Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: 4wh/xvZOP/vR2Tgq6lzxfpy7QQbOGCaa3uI86HDBUh8=
Subject key identifier: 1F:59:B4:05:78:46:8C:95:8D:0B:BD:45:9B:F8:60:A2:17:CC:7A:BB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4319DAB5C65B664919C480B4B9C49B870C7AFAFD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS398465.roa
Signing time: Fri 15 Nov 2024 05:43:12 +0000
ROA not before: Fri 15 Nov 2024 05:38:12 +0000
ROA not after: Fri 14 Nov 2025 05:43:12 +0000
asID: 398465
IP address blocks: 141.11.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:19:da:b5:c6:5b:66:49:19:c4:80:b4:b9:c4:9b:87:0c:7a:fa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 15 05:38:12 2024 GMT
Not After : Nov 14 05:43:12 2025 GMT
Subject: CN=1F59B40578468C958D0BBD459BF860A217CC7ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:b6:b6:a1:c5:3c:0f:fb:17:8d:a5:7d:fe:
fd:e8:b2:bd:d7:9a:55:d2:d0:19:e0:0c:ca:98:e4:
7f:3d:eb:c1:7c:ee:75:1d:fb:54:56:a7:5d:71:da:
f7:3b:69:77:8d:ca:c4:eb:a4:8f:94:91:45:31:99:
b5:93:b9:96:06:bc:5e:f0:76:7f:bc:e6:20:b3:b7:
eb:19:a3:9f:0f:b8:cd:30:f1:70:6e:08:53:42:92:
56:a6:70:fc:ac:3b:40:5c:39:aa:bf:5c:ea:b5:28:
6d:f5:33:e8:f1:51:20:d3:4a:46:35:cd:81:df:b6:
f1:c8:38:73:85:6d:21:3c:2e:bc:3d:3d:1f:2e:0a:
df:5a:38:9b:6a:e7:3d:ee:b9:b7:84:59:7c:0d:cd:
a1:a6:c9:41:2a:37:ec:c0:a9:fd:e4:ba:e9:fa:f6:
5d:b6:8d:e8:2f:d4:1b:c6:0a:22:cb:f8:16:5d:5a:
e0:f6:44:de:3b:64:36:30:01:44:8d:31:0d:f7:4a:
c5:42:20:24:0a:0a:86:ab:85:34:52:6e:33:fb:b7:
9c:85:f0:c1:dd:ba:7e:ac:dc:13:86:39:23:c0:fe:
b0:c4:a4:1f:20:25:e5:4a:9a:70:34:75:e0:13:27:
d1:3b:a3:31:7c:01:40:49:c9:39:f1:d8:45:73:37:
dd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:B4:05:78:46:8C:95:8D:0B:BD:45:9B:F8:60:A2:17:CC:7A:BB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:d0:04:5b:89:fb:45:c0:18:59:d7:16:72:3e:2f:48:76:7d:
6e:be:9c:26:e1:10:37:06:05:2c:9c:31:8b:34:bf:81:c3:dd:
67:0b:24:4e:8b:72:30:15:10:ac:be:82:ba:e6:b3:17:e7:12:
49:68:81:35:37:d5:06:65:dc:16:11:59:fd:09:fc:44:2a:e1:
c7:24:83:0a:f4:06:7e:8c:07:7d:30:a3:3d:ab:05:6f:23:64:
7a:dc:54:19:ce:54:72:a3:d9:8c:bc:44:78:6f:e0:93:68:9b:
91:ed:46:60:e7:fd:09:3e:b9:32:dc:e8:39:cd:a5:5a:57:be:
f6:8f:25:3c:86:df:ee:b5:26:36:fc:22:ae:c8:63:cd:05:48:
41:25:ee:00:f1:ea:d2:ef:43:77:73:be:17:4f:6a:3b:96:ef:
de:ab:2c:6f:d7:97:1f:a2:3d:e9:71:a3:db:ca:2e:d3:6b:83:
a5:70:99:59:83:e6:f5:59:6a:34:b4:7e:73:d7:50:8b:65:00:
f2:f4:aa:3a:2d:92:be:3b:2c:bc:76:db:d3:2d:61:da:c9:ce:
bd:c9:53:81:d0:b8:0d:d5:e6:66:d9:64:a2:51:b4:b1:df:57:
6f:57:5f:a5:e2:7b:6e:5f:e9:21:1e:9e:ef:92:64:59:97:57:
10:13:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-fra.rpki-client.org