Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57935.roa
File: AS57935.roa (raw, json)
Hash identifier: 6ATfEqJOOL3/tvw04m7ZcD4Wqj/TzfbQcrkYkisxyMI=
Subject key identifier: 6F:27:DA:8E:2A:DC:20:60:31:A7:F6:23:98:AD:C3:0C:D0:B7:E5:73
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4E113D6B559D35D5BB87FFBC72B417DFC2111948
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57935.roa
Signing time: Fri 02 Feb 2024 13:17:51 +0000
ROA not before: Fri 02 Feb 2024 13:12:51 +0000
ROA not after: Fri 31 Jan 2025 13:17:51 +0000
asID: 57935
IP address blocks: 141.11.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:11:3d:6b:55:9d:35:d5:bb:87:ff:bc:72:b4:17:df:c2:11:19:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Feb 2 13:12:51 2024 GMT
Not After : Jan 31 13:17:51 2025 GMT
Subject: CN=6F27DA8E2ADC206031A7F62398ADC30CD0B7E573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:3e:5b:8b:82:4a:eb:5f:bd:45:b8:bb:41:
56:0b:e1:24:c3:50:06:0d:0e:8e:15:1e:d5:65:13:
e4:c9:4d:9c:6f:5b:d6:11:f1:7e:dc:6c:02:83:c1:
6a:db:f0:ce:16:60:d1:3c:7b:40:b4:b1:36:d4:bd:
68:a5:c1:ed:b6:51:ba:90:1a:9a:7b:84:7b:21:0d:
ea:8b:ac:48:77:b8:65:37:16:62:41:51:2e:d1:99:
4b:88:37:36:01:13:80:18:38:da:58:e0:e5:fb:c8:
69:85:f5:bd:0e:07:3f:cc:6b:ea:22:32:22:bb:c4:
2e:0e:a5:01:a6:41:ff:97:21:75:b2:b0:0e:66:d1:
b4:34:52:29:af:ce:fb:84:dc:8d:07:07:f8:a5:e5:
f6:61:1b:85:76:7b:e3:bc:4f:72:45:c9:1b:20:56:
be:8b:60:3b:a0:c3:67:01:37:a4:5a:a0:66:9d:a3:
29:41:73:da:b7:da:cd:35:c7:ba:e5:e4:b2:68:d1:
f7:c5:ac:0c:6c:fe:0a:2b:18:70:1e:bd:dd:36:9e:
ef:53:71:18:6e:32:6f:eb:57:78:55:5c:40:fd:67:
f7:ac:79:0a:6b:83:69:86:7a:7b:97:bb:04:52:e9:
bb:bf:c9:fc:ec:5c:b4:c7:f2:88:d4:b0:6b:85:01:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:DA:8E:2A:DC:20:60:31:A7:F6:23:98:AD:C3:0C:D0:B7:E5:73
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS57935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ca:2c:10:20:00:f1:17:82:fc:e1:a8:9c:0b:b5:f8:2e:af:
57:8e:64:31:b1:a1:84:72:3f:2f:ed:f3:00:96:aa:a8:1c:d1:
77:b8:05:78:fe:ac:cf:a9:38:a3:85:18:5c:bc:6b:aa:d0:ed:
09:22:73:28:f6:5c:20:49:e3:e2:ff:e1:56:5d:47:2d:0e:c4:
0a:e5:be:dd:e0:d8:52:f6:b9:76:1f:c2:0c:71:79:18:bc:e0:
bf:eb:01:9b:83:1d:31:67:7c:0b:58:b0:63:14:f9:fe:fa:fc:
9d:36:ed:da:af:30:8b:ea:97:00:0c:7d:f0:a8:41:55:28:25:
23:d4:a6:2c:b5:77:e3:d6:12:ce:7e:72:6c:9d:c6:f2:e9:15:
14:ef:7b:83:59:fc:d7:91:e6:c0:cc:0c:9c:04:a7:25:e0:49:
f6:7e:83:07:c9:da:69:80:a8:50:e5:dd:f8:d3:8e:95:55:14:
9e:0c:75:e5:b0:aa:b6:b0:1d:5e:a8:e4:11:23:e9:6f:16:4c:
a2:69:96:83:3d:cd:dc:e1:a3:0d:40:a0:41:57:63:ea:f8:96:
71:13:02:2e:39:aa:b0:b4:bb:db:61:72:4a:a3:d0:19:5d:76:
fd:15:fe:33:ac:b1:03:37:b9:97:cf:4b:90:3c:03:80:7a:3d:
2c:bf:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:51:35 2024 by rpki-client on console-fra.rpki-client.org