Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
File: AS29802.roa (raw, json)
Hash identifier: Lu/eKdJ3QvYWdVnQJgjLoBWOn/G62WGzp9IF4WqO69M=
Subject key identifier: 56:16:F2:98:1A:3E:27:C8:B3:13:9B:35:22:C0:5C:1C:A9:A0:15:DD
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 72FA8DA8C8602BF06B094617A5E4310CC8407EE0
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
Signing time: Sat 04 Jan 2025 00:01:55 +0000
ROA not before: Fri 03 Jan 2025 23:56:55 +0000
ROA not after: Sat 03 Jan 2026 00:01:55 +0000
asID: 29802
IP address blocks: 141.11.35.0/24 maxlen: 24
141.11.38.0/24 maxlen: 24
141.11.115.0/24 maxlen: 24
141.11.204.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:fa:8d:a8:c8:60:2b:f0:6b:09:46:17:a5:e4:31:0c:c8:40:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jan 3 23:56:55 2025 GMT
Not After : Jan 3 00:01:55 2026 GMT
Subject: CN=5616F2981A3E27C8B3139B3522C05C1CA9A015DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:ab:60:87:34:27:5a:bf:03:ee:48:7a:83:
32:5a:4e:b7:13:07:db:cd:93:91:d7:05:4d:7f:14:
dc:3a:6b:bc:d4:98:a8:6d:65:4e:53:14:13:89:40:
6a:c7:d4:01:a3:04:03:6a:a2:74:84:18:cf:31:ee:
3b:95:26:01:71:92:c7:a1:c0:c9:b3:87:25:47:9f:
25:0e:33:06:4c:c3:41:e8:ba:24:98:ad:29:6b:87:
cc:f8:31:de:6a:9e:a4:fb:aa:da:44:6a:06:7f:62:
47:98:ec:53:be:b0:a6:11:7d:3d:ac:09:e6:95:b2:
1e:28:7a:d3:72:da:43:43:8b:cf:b9:a1:25:c0:95:
d6:6a:a6:69:bf:df:3a:27:c3:81:08:92:e9:d2:2e:
76:3d:fa:2c:93:a4:61:09:83:e7:8b:fb:3b:d5:07:
a4:56:a6:4f:20:cb:e8:c3:c5:3f:13:98:26:d2:c6:
97:a5:10:db:b3:1e:ff:da:c8:3e:c6:ea:c2:71:98:
d5:42:0e:52:cf:93:a2:e1:64:df:72:2b:f3:09:a1:
55:3c:3a:fd:9a:b1:eb:fd:33:bc:b3:7c:2e:75:23:
cf:e6:69:7c:fa:04:b5:9d:ff:af:24:74:c0:cb:98:
12:36:f7:78:c3:af:f7:9b:19:02:bc:24:31:6f:1f:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:16:F2:98:1A:3E:27:C8:B3:13:9B:35:22:C0:5C:1C:A9:A0:15:DD
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS29802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.35.0/24
141.11.38.0/24
141.11.115.0/24
141.11.204.0/23
Signature Algorithm: sha256WithRSAEncryption
ca:cf:76:18:da:5b:25:7c:34:31:57:40:cf:75:2c:d0:47:be:
b8:c3:71:34:f6:f4:86:94:24:a1:f0:5f:8a:a7:71:81:67:bf:
fb:6a:2e:15:33:f1:2e:ac:79:b1:f4:19:f8:c1:d1:69:46:c4:
b3:25:e0:0b:ab:ff:8d:9d:8c:23:1b:f3:f4:4b:8b:fb:7c:e0:
25:9e:18:75:00:cf:f2:18:b4:88:30:36:77:d6:f7:22:91:55:
95:e2:eb:9d:75:58:80:93:e8:b5:35:97:63:43:ae:80:ca:71:
61:07:dd:5d:b3:38:c7:ef:4a:5c:2a:c8:0e:db:37:33:99:58:
f3:e9:1a:3e:a6:9f:cd:22:94:7a:f6:33:85:9e:3c:ec:16:af:
80:5b:a1:f2:6f:26:f8:1e:04:92:0c:26:29:49:9e:1c:e4:8d:
9f:60:74:3e:17:54:42:c3:e1:61:01:5c:10:b0:93:3c:df:ca:
e6:56:50:b4:e2:32:26:0c:67:74:24:b7:3a:be:2e:fc:2f:c3:
ac:27:d6:ae:35:83:16:b9:97:a7:e7:7e:71:e4:47:0b:5a:71:
8f:9b:b0:28:93:48:46:82:36:2e:be:9f:d3:06:e2:d8:db:ab:
74:b0:57:fc:fd:ec:68:ac:1d:19:f1:95:df:9f:62:98:b3:d0:
3e:ad:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:53 2025 by rpki-client