Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
File: AS53107.roa (raw, json)
Hash identifier: /RtgxIM/xulVTFifg5GNuC40nQKG4T2ptK5dhJgLRMw=
Subject key identifier: 10:9C:B5:11:A4:A7:37:E4:AB:5B:8F:95:1D:69:BB:2D:B4:DF:9B:55
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 66930ABCDA7528E284C0740E86D0D232F6EA71BE
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
Signing time: Mon 04 Mar 2024 21:41:06 +0000
ROA not before: Mon 04 Mar 2024 21:36:06 +0000
ROA not after: Mon 03 Mar 2025 21:41:06 +0000
asID: 53107
IP address blocks: 141.11.72.0/23 maxlen: 23
141.11.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:93:0a:bc:da:75:28:e2:84:c0:74:0e:86:d0:d2:32:f6:ea:71:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 4 21:36:06 2024 GMT
Not After : Mar 3 21:41:06 2025 GMT
Subject: CN=109CB511A4A737E4AB5B8F951D69BB2DB4DF9B55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:82:25:f4:70:d2:7e:f0:af:27:9e:e2:28:
4d:08:15:95:8d:3a:57:33:95:5b:9f:5d:01:cb:ce:
89:8c:15:24:6d:28:ba:42:eb:58:e4:0d:7a:91:8d:
2d:90:34:a3:86:ca:5e:19:ce:63:19:83:10:c0:70:
13:8d:d6:66:af:f8:5e:c6:5b:d9:b1:ff:58:56:cf:
e7:5f:1f:be:f9:b2:89:4e:e5:2c:df:c0:c0:ff:4b:
b6:da:75:d4:51:91:6c:1a:5b:83:0e:56:de:f8:15:
49:02:60:e7:ee:25:a8:79:4d:df:65:f9:dd:ea:a1:
e4:77:2e:11:5b:d6:2c:03:2d:50:76:9a:09:a1:14:
d7:77:24:fe:46:75:da:a8:12:1a:6c:7f:8f:3b:52:
ce:7a:c2:1f:f6:44:aa:7c:21:68:f2:68:94:a6:b0:
8c:6d:5d:20:e0:b2:63:db:c4:d1:33:fd:ff:62:6d:
f5:fd:c3:22:58:39:e9:c6:cb:d7:32:6d:09:db:14:
89:2a:44:af:ec:71:0f:eb:0d:8b:58:72:85:6d:e5:
6a:89:9d:b4:f3:29:91:ea:7a:10:c3:6d:cf:72:10:
f5:dd:a6:11:fe:b7:f9:01:c8:3e:5e:39:a7:95:24:
d3:98:01:73:04:fd:dc:a9:f6:a8:8c:0a:6b:e0:29:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:B5:11:A4:A7:37:E4:AB:5B:8F:95:1D:69:BB:2D:B4:DF:9B:55
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS53107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.72.0/23
141.11.128.0/23
Signature Algorithm: sha256WithRSAEncryption
42:fd:c7:31:6c:03:ee:ef:17:fa:aa:74:3a:dd:c2:9b:6a:24:
3a:fc:6c:40:ab:6a:df:9e:0b:46:1a:6f:34:e1:be:51:f1:fd:
2d:c0:29:87:2a:35:90:af:13:4f:06:d7:35:27:b7:54:3f:43:
c8:f4:66:4a:cf:4e:75:1a:6e:c7:04:ad:47:c4:63:1b:4a:2f:
5a:75:7e:ca:8c:c8:e3:6a:03:5f:45:d9:63:87:b9:34:9e:9f:
db:fa:3e:98:17:32:55:a2:74:83:b8:ee:43:45:37:c4:7a:e2:
c7:e7:9b:25:78:be:d4:21:1a:e0:29:25:e2:63:77:03:77:a0:
9d:0a:88:1e:73:75:49:5a:d0:4d:4d:0b:66:07:0e:f0:8a:7a:
8f:5a:43:a1:5d:2f:15:22:d9:29:dd:05:70:c6:93:a2:a5:cc:
58:f7:3b:91:d3:21:f6:93:d5:a8:6b:df:83:f2:e8:56:d6:87:
b1:87:a4:68:08:66:36:34:e1:6d:0c:01:12:c0:cc:14:a3:88:
67:d0:69:51:b5:5b:68:3a:92:a7:b4:59:7c:92:67:17:d1:fc:
84:00:ff:e7:e6:fe:77:62:b8:62:3e:f5:0a:5e:e9:cf:dd:b4:
be:b6:43:ee:be:79:83:be:f0:02:56:3c:cb:e1:d2:ba:7d:17:
ff:84:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:38:07 2024 by rpki-client on console-ams.rpki-client.org