Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
File: AS46829.roa (raw, json)
Hash identifier: QK6mRLGdI9awFu4MrASnhvtidIr1M7wwN/Epd6abIX0=
Subject key identifier: 27:0C:9A:37:70:C6:CE:E1:9E:73:26:57:65:4C:67:FF:27:17:18:43
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 574CBDF524D8FC66C5CB62CE73C16F10EB861A19
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
Signing time: Mon 03 Jun 2024 05:32:58 +0000
ROA not before: Mon 03 Jun 2024 05:27:58 +0000
ROA not after: Mon 02 Jun 2025 05:32:58 +0000
asID: 46829
IP address blocks: 141.11.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:4c:bd:f5:24:d8:fc:66:c5:cb:62:ce:73:c1:6f:10:eb:86:1a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Jun 3 05:27:58 2024 GMT
Not After : Jun 2 05:32:58 2025 GMT
Subject: CN=270C9A3770C6CEE19E732657654C67FF27171843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:91:c6:cb:cf:63:27:b9:ea:ba:60:22:65:
22:ad:06:fd:8d:dd:1d:7e:b6:19:c5:bf:95:e2:5a:
91:5a:b2:8e:1e:7d:82:f6:e7:35:79:c2:ae:61:5e:
87:a4:88:f3:55:84:c2:53:6b:49:61:2b:49:21:b2:
48:5f:8e:75:0d:b1:15:6a:30:57:1c:dc:f9:c4:44:
07:f8:cb:9e:ca:71:b0:17:17:6e:a6:89:28:ee:9e:
cd:db:97:09:8f:3e:ac:85:59:24:85:01:56:39:59:
0d:ea:95:bc:88:59:f3:36:08:e1:1b:65:5e:44:88:
ba:0d:ab:89:8a:7d:3d:d7:a5:1e:2d:c7:59:31:50:
3b:2f:a3:6a:69:db:e5:2e:8e:a9:41:5e:37:06:ba:
41:06:ee:98:11:8b:8a:60:ce:74:16:94:71:7d:22:
22:39:c9:21:90:0b:e2:3d:32:44:c1:20:c2:b7:1e:
12:5f:b1:e1:86:3c:3b:b3:64:dc:22:bc:0d:a5:e0:
f5:4a:54:a5:be:1c:d5:44:05:24:c7:97:2b:c0:b9:
ba:83:eb:d0:ef:38:56:86:c1:d0:a6:f6:2e:b0:ab:
02:04:72:b0:e0:b9:cd:c1:00:76:f9:3d:6b:c6:2f:
35:9b:f7:fb:45:f1:ff:ea:f5:c9:d7:f5:cd:43:bc:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0C:9A:37:70:C6:CE:E1:9E:73:26:57:65:4C:67:FF:27:17:18:43
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS46829.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.50.0/23
Signature Algorithm: sha256WithRSAEncryption
38:54:f2:40:cc:f3:1d:1e:eb:6a:69:5c:62:91:a6:12:6a:a4:
ef:dd:af:4f:d1:97:b4:57:b5:24:40:68:cc:8f:fe:02:89:19:
d3:21:4f:e5:c5:74:59:aa:1c:f7:90:2e:6c:5c:73:50:93:4d:
ef:3e:7e:81:ae:62:83:61:30:b2:cf:62:15:f5:87:bb:e9:a6:
51:6d:ed:13:57:72:5e:d5:8e:eb:8d:53:91:8e:e5:6a:bb:84:
ef:b7:20:7e:0f:dc:4d:f4:ce:b3:09:3e:17:54:7f:b0:61:7a:
4f:b7:49:4e:d9:69:3d:4b:1f:4b:1b:59:21:16:1d:7e:bc:a7:
b8:99:f3:e7:d6:2a:11:9c:7d:8f:7a:2e:23:7e:1d:b8:8b:52:
82:d6:a6:75:ab:86:16:80:f3:5b:17:92:1a:f3:63:83:0d:fa:
44:4c:ee:41:fb:5a:17:82:19:70:58:a7:84:36:1b:13:61:40:
33:58:ff:68:0a:47:ff:44:eb:8b:8a:c5:47:f8:28:82:e8:6b:
a7:31:c5:2c:43:b5:d3:d9:aa:ff:9e:ba:c6:37:68:0c:44:b5:
3d:ef:08:bf:c0:b6:fb:2b:3a:c1:0e:d3:2b:8d:37:1d:d5:f6:
af:55:07:a3:8d:8f:51:06:a6:cc:ed:46:c2:f8:3e:f5:67:7b:
e3:27:c5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:40 2024 by rpki-client on console-ams.rpki-client.org