Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8100.roa
File: AS8100.roa (raw, json)
Hash identifier: 3RT7BtfYJA3UGKL8yz2CD3lyZR2Gw6uDWvKuCB1qO58=
Subject key identifier: 67:16:66:BB:32:71:FC:C8:E4:7B:01:86:DA:16:0E:5D:6E:DA:DF:E0
Certificate issuer: /CN=c2302af143c15daad50042d8455e689d0828eca9
Certificate serial: 525919C374C3FBE384A410963213DD70DE7F1F7D
Authority key identifier: C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8100.roa
Signing time: Thu 14 Mar 2024 04:13:48 +0000
ROA not before: Thu 14 Mar 2024 04:08:48 +0000
ROA not after: Thu 13 Mar 2025 04:13:48 +0000
asID: 8100
IP address blocks: 141.11.16.0/24 maxlen: 24
141.11.92.0/23 maxlen: 23
141.11.94.0/23 maxlen: 24
141.11.136.0/23 maxlen: 24
141.11.208.0/23 maxlen: 24
141.11.210.0/23 maxlen: 24
141.11.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Apr 2024 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:59:19:c3:74:c3:fb:e3:84:a4:10:96:32:13:dd:70:de:7f:1f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2302af143c15daad50042d8455e689d0828eca9
Validity
Not Before: Mar 14 04:08:48 2024 GMT
Not After : Mar 13 04:13:48 2025 GMT
Subject: CN=671666BB3271FCC8E47B0186DA160E5D6EDADFE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:16:8e:63:23:cc:17:ed:82:f2:e0:27:da:
52:43:17:99:ab:dc:d7:86:af:39:9e:1d:a5:15:5c:
5e:e9:57:57:99:2d:f0:3c:e3:72:11:52:8e:a3:2f:
f5:96:78:27:ae:a2:05:18:54:18:9b:4b:84:5e:94:
31:4a:2d:5f:79:63:6e:e8:7a:09:45:28:89:43:7a:
c6:04:36:49:b4:58:21:a8:0d:ae:0d:32:c3:43:cd:
66:24:5b:60:b7:54:d8:b6:be:68:a7:de:4a:5e:87:
b8:60:03:43:2d:fa:e2:af:84:6a:5f:a5:74:cc:38:
2a:ac:9f:52:82:b0:15:b9:68:44:2b:49:e4:7e:ba:
bd:18:5e:64:a4:f9:82:61:ce:ac:af:e4:03:95:58:
8e:9a:93:b3:89:26:eb:6c:3b:f1:db:c6:a1:23:8e:
80:58:a7:42:ec:e7:83:fc:d4:b4:72:ac:05:36:2f:
0c:13:92:e9:eb:db:72:af:65:d8:66:0b:99:e4:17:
d3:a3:50:59:e2:a1:6c:5f:26:47:f0:c8:ca:09:23:
a2:9e:f4:99:21:b5:81:f8:b2:ce:a2:6b:e1:f5:f6:
9d:f7:d5:27:28:6a:f9:3b:c8:4a:f1:c2:0d:0a:d3:
15:29:12:e7:51:a6:93:44:19:29:94:e4:1f:71:c0:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:66:BB:32:71:FC:C8:E4:7B:01:86:DA:16:0E:5D:6E:DA:DF:E0
X509v3 Authority Key Identifier:
keyid:C2:30:2A:F1:43:C1:5D:AA:D5:00:42:D8:45:5E:68:9D:08:28:EC:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/C2302AF143C15DAAD50042D8455E689D0828ECA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjAq8UPBXarVAELYRV5onQgo7Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a93cb55c-9571-44c8-90e1-965b92769e4e/0/AS8100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.16.0/24
141.11.92.0/22
141.11.136.0/23
141.11.208.0/22
141.11.251.0/24
Signature Algorithm: sha256WithRSAEncryption
74:db:c8:ce:c4:af:0d:d2:d5:59:df:ff:e4:da:10:25:63:bf:
f2:96:be:9c:b7:49:43:c1:ac:75:43:d4:6d:2a:08:02:4c:1a:
92:c6:01:37:82:e5:8b:90:56:a8:82:a5:b7:06:53:58:5a:a6:
29:6e:3a:a1:60:2f:9c:38:73:28:13:d6:1d:35:f0:7b:65:e7:
45:dc:ca:94:6d:63:b4:29:57:44:90:52:db:b1:de:22:47:49:
9b:9b:d2:4c:c1:7d:cc:90:be:1a:91:0f:e4:89:05:d9:a8:25:
2c:19:5b:6d:b7:d7:f2:e2:96:01:29:4f:5e:c4:72:24:ac:e9:
b3:17:b7:9a:9d:ec:b0:ba:e2:d1:55:ab:fe:3b:02:83:b6:2e:
72:e6:34:5e:8e:b4:be:b8:d3:51:cf:d7:52:0f:b1:8d:1f:d9:
af:19:4a:eb:22:2a:63:df:e0:bb:a1:55:b4:2c:d7:0f:cd:8f:
24:1a:1f:e8:d2:44:e8:fc:1b:e5:a0:de:26:68:cb:27:e8:5f:
ba:9a:12:2d:bc:4c:11:35:a9:00:f9:9b:fa:78:aa:aa:01:4e:
f5:af:b6:ab:d7:ef:b3:a8:24:c1:d0:07:d3:39:1b:69:31:be:
c3:b1:9b:88:cd:27:69:ba:00:b9:ff:d0:30:da:a9:d8:64:0a:
a7:7d:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:00:13 2024 by rpki-client on console-fra.rpki-client.org