Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
File: AS64267.roa (raw, json)
Hash identifier: 68IEqisIObr9C/cfGYcJKMsodBsOaYV6OTlaUPjiBec=
Subject key identifier: 50:16:83:3A:4C:73:85:02:AC:6E:7D:03:0A:62:C9:4C:EA:00:30:AB
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 4FE30E9B4BFA1171D6577026CFE4647695E96935
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
Signing time: Thu 26 Sep 2024 00:00:34 +0000
ROA not before: Wed 25 Sep 2024 23:55:34 +0000
ROA not after: Thu 25 Sep 2025 00:00:34 +0000
asID: 64267
IP address blocks: 141.11.2.0/24 maxlen: 24
141.11.3.0/24 maxlen: 24
141.11.20.0/24 maxlen: 24
141.11.23.0/24 maxlen: 24
141.11.27.0/24 maxlen: 24
141.11.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e3:0e:9b:4b:fa:11:71:d6:57:70:26:cf:e4:64:76:95:e9:69:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Sep 25 23:55:34 2024 GMT
Not After : Sep 25 00:00:34 2025 GMT
Subject: CN=5016833A4C738502AC6E7D030A62C94CEA0030AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:f9:b1:cf:1a:3f:19:f3:da:65:31:76:ce:
23:9b:79:09:e2:62:10:e9:35:0e:c2:af:cb:b9:9d:
07:60:98:18:26:0c:c1:49:6f:6b:1c:bb:dd:cf:21:
37:7c:bf:2b:39:a7:9e:7c:11:3d:da:c0:60:7f:44:
7f:e9:b4:de:7f:e9:e9:47:7b:c9:5e:7b:da:0c:a7:
f4:c2:7a:f4:92:a7:79:6b:d9:e4:e3:43:59:47:72:
fc:4b:de:78:6e:2c:b6:53:c9:d0:17:40:d0:3d:af:
e5:5c:c3:2c:31:51:88:f7:b3:26:1b:fc:17:32:0e:
79:52:07:68:34:aa:32:b7:eb:e5:85:9f:1b:07:c4:
ac:15:90:48:3b:ad:5f:ca:b5:ee:5f:ff:b8:8b:0e:
e6:b7:2b:a2:f1:5d:2e:b0:ee:d5:e5:b0:ed:05:9f:
77:a7:f1:41:0e:08:5c:0d:19:ae:48:92:e1:3b:b2:
12:a5:ba:2b:c1:f5:4e:70:49:53:79:7a:b1:8b:94:
7e:04:49:f9:a8:c8:9f:60:14:3e:eb:55:2f:3b:c1:
11:06:b2:93:12:42:7f:9e:75:fd:4e:d9:73:0a:9e:
5e:82:14:3e:ff:ef:2f:94:a5:81:8d:73:4e:4b:e5:
66:3e:4e:42:6d:45:15:17:08:cc:16:e5:13:19:b5:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:16:83:3A:4C:73:85:02:AC:6E:7D:03:0A:62:C9:4C:EA:00:30:AB
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS64267.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.2.0/23
141.11.20.0/24
141.11.23.0/24
141.11.27.0/24
141.11.66.0/23
Signature Algorithm: sha256WithRSAEncryption
78:77:5d:9d:57:21:fc:80:4a:22:7e:66:60:58:1d:7a:e2:be:
ff:50:df:1d:16:a7:31:b9:b7:d1:df:11:06:ce:5b:36:3c:2e:
34:67:2f:38:b9:ba:b5:58:05:4d:5b:be:cd:7f:7c:9e:0d:d4:
c8:ef:51:de:1c:8f:b6:be:b2:37:73:eb:82:7c:52:85:c4:c2:
68:73:69:d6:02:cc:52:31:6c:62:b1:f0:30:0e:4d:9c:6a:a1:
00:b0:02:b5:52:f3:99:3b:15:99:0e:39:a7:c3:e3:73:7e:a2:
46:19:2f:fe:88:c4:62:4c:fd:14:5d:eb:68:48:2e:74:ab:d3:
47:fe:56:ac:a7:ec:61:d5:e1:d1:86:2b:1d:4a:9c:8e:be:2f:
22:d4:d7:b5:99:45:26:02:b4:78:d5:4e:57:fe:51:44:d7:7f:
bc:3f:73:b1:d9:58:c7:05:0c:c4:69:d4:62:98:11:7f:1d:47:
b5:1d:8a:ac:69:b0:08:69:60:10:52:56:d8:fe:f9:0f:17:23:
55:81:af:95:37:fa:fd:ad:b6:06:84:73:74:8c:df:8a:2e:53:
cd:4a:a4:44:f2:12:c6:b3:d9:c7:24:b2:05:39:a6:f5:37:33:
92:15:e7:53:3a:bb:ac:b0:2b:24:f7:23:11:39:f7:ab:8c:f7:
82:71:ba:59
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUT+MOm0v6EXHWV3Amz+RkdpXpaTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzMDJhZjE0M2MxNWRhYWQ1MDA0MmQ4NDU1ZTY4OWQw
ODI4ZWNhOTAeFw0yNDA5MjUyMzU1MzRaFw0yNTA5MjUwMDAwMzRaMDMxMTAvBgNV
BAMTKDUwMTY4MzNBNEM3Mzg1MDJBQzZFN0QwMzBBNjJDOTRDRUEwMDMwQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnfmxzxo/GfPaZTF2ziObeQni
YhDpNQ7Cr8u5nQdgmBgmDMFJb2scu93PITd8vys5p558ET3awGB/RH/ptN5/6elH
e8lee9oMp/TCevSSp3lr2eTjQ1lHcvxL3nhuLLZTydAXQNA9r+VcwywxUYj3syYb
/BcyDnlSB2g0qjK36+WFnxsHxKwVkEg7rV/Kte5f/7iLDua3K6LxXS6w7tXlsO0F
n3en8UEOCFwNGa5IkuE7shKluivB9U5wSVN5erGLlH4ESfmoyJ9gFD7rVS87wREG
spMSQn+edf1O2XMKnl6CFD7/7y+UpYGNc05L5WY+TkJtRRUXCMwW5RMZtdmDAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUUBaDOkxzhQKsbn0DCmLJTOoAMKswHwYDVR0j
BBgwFoAUwjAq8UPBXarVAELYRV5onQgo7KkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYTkzY2I1NWMtOTU3MS00NGM4LTkwZTEtOTY1YjkyNzY5
ZTRlLzAvQzIzMDJBRjE0M0MxNURBQUQ1MDA0MkQ4NDU1RTY4OUQwODI4RUNBOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dqQXE4VVBCWGFyVkFFTFlSVjVvblFn
bzdLay5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E5M2NiNTVjLTk1NzEt
NDRjOC05MGUxLTk2NWI5Mjc2OWU0ZS8wL0FTNjQyNjcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNwYIKwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAGNCwID
BACNCxQDBACNCxcDBACNCxsDBAGNC0IwDQYJKoZIhvcNAQELBQADggEBAHh3XZ1X
IfyASiJ+ZmBYHXrivv9Q3x0WpzG5t9HfEQbOWzY8LjRnLzi5urVYBU1bvs1/fJ4N
1MjvUd4cj7a+sjdz64J8UoXEwmhzadYCzFIxbGKx8DAOTZxqoQCwArVS85k7FZkO
OafD43N+okYZL/6IxGJM/RRd62hILnSr00f+Vqyn7GHV4dGGKx1KnI6+LyLU17WZ
RSYCtHjVTlf+UUTXf7w/c7HZWMcFDMRp1GKYEX8dR7UdiqxpsAhpYBBSVtj++Q8X
I1WBr5U3+v2ttgaEc3SM34ouU81KpETyEsaz2ccksgU5pvU3M5IV51M6u6ywKyT3
IxE596uM94Jxulk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-fra.rpki-client.org