Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216183.roa
File: AS216183.roa (raw, json)
Hash identifier: khJymXESoVZFRP8Em8Do7qMtR6X1ATJ9hJMdtDwIDgo=
Subject key identifier: 0D:3A:9E:01:56:6B:76:EE:38:38:6E:DC:DA:77:C0:59:0E:20:CA:8F
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 0A746D6EA96AC7250ED7686121FDACE63C27CABA
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216183.roa
Signing time: Mon 15 Apr 2024 14:47:48 +0000
ROA not before: Mon 15 Apr 2024 14:42:48 +0000
ROA not after: Mon 14 Apr 2025 14:47:48 +0000
asID: 216183
IP address blocks: 141.11.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:74:6d:6e:a9:6a:c7:25:0e:d7:68:61:21:fd:ac:e6:3c:27:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Apr 15 14:42:48 2024 GMT
Not After : Apr 14 14:47:48 2025 GMT
Subject: CN=0D3A9E01566B76EE38386EDCDA77C0590E20CA8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:45:fa:dc:1e:14:d3:47:25:d4:ec:20:a7:
d1:4d:21:47:c8:3c:6b:3d:95:e0:b2:1a:3b:34:02:
26:3a:e2:d3:b9:32:bb:c6:4d:4a:e7:e0:c0:a2:3b:
35:8a:03:b5:29:b7:f7:53:61:b4:14:30:aa:08:2d:
a3:93:76:e2:82:99:c0:e9:ef:a6:c3:29:cf:9d:a0:
e6:fd:08:ac:f7:1b:a4:3c:68:ef:0a:df:b3:86:43:
6c:e0:f1:7b:d7:af:1b:2b:c6:4c:bf:02:25:2c:ef:
c8:36:2c:b5:7c:34:2e:9d:7c:32:03:bb:e6:bc:0e:
aa:94:1d:97:82:bd:a4:55:4d:97:a5:94:23:eb:3d:
f3:f1:eb:78:73:04:c6:66:70:65:ab:46:b4:14:a6:
e0:54:23:c2:5d:bf:13:bf:29:34:8e:88:53:aa:c9:
e1:10:3b:4e:4f:84:57:eb:ce:fc:79:f9:08:99:ec:
ed:da:c4:84:14:e6:88:e3:a9:df:ae:ac:fd:24:dc:
f9:4e:92:33:9d:b3:0a:75:9f:19:a3:62:4e:6d:b5:
32:68:41:70:65:61:44:3a:52:d2:e8:90:bc:4a:3b:
6a:01:4e:e6:07:38:3c:40:e5:56:f4:2e:2f:c1:74:
8f:62:b7:22:61:aa:0b:ad:c8:35:f7:67:13:44:26:
0b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:9E:01:56:6B:76:EE:38:38:6E:DC:DA:77:C0:59:0E:20:CA:8F
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS216183.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.127.0/24
Signature Algorithm: sha256WithRSAEncryption
53:47:55:21:2a:a1:b6:8b:c9:53:7a:68:df:de:eb:44:5b:1e:
b1:2e:49:e8:4a:84:46:7b:1f:ce:d4:8f:37:f5:89:d2:33:8f:
21:6e:2a:2c:a1:9b:9f:12:b3:82:e9:bc:dd:00:67:29:dc:e4:
51:13:77:64:49:2e:0b:32:94:ab:f1:71:30:3d:58:a9:13:0e:
ca:4d:21:b6:7a:5e:6d:d7:d7:8b:21:be:80:54:ae:2c:01:54:
bb:70:8d:24:48:24:ba:f5:4c:36:52:5b:18:42:04:e9:51:5e:
20:d0:c3:24:f4:87:91:5a:12:25:92:c6:4c:17:d5:75:ad:12:
80:7a:85:31:4c:2b:3f:64:44:4e:1a:a4:e5:38:d1:29:fb:09:
a6:ec:40:40:66:01:09:9c:8f:2e:5b:6a:df:24:62:b4:54:d1:
40:24:56:2a:72:11:9f:be:71:9c:a3:2d:8a:a1:d3:e3:97:95:
b0:14:57:a7:76:f2:73:43:79:ef:c8:02:3f:de:44:74:3b:9b:
61:c5:36:2b:e7:58:1b:52:36:05:19:7e:97:17:fb:7a:21:73:
5c:3a:1a:3c:e8:ed:f1:c9:6b:0b:4e:c0:42:9f:47:31:bb:12:
cf:36:9e:63:9c:a2:f9:9c:24:c4:0e:bd:5f:93:a1:cc:c4:7d:
af:b8:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:38:07 2024 by rpki-client on console-ams.rpki-client.org