Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: XGB6XqA8CjXtNNrUG0Lzqqaln1/f3dfTEt54BfMA1FU=
Subject key identifier: 1B:72:6A:85:C0:51:66:75:03:2C:E2:C5:F5:50:C1:FE:FD:4B:BF:7F
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 1A1F331379D1C5F983492BA1EC01C0D256AB1CD5
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209242.roa
Signing time: Mon 02 Sep 2024 04:29:30 +0000
ROA not before: Mon 02 Sep 2024 04:24:30 +0000
ROA not after: Mon 01 Sep 2025 04:29:30 +0000
asID: 209242
IP address blocks: 91.124.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:1f:33:13:79:d1:c5:f9:83:49:2b:a1:ec:01:c0:d2:56:ab:1c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Sep 2 04:24:30 2024 GMT
Not After : Sep 1 04:29:30 2025 GMT
Subject: CN=1B726A85C0516675032CE2C5F550C1FEFD4BBF7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:05:79:84:28:00:8c:76:2f:97:ae:01:f1:
ce:c8:b0:ca:d8:24:de:f2:01:25:72:e4:21:4a:cb:
43:bf:a7:dd:76:24:2b:a7:bf:c7:54:80:8d:45:e8:
6e:56:63:a2:35:79:81:b3:73:3d:ce:de:56:90:7f:
0c:86:5a:a8:95:43:20:eb:ba:12:36:15:2e:25:38:
ec:67:d8:31:53:36:cb:04:80:1c:ae:f9:8e:63:e1:
30:59:77:1a:26:42:64:98:5d:92:53:d2:09:b2:8b:
78:b7:9e:0d:05:02:6e:63:14:5c:80:ab:c4:f5:f7:
49:6f:df:7a:4d:38:d8:af:f4:14:45:e8:c7:3a:d3:
6f:63:a3:f0:35:58:9a:fe:79:5b:19:18:36:65:a8:
92:a3:a0:22:71:56:6c:1d:f4:b1:e1:42:7e:a5:be:
47:9b:f2:5c:c0:6a:82:85:3c:be:24:e2:57:8d:18:
fa:92:96:e0:c6:d4:72:a7:f0:c6:db:ad:51:4a:71:
bb:b4:d4:6e:d3:5e:9e:4e:11:51:79:ff:92:6e:8c:
0b:5f:f0:6c:30:c5:7e:f9:8e:cc:8e:14:a3:5c:d8:
de:69:6f:96:02:e2:8a:74:69:c9:ed:64:f2:50:57:
34:16:9f:52:29:2e:cb:ae:fd:cc:97:9f:11:73:bb:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:72:6A:85:C0:51:66:75:03:2C:E2:C5:F5:50:C1:FE:FD:4B:BF:7F
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.127.0/24
Signature Algorithm: sha256WithRSAEncryption
97:64:57:2e:78:29:fc:6c:65:51:97:55:9d:6e:a9:b1:08:be:
3c:65:0c:77:76:be:b3:a6:ac:30:42:8a:4e:e0:a5:89:77:6e:
1a:d5:36:ac:78:5b:52:bf:0b:b6:94:dc:5e:be:fe:76:62:fa:
ca:20:43:3b:a1:95:fc:29:c2:8b:75:57:cc:88:19:3f:a2:df:
ad:af:42:0d:d1:54:28:4e:29:a2:ee:df:30:33:c8:7f:15:f1:
63:57:41:b4:01:f4:79:5b:4c:12:5a:42:0f:11:80:63:72:f9:
ef:07:1f:5d:16:69:bb:d9:56:7b:6b:fc:dc:97:5f:52:38:f5:
10:fb:a8:9b:12:81:04:61:36:4b:91:38:31:fe:74:e9:bd:87:
15:f8:de:d9:16:d7:35:39:c2:fc:c1:b7:84:f2:07:ec:96:08:
7f:6e:9c:03:f4:ff:7c:f6:ab:e1:67:fa:8a:eb:b1:f0:44:a9:
ec:8a:92:45:da:67:ab:2e:ef:b6:fc:7a:c9:87:71:9b:cf:08:
2f:d5:bc:a9:d0:c8:cd:03:a1:7a:23:72:2b:8c:c9:30:d3:52:
81:1a:7c:91:fc:2f:19:c1:ea:25:3d:57:c9:e3:83:a3:26:12:
af:79:02:10:3c:b8:94:b2:c3:a1:93:58:17:8f:6f:c5:b6:54:
75:7e:50:12
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUGh8zE3nRxfmDSSuh7AHA0larHNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDA5MDIwNDI0MzBaFw0yNTA5MDEwNDI5MzBaMDMxMTAvBgNV
BAMTKDFCNzI2QTg1QzA1MTY2NzUwMzJDRTJDNUY1NTBDMUZFRkQ0QkJGN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71gV5hCgAjHYvl64B8c7IsMrY
JN7yASVy5CFKy0O/p912JCunv8dUgI1F6G5WY6I1eYGzcz3O3laQfwyGWqiVQyDr
uhI2FS4lOOxn2DFTNssEgByu+Y5j4TBZdxomQmSYXZJT0gmyi3i3ng0FAm5jFFyA
q8T190lv33pNONiv9BRF6Mc6029jo/A1WJr+eVsZGDZlqJKjoCJxVmwd9LHhQn6l
vkeb8lzAaoKFPL4k4leNGPqSluDG1HKn8MbbrVFKcbu01G7TXp5OEVF5/5JujAtf
8GwwxX75jsyOFKNc2N5pb5YC4op0acntZPJQVzQWn1IpLsuu/cyXnxFzuyOFAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUG3JqhcBRZnUDLOLF9VDB/v1Lv38wHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjA5MjQyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW3x/
MA0GCSqGSIb3DQEBCwUAA4IBAQCXZFcueCn8bGVRl1WdbqmxCL48ZQx3dr6zpqww
QopO4KWJd24a1TaseFtSvwu2lNxevv52YvrKIEM7oZX8KcKLdVfMiBk/ot+tr0IN
0VQoTimi7t8wM8h/FfFjV0G0AfR5W0wSWkIPEYBjcvnvBx9dFmm72VZ7a/zcl19S
OPUQ+6ibEoEEYTZLkTgx/nTpvYcV+N7ZFtc1OcL8wbeE8gfslgh/bpwD9P989qvh
Z/qK67HwRKnsipJF2merLu+2/HrJh3Gbzwgv1byp0MjNA6F6I3IrjMkw01KBGnyR
/C8ZweolPVfJ44OjJhKveQIQPLiUssOhk1gXj2/FtlR1flAS
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:00 2024 by rpki-client on console-ams.rpki-client.org