Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: kzWAaz265oUgrXnqMSPuxIh3yS+KGt8EtdwdHohawIY=
Subject key identifier: B2:63:90:9B:56:F2:E6:63:E2:01:BF:08:16:44:7C:D7:74:7A:4F:DB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 6F52DF6A57C535EBAACBB58C4BF028ADBDB50CAD
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
Signing time: Thu 02 May 2024 00:00:14 +0000
ROA not before: Wed 01 May 2024 23:55:14 +0000
ROA not after: Thu 01 May 2025 00:00:14 +0000
asID: 64267
IP address blocks: 141.11.2.0/24 maxlen: 24
141.11.3.0/24 maxlen: 24
141.11.10.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.23.0/24 maxlen: 24
141.11.24.0/24 maxlen: 24
141.11.25.0/24 maxlen: 24
141.11.26.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
141.11.29.0/24 maxlen: 24
141.11.66.0/23 maxlen: 24
141.11.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:52:df:6a:57:c5:35:eb:aa:cb:b5:8c:4b:f0:28:ad:bd:b5:0c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: May 1 23:55:14 2024 GMT
Not After : May 1 00:00:14 2025 GMT
Subject: CN=B263909B56F2E663E201BF0816447CD7747A4FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:6b:2b:f3:1b:1e:fb:d2:6d:9e:e6:c6:97:
45:78:82:f3:a2:af:5a:5d:de:73:4b:5f:f5:b0:4b:
1e:61:25:5b:74:de:37:85:66:56:c0:02:60:1b:0d:
88:b6:62:78:94:7f:5a:52:4f:35:8d:52:32:47:c5:
89:93:f5:c2:51:01:4a:25:13:8e:fd:da:df:74:d4:
e6:2a:13:79:d2:2e:dc:92:96:bd:b9:3d:e0:36:e6:
a2:e4:e5:8b:a2:ce:69:bb:79:75:0d:83:09:b0:b9:
60:6d:04:62:86:25:f2:19:b7:49:df:9e:0c:ef:35:
01:bd:c8:3c:e4:59:16:3c:d8:59:5a:78:1b:c9:5f:
76:fc:f8:bc:df:1e:c1:57:86:d1:0c:17:c4:9d:1f:
5a:f7:a3:b9:80:4e:6c:10:61:d0:a8:ca:d2:8e:19:
6b:f7:58:64:31:13:6d:f0:cc:fe:50:7d:e1:ee:46:
d7:c1:a0:ba:f1:eb:3e:36:d4:4f:ff:f2:d4:dc:ce:
b6:b6:10:99:f0:d9:2f:b5:c2:c1:0c:a2:16:84:84:
6d:3c:05:de:3f:60:dc:69:e3:a7:df:a7:99:26:5b:
78:52:f0:49:3c:a8:f6:c4:5b:6a:e6:f4:6e:f2:5e:
80:2d:40:a8:73:33:c7:98:7b:2f:53:9c:a0:3f:fd:
4b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:90:9B:56:F2:E6:63:E2:01:BF:08:16:44:7C:D7:74:7A:4F:DB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/23
141.11.10.0/24
141.11.20.0/24
141.11.23.0-141.11.27.255
141.11.29.0/24
141.11.66.0/23
141.11.76.0/22
Signature Algorithm: sha256WithRSAEncryption
97:87:a3:74:ed:20:3c:c6:e1:d6:fc:35:94:22:db:76:6d:87:
4e:b1:23:63:42:25:42:f5:e1:c7:4c:d7:a6:84:97:fb:9f:9f:
f7:6c:a6:fd:5e:76:1a:ca:ef:f0:be:c1:2b:1c:4e:72:f1:2b:
18:21:37:d2:11:c8:00:a7:5c:0c:53:bc:d3:17:bc:f5:c5:bd:
33:16:bb:3d:88:79:00:27:78:a2:fe:ea:e7:b3:9c:2c:7e:d0:
bf:7c:d5:33:8f:ee:99:0b:af:44:f7:b4:76:a0:cc:a0:ca:ec:
bf:76:2f:2b:33:fe:f3:62:27:4a:04:a2:3a:9b:4a:ce:b7:62:
0b:27:bc:6e:ce:9d:36:4b:4d:8d:05:dd:75:60:b9:e7:f6:98:
1a:d2:d4:c5:3f:ac:9d:7a:20:9a:a9:2f:0d:c6:5a:eb:93:e2:
7a:86:70:b4:7d:3f:c1:43:67:c3:ab:31:8e:16:7f:e5:36:0c:
e0:cb:c7:6c:90:b1:96:e3:70:c2:33:07:64:63:4e:4f:8f:bf:
97:9b:b7:3f:1a:a6:8f:83:78:9f:5c:04:06:7a:81:f5:2a:17:
aa:db:53:00:77:ab:87:7e:45:80:36:21:51:a9:13:c3:af:de:
37:9d:81:b5:e4:67:25:81:79:ac:3a:29:f4:3c:e6:c9:b9:87:
fb:e6:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:38:07 2024 by rpki-client on console-ams.rpki-client.org