Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS24768.roa
File: AS24768.roa (raw, json)
Hash identifier: 6gQrkLkfOlA/w1sIxIzk7VL1igN4WjrQy9YNOiS5TYE=
Subject key identifier: 08:54:E5:FB:8D:4E:43:DA:66:80:E6:48:81:39:CE:D5:18:A2:99:B4
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 5CBE7BF763C1D09908763210DD1677415ED32B14
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS24768.roa
Signing time: Fri 26 Jan 2024 15:40:03 +0000
ROA not before: Fri 26 Jan 2024 15:35:03 +0000
ROA not after: Fri 24 Jan 2025 15:40:03 +0000
asID: 24768
IP address blocks: 141.11.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:be:7b:f7:63:c1:d0:99:08:76:32:10:dd:16:77:41:5e:d3:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 26 15:35:03 2024 GMT
Not After : Jan 24 15:40:03 2025 GMT
Subject: CN=0854E5FB8D4E43DA6680E6488139CED518A299B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:b2:12:d1:86:8c:9d:c5:11:8e:eb:d8:dc:
64:cc:82:83:0f:a9:67:c4:a9:ee:09:eb:11:a9:c6:
4f:55:49:61:15:23:08:b5:c0:1b:b0:e8:9d:b2:a1:
89:c3:43:b5:bb:4b:73:1e:c1:f3:27:b4:16:20:38:
cd:2d:d9:f3:d6:c6:85:bf:36:52:85:a5:7f:63:25:
03:85:e3:fd:03:55:4d:74:17:ee:90:12:5a:39:0b:
7d:bc:d0:f0:61:87:a7:18:f9:6b:be:62:49:82:b5:
d9:90:52:c3:61:d5:47:75:bd:31:f3:fc:45:ad:65:
57:ff:43:37:5c:80:85:64:a4:bc:7f:f4:36:9d:69:
61:5b:b8:94:c2:25:0c:00:2b:c5:26:ce:72:cd:20:
86:51:f1:e9:ec:29:46:1e:6a:30:8e:53:42:92:41:
24:15:54:c0:03:15:f8:2d:5f:3f:d7:8b:af:dc:37:
95:84:4b:52:02:62:c8:14:97:76:69:26:b7:04:36:
c9:3a:ba:b4:4b:ff:6f:2d:c0:1a:43:8c:fe:92:39:
ee:a7:df:cb:f9:6e:1f:ad:fd:60:66:3b:d0:67:67:
c5:63:d8:3b:e8:f3:69:8f:87:94:28:86:c1:ff:fc:
ef:35:8c:cb:3a:ee:59:26:d8:0c:5b:94:b6:fd:bb:
ab:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:54:E5:FB:8D:4E:43:DA:66:80:E6:48:81:39:CE:D5:18:A2:99:B4
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS24768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.240.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9d:78:a3:98:55:0f:c0:c4:01:f6:ff:65:0f:d7:70:72:bb:
01:87:8d:b5:88:08:2e:41:99:b4:6c:bd:51:f0:02:f7:d6:94:
b5:dd:a0:91:10:b0:60:89:b3:41:e8:f4:cf:7d:8d:fd:ae:b1:
1d:8e:50:25:fc:80:b0:3f:da:c1:7f:8a:62:d7:95:6a:e5:6f:
98:eb:48:aa:2f:75:81:01:ad:d5:b0:c9:ed:bb:32:9f:88:76:
12:d9:13:32:1e:91:db:55:9b:14:4d:6e:4a:b1:22:97:ff:3c:
16:2a:53:b0:e2:03:ae:02:6f:4a:52:23:4d:d3:d1:84:94:43:
70:b3:be:4e:8f:e4:c6:e0:af:e1:23:a3:fa:ae:4a:b3:2c:1c:
30:b2:90:91:fa:07:9f:09:c6:88:7e:93:0d:ab:b5:1d:01:91:
08:ff:eb:f3:6f:ed:38:6e:f5:82:c3:b8:20:79:21:36:42:a3:
2b:4f:f3:6b:5a:d0:6e:12:27:7d:fa:ac:f8:c2:58:05:de:99:
19:c2:39:e3:1b:03:47:dc:c5:46:57:e9:73:d9:e7:00:bd:b2:
8c:17:15:63:91:b8:c4:c2:ee:5a:58:b5:e2:bd:c8:78:a1:cc:
25:c6:bc:99:46:22:91:25:3f:4e:1f:8b:37:61:50:5a:3b:d8:
18:28:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:35 2024 by rpki-client on console-fra.rpki-client.org