Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
File: AS63902.roa (raw, json)
Hash identifier: VAIJUCP35dRKxJcXzvvr6UYb1l0scWP/NSUWPtD1nM4=
Subject key identifier: 85:2B:C7:AE:D3:C4:72:6C:64:49:7D:AD:91:5D:10:C6:91:09:32:DB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 7689B8964FCB261CFD7B6B8262F9734A5FB5AA19
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
Signing time: Wed 20 Nov 2024 05:53:30 +0000
ROA not before: Wed 20 Nov 2024 05:48:30 +0000
ROA not after: Wed 19 Nov 2025 05:53:30 +0000
asID: 63902
IP address blocks: 141.11.80.0/23 maxlen: 24
141.11.142.0/23 maxlen: 24
141.11.183.0/24 maxlen: 24
141.11.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:89:b8:96:4f:cb:26:1c:fd:7b:6b:82:62:f9:73:4a:5f:b5:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Nov 20 05:48:30 2024 GMT
Not After : Nov 19 05:53:30 2025 GMT
Subject: CN=852BC7AED3C4726C64497DAD915D10C6910932DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:f4:5d:49:0d:c9:c2:e2:b0:95:04:b4:97:
2c:a0:a4:85:8d:54:a8:71:28:e1:a1:75:54:8a:b7:
2d:15:4a:33:40:88:7a:a4:62:0b:8b:4c:55:a0:59:
ba:e1:77:78:ce:2c:cd:2c:9a:58:c0:c3:3f:64:ec:
6b:ee:3b:75:0b:2f:cf:71:38:a3:06:7e:23:76:fb:
f0:91:e5:17:89:18:79:8c:e0:48:39:0f:cd:f2:46:
6c:05:68:4f:bb:db:f1:38:93:f0:12:dc:e6:a2:95:
9a:db:27:1b:1e:bf:95:bc:55:fb:0c:d2:26:0b:3a:
69:68:8a:c6:63:a0:71:c8:46:02:79:f3:e8:8a:8b:
28:c7:35:ec:a4:4d:40:d3:9e:46:be:82:67:fe:3b:
48:b8:09:53:8a:d9:bc:58:10:dc:8f:13:22:53:e8:
ef:75:6e:ac:11:79:0d:df:b5:2d:e6:c0:ef:1b:18:
d3:80:7a:c2:9d:0f:2d:be:7c:4d:40:3e:cd:70:dc:
5b:c4:c0:5b:5d:ed:2b:f5:51:66:04:95:a2:12:d1:
99:65:67:87:af:13:8d:77:8f:21:52:d4:61:14:b6:
9c:e6:c3:14:70:3c:38:c1:7b:e6:be:fd:f2:65:54:
21:fe:e7:52:6c:aa:c2:69:d9:7a:da:6b:3b:b3:e0:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:C7:AE:D3:C4:72:6C:64:49:7D:AD:91:5D:10:C6:91:09:32:DB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.80.0/23
141.11.142.0/23
141.11.183.0/24
141.11.220.0/23
Signature Algorithm: sha256WithRSAEncryption
38:cb:0e:8f:4b:36:6e:10:cc:2b:f4:55:85:9a:fe:32:6e:69:
68:dc:06:44:f5:fe:10:c4:22:98:59:51:7d:2a:6a:17:a6:55:
60:c6:bd:cb:f9:d0:7b:ca:e6:ae:c5:2f:4d:3d:bf:af:b2:56:
11:50:34:36:aa:bc:04:a5:d2:52:4d:06:14:28:bc:c4:48:9a:
73:82:67:95:65:26:24:85:24:49:9a:4e:f0:c5:39:9c:f8:19:
39:4c:a0:df:56:bc:26:62:9c:34:13:a7:f0:8f:39:e6:5c:6c:
ed:9d:ff:74:a1:b4:90:0c:44:1a:84:c3:40:da:cf:ac:4c:bb:
b8:ac:d6:dc:d0:22:fd:17:60:ef:af:1b:27:1d:12:e2:8f:9b:
c6:de:71:bf:b7:52:61:6f:cc:b9:41:77:b1:a6:f4:23:54:6b:
3c:64:2b:32:d6:66:c2:4b:ce:da:93:f3:be:d2:c5:d3:bb:46:
69:66:8c:3c:15:30:10:66:69:00:da:1d:dc:6b:41:a1:bd:1b:
87:88:6a:f3:60:43:5b:9b:00:50:2d:c0:a0:a4:88:74:48:ea:
7c:13:b1:13:81:d4:90:02:3d:3f:a4:0f:f4:12:f3:3b:ce:a8:
05:72:e1:e7:29:51:e4:5d:e9:8b:a7:fe:84:ef:92:e2:11:97:
51:f8:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:16 2024 by rpki-client on console-ams.rpki-client.org