98:f9:05:d4:fe:af:
fb:9c:d5:1f:00:85:00:77:a5:8f:c3:85:93:38:34:
2e:6b:cd:d3:c5:3e:b9:8f:7c:ab:1d:33:9d:e2:82:
66:af:9f:ba:16:3e:a0:de:d7:7d:31:e9:ed:c0:93:
79:b5:89:2f:a8:bf:b3:4e:1d:9f:64:b0:9b:f3:a2:
22:60:c4:43:fc:71:48:df:a7:8f:ed:dd:2a:32:f7:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:A3:54:14:E7:E9:73:54:C2:A5:44:3F:11:53:AE:F3:73:48:53
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS214654.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.245.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c7:1f:71:81:26:f7:fd:f2:a6:23:a3:f8:51:d5:64:26:8a:
3c:71:f1:f1:a7:2f:12:41:c8:23:fb:98:1f:c9:9c:89:b6:b1:
e6:d5:e0:59:7c:24:48:bd:b7:38:8f:e0:ef:4d:31:6d:4d:b0:
4c:88:19:94:9f:8e:44:e7:a3:a4:82:6c:c2:2a:f5:0f:47:4b:
39:6b:8f:4e:9f:68:b5:52:9f:20:f3:f9:67:f3:fe:3e:df:b0:
35:53:90:c2:3b:fe:f5:3f:41:6b:3e:9f:0a:79:3a:3e:4d:e6:
91:5b:e4:f8:41:26:13:15:3a:33:f4:2a:b6:e3:ae:aa:73:c7:
c4:d3:a9:93:f3:44:cb:08:44:81:a8:5b:0a:73:ef:d2:ef:4a:
4e:71:63:eb:2f:cd:9a:a1:4f:df:b5:66:a9:42:4c:79:b5:90:
2e:1c:af:17:81:1f:eb:d1:34:42:cb:0d:e5:28:62:ca:26:24:
ca:e4:ac:42:9d:5c:3b:88:63:33:cc:c6:11:bd:87:dc:0c:fa:
80:2d:39:96:ea:f4:5c:26:34:7e:8e:43:74:91:94:da:c3:fa:
b2:a6:d1:49:83:aa:68:d7:5c:bc:95:52:64:28:f5:4b:c7:c9:
f5:20:dc:d8:d3:ac:aa:b1:f1:de:de:c9:2e:62:83:0e:79:fd:
4f:44:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-fra.rpki-client.org