Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1299.roa
File: AS1299.roa (raw, json)
Hash identifier: KEQgGbd8tBWr6mdGsWh0nEQcb0xw78zaeQs7zMRtkTU=
Subject key identifier: 83:4E:E2:6D:EB:6C:C2:75:33:E3:91:E2:97:9A:D7:33:D9:BC:B0:B3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7D195873BCF1D38422F1D3C6FFB3DCB052DD23D2
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1299.roa
Signing time: Wed 13 Nov 2024 09:36:55 +0000
ROA not before: Wed 13 Nov 2024 09:31:55 +0000
ROA not after: Wed 12 Nov 2025 09:36:55 +0000
asID: 1299
IP address blocks: 92.112.248.0/24 maxlen: 24
92.112.249.0/24 maxlen: 24
92.112.250.0/24 maxlen: 24
92.112.251.0/24 maxlen: 24
92.112.252.0/24 maxlen: 24
92.112.253.0/24 maxlen: 24
92.112.254.0/24 maxlen: 24
92.112.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:19:58:73:bc:f1:d3:84:22:f1:d3:c6:ff:b3:dc:b0:52:dd:23:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 13 09:31:55 2024 GMT
Not After : Nov 12 09:36:55 2025 GMT
Subject: CN=834EE26DEB6CC27533E391E2979AD733D9BCB0B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:c6:b8:0c:ce:de:22:27:9f:73:49:10:43:
f7:46:23:a1:27:45:95:00:c2:96:72:1c:85:71:c5:
5a:69:44:cc:e1:a1:c3:e8:c0:9c:07:6d:75:ae:db:
91:8a:18:c0:24:b9:30:f6:4d:86:30:cf:b6:39:e2:
68:82:b3:94:88:aa:dc:bb:c0:a7:22:0c:e9:fe:71:
49:df:74:0b:c4:49:29:fe:6b:1f:13:78:00:01:41:
85:42:7a:5b:b4:87:b6:47:2e:a1:40:e2:4a:b2:7d:
a0:68:f6:d8:53:14:69:12:24:55:e7:a1:4c:ce:ab:
bd:2d:b0:3c:ec:d8:d0:d8:9c:f1:af:9b:cf:fa:06:
4b:0d:1d:e9:53:5b:f1:79:a1:50:66:7e:dd:47:6a:
ee:d9:69:a6:34:58:25:9c:9e:0f:1a:c8:cf:18:f6:
9d:d7:74:32:e9:27:ca:7e:20:99:7e:bf:9d:cf:7c:
40:18:bc:85:87:84:1f:71:7a:58:72:8f:37:51:9c:
35:88:50:a7:f6:c8:1b:c8:48:60:8e:87:64:ad:f0:
69:b5:e9:85:2c:ec:5a:ab:ea:3f:7f:cf:48:7a:8d:
57:d8:d4:a8:4c:19:07:62:98:42:ea:12:ae:23:64:
ef:14:66:20:df:fe:80:3c:a4:e1:fa:b6:57:01:34:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4E:E2:6D:EB:6C:C2:75:33:E3:91:E2:97:9A:D7:33:D9:BC:B0:B3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS1299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.248.0/21
Signature Algorithm: sha256WithRSAEncryption
65:57:d8:e1:4c:22:62:48:8e:4f:c3:91:ee:93:18:f5:8d:75:
4d:da:76:2c:02:fe:7a:11:70:5a:90:10:24:81:4b:f7:81:aa:
88:86:28:14:59:1e:df:e8:ba:6e:56:eb:0a:5e:10:b1:97:44:
e6:72:ff:ba:f7:ab:b5:66:8e:ca:7c:ad:bd:bf:51:10:81:4a:
c1:ff:37:b4:e6:0b:c4:ed:8d:e8:d1:bd:44:77:f0:9f:86:63:
9c:a2:1a:8e:e9:43:90:17:04:34:93:6c:ac:60:bc:67:63:61:
f0:b4:46:2a:2b:41:cc:7a:64:6d:4d:f4:36:ff:13:c2:03:2f:
fa:77:ab:ae:fe:73:12:3b:87:53:c4:7c:9b:b2:8e:e7:5b:aa:
fa:92:3f:c3:7f:1d:90:77:9e:70:8e:e1:ae:1e:25:01:54:86:
e7:b8:47:d2:43:58:62:a5:6a:15:c6:66:ea:8c:9e:e6:2c:0e:
90:dc:ac:ac:e6:11:73:e4:aa:9a:f7:b0:68:e8:01:3e:c3:51:
6d:82:2f:cc:b3:b8:7e:00:88:c0:2b:c3:00:14:a3:da:f3:de:
7d:bb:1b:2a:05:f5:99:86:f2:b3:2b:19:a8:49:96:14:ca:c5:
da:6d:be:17:3c:cf:b6:0f:be:00:1b:66:b6:71:0f:03:f7:ff:
d5:71:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:11 2025 by rpki-client