Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
File: AS63902.roa (raw, json)
Hash identifier: hvKqE36Vr8c/55l8h9whv2+LtOYrGQZRZUryC55CE5s=
Subject key identifier: 61:1F:4E:25:7C:BE:4E:BA:7D:DC:DA:F3:53:EB:79:8A:18:E2:DE:82
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 634BC7B0C0334E98929D0925A0B7A5600F02B9C3
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
Signing time: Mon 18 Dec 2023 12:16:43 +0000
ROA not before: Mon 18 Dec 2023 12:11:43 +0000
ROA not after: Mon 16 Dec 2024 12:16:43 +0000
asID: 63902
IP address blocks: 141.11.80.0/23 maxlen: 24
141.11.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:4b:c7:b0:c0:33:4e:98:92:9d:09:25:a0:b7:a5:60:0f:02:b9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Dec 18 12:11:43 2023 GMT
Not After : Dec 16 12:16:43 2024 GMT
Subject: CN=611F4E257CBE4EBA7DDCDAF353EB798A18E2DE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:34:70:f2:9e:ba:6e:93:45:25:4e:84:69:
b6:08:83:66:c8:23:2d:aa:22:75:7d:75:f6:b8:f0:
a6:e2:0d:61:fc:be:77:92:d7:61:7b:99:30:91:26:
d8:fb:f7:14:59:c4:d0:b1:ad:9b:cd:86:b1:a4:6d:
bf:fc:de:94:e4:ab:4f:a2:3a:02:ee:f4:0d:b8:82:
cd:c3:3f:e3:30:31:62:aa:76:e7:e1:35:56:e2:ab:
13:1e:5e:ce:68:97:8b:fb:c4:d7:c8:0a:e6:f1:3e:
90:ac:27:6d:14:31:87:11:12:c6:23:af:2f:3a:13:
e0:c1:b8:c9:7d:e5:32:31:e1:2f:0b:4d:f5:1e:15:
04:3a:1e:1c:ff:fb:19:00:75:91:0d:ba:6d:82:54:
e8:f2:f2:11:b8:b1:11:df:97:18:1e:f9:ee:a2:07:
06:7d:83:69:d7:79:df:02:c2:90:a2:4c:ad:9c:1b:
9f:b7:a6:e6:0f:b9:7c:b1:1c:d4:a9:2e:0c:a0:4c:
2d:90:54:e6:70:a1:a7:71:3d:3a:84:0b:93:ca:29:
b7:d5:dc:9c:1f:39:16:22:a8:6a:c1:ae:2e:1a:8c:
a8:ed:7c:d9:47:dc:22:29:40:96:4c:5d:2c:ba:e4:
cf:4a:76:d2:27:d5:50:23:42:21:3a:c0:d5:b5:19:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1F:4E:25:7C:BE:4E:BA:7D:DC:DA:F3:53:EB:79:8A:18:E2:DE:82
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS63902.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.80.0/23
141.11.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:39:11:94:0d:71:a7:08:dd:ca:dd:8b:e5:32:01:23:67:af:
f2:9f:6a:4f:6d:14:f2:a1:4c:6d:0b:86:77:ba:e7:b1:fb:05:
5b:63:99:04:14:42:18:1b:fb:fd:bb:d5:74:00:e3:96:85:b8:
23:8a:9d:f6:f2:b3:78:b0:1f:cb:cc:e5:e2:8d:23:cd:18:3b:
70:12:3e:73:ee:b9:49:87:de:de:9d:5a:94:4a:37:e6:2a:36:
e7:2d:43:59:33:9b:01:d0:85:69:b3:da:c0:c8:98:71:03:aa:
b9:18:f5:0f:d2:dd:f0:4f:8a:6e:20:dc:bf:f6:75:ae:24:01:
9e:b3:f3:93:6c:9c:21:01:28:fd:0c:dc:65:1c:23:69:90:98:
52:d6:65:23:18:92:32:df:ae:1b:65:d9:ba:21:a0:9b:17:94:
de:98:a9:1c:7c:15:9b:df:b6:e7:a9:d3:d8:b3:d5:86:f0:cf:
04:3b:c9:9f:5b:8d:a1:db:d2:51:58:f4:d5:38:95:da:3e:b6:
f4:b6:ff:33:00:83:6e:b5:79:01:fb:62:65:82:68:25:a8:a5:
fa:9c:f7:8f:d6:ad:30:46:65:ee:cc:85:9e:20:45:5b:16:11:
92:72:b0:d1:05:2a:3b:6f:a1:6b:45:8b:64:e2:de:91:5d:57:
bf:ce:97:91
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUY0vHsMAzTpiSnQkloLelYA8CucMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yMzEyMTgxMjExNDNaFw0yNDEyMTYxMjE2NDNaMDMxMTAvBgNV
BAMTKDYxMUY0RTI1N0NCRTRFQkE3RERDREFGMzUzRUI3OThBMThFMkRFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRTzRw8p66bpNFJU6EabYIg2bI
Iy2qInV9dfa48KbiDWH8vneS12F7mTCRJtj79xRZxNCxrZvNhrGkbb/83pTkq0+i
OgLu9A24gs3DP+MwMWKqdufhNVbiqxMeXs5ol4v7xNfICubxPpCsJ20UMYcREsYj
ry86E+DBuMl95TIx4S8LTfUeFQQ6Hhz/+xkAdZENum2CVOjy8hG4sRHflxge+e6i
BwZ9g2nXed8CwpCiTK2cG5+3puYPuXyxHNSpLgygTC2QVOZwoadxPTqEC5PKKbfV
3JwfORYiqGrBri4ajKjtfNlH3CIpQJZMXSy65M9KdtIn1VAjQiE6wNW1GQo9AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUYR9OJXy+Trp93NrzU+t5ihji3oIwHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjM5MDIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAGNC1AD
BACNC7cwDQYJKoZIhvcNAQELBQADggEBAG45EZQNcacI3crdi+UyASNnr/Kfak9t
FPKhTG0Lhne657H7BVtjmQQUQhgb+/271XQA45aFuCOKnfbys3iwH8vM5eKNI80Y
O3ASPnPuuUmH3t6dWpRKN+YqNuctQ1kzmwHQhWmz2sDImHEDqrkY9Q/S3fBPim4g
3L/2da4kAZ6z85NsnCEBKP0M3GUcI2mQmFLWZSMYkjLfrhtl2bohoJsXlN6YqRx8
FZvftuep09iz1YbwzwQ7yZ9bjaHb0lFY9NU4ldo+tvS2/zMAg261eQH7YmWCaCWo
pfqc94/WrTBGZe7MhZ4gRVsWEZJysNEFKjtvoWtFi2Ti3pFdV7/Ol5E=
-----END CERTIFICATE-----
Generated at Sun May 5 14:38:07 2024 by rpki-client on console-ams.rpki-client.org