Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
File: AS212238.roa (raw, json)
Hash identifier: zfD1VEpUsA3nEV1hRGENtT3WUYr/Lk016CNd3vLvswU=
Subject key identifier: 76:26:45:9D:D3:4A:2C:9C:99:D8:F6:33:98:01:DF:C7:ED:49:A1:85
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0C0B869FF2D02035D1534ECE3E4BB2642B52C106
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
Signing time: Mon 18 Nov 2024 09:39:56 +0000
ROA not before: Mon 18 Nov 2024 09:34:56 +0000
ROA not after: Mon 17 Nov 2025 09:39:56 +0000
asID: 212238
IP address blocks: 46.202.249.0/24 maxlen: 24
46.202.250.0/24 maxlen: 24
46.203.0.0/24 maxlen: 24
46.203.7.0/24 maxlen: 24
46.203.34.0/24 maxlen: 24
46.203.40.0/24 maxlen: 24
46.203.73.0/24 maxlen: 24
46.203.79.0/24 maxlen: 24
46.203.103.0/24 maxlen: 24
46.203.115.0/24 maxlen: 24
46.203.147.0/24 maxlen: 24
46.203.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:0b:86:9f:f2:d0:20:35:d1:53:4e:ce:3e:4b:b2:64:2b:52:c1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 18 09:34:56 2024 GMT
Not After : Nov 17 09:39:56 2025 GMT
Subject: CN=7626459DD34A2C9C99D8F6339801DFC7ED49A185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:ca:39:6d:fa:dc:81:3c:4e:9d:fa:97:73:
de:11:a1:36:2e:96:13:a4:d3:7e:fd:9a:6a:ab:db:
f9:23:fc:4f:81:37:9a:e8:12:2f:88:1d:e1:0a:e7:
3f:f5:4c:e6:06:6f:fc:e4:a6:45:da:61:e4:8b:f8:
aa:aa:bd:36:fb:c0:d2:f3:66:71:3c:d3:6b:dc:a9:
b6:07:28:cd:d6:3a:d9:cb:46:dc:00:05:00:0f:79:
f2:8b:17:fd:36:b6:c5:e2:43:0e:6f:e6:79:23:fc:
ee:1c:cb:a0:e3:ba:bd:5e:d6:d2:e3:95:88:24:8f:
4a:8d:f1:d9:19:d1:c8:04:81:f2:f1:1c:e0:53:28:
36:c6:27:88:b2:51:9f:a7:d0:1a:1b:0b:da:8b:79:
21:48:60:92:44:eb:61:5c:a0:43:46:4e:49:a1:0b:
c7:d1:c5:7c:89:81:11:65:5e:30:bb:a8:b1:08:b9:
b3:3a:17:bc:37:0b:e6:33:b0:09:d7:16:cf:d6:da:
91:45:7b:bd:d2:39:b2:67:45:63:a1:e9:ac:8d:dd:
4e:cb:b2:d1:8f:d8:b1:51:fb:a5:0b:c8:90:ed:ab:
48:2c:3b:57:e9:dc:cd:aa:07:ab:f8:c0:67:26:cc:
dc:42:d2:a4:f8:2a:53:4d:2d:ef:2a:09:c6:f6:9a:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:45:9D:D3:4A:2C:9C:99:D8:F6:33:98:01:DF:C7:ED:49:A1:85
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS212238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.249.0-46.202.250.255
46.203.0.0/24
46.203.7.0/24
46.203.34.0/24
46.203.40.0/24
46.203.73.0/24
46.203.79.0/24
46.203.103.0/24
46.203.115.0/24
46.203.147.0/24
46.203.195.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:03:0f:81:f9:51:4e:a6:70:c7:d3:59:46:f6:4f:12:fb:7e:
dd:9c:ce:5d:10:2b:87:a5:44:97:b8:5c:7a:f8:c0:d5:a9:ca:
61:65:c9:c0:cc:a1:06:62:66:c6:a1:9f:30:39:fb:3f:79:0d:
df:54:27:36:13:d4:c0:44:f4:a9:14:e4:d4:7d:cf:5e:ad:29:
88:57:8d:09:34:4f:b5:84:da:96:81:4a:5d:78:1f:0c:f8:0d:
66:5a:9c:cc:fd:e3:e1:c0:1d:2e:04:f4:8f:fd:b5:c6:a7:83:
d1:18:29:0d:8c:d8:57:4d:8e:63:10:23:97:34:09:39:7d:5e:
11:6e:0f:b4:46:5a:7e:9a:b4:3b:5d:59:e0:2b:6d:fe:e9:53:
0e:c8:6d:b3:cb:55:6d:8b:93:52:22:f7:30:66:4f:37:dd:67:
bd:82:4a:56:aa:6d:a5:44:64:4a:3f:f4:0f:d2:54:fe:85:a2:
b7:58:f9:35:6a:6d:2f:fe:7c:e7:b9:a6:37:c0:68:40:bc:84:
31:44:75:af:96:46:16:44:61:27:46:e9:a4:54:59:1a:ac:76:
50:3d:d8:4e:2d:1b:a3:26:bc:83:07:e3:6a:6e:33:4b:7b:06:
8e:06:27:69:92:c5:b7:9f:01:99:6d:6a:ff:11:12:fa:8a:2c:
0f:b8:8f:1d
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUDAuGn/LQIDXRU07OPkuyZCtSwQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDExMTgwOTM0NTZaFw0yNTExMTcwOTM5NTZaMDMxMTAvBgNV
BAMTKDc2MjY0NTlERDM0QTJDOUM5OUQ4RjYzMzk4MDFERkM3RUQ0OUExODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3g8o5bfrcgTxOnfqXc94RoTYu
lhOk0379mmqr2/kj/E+BN5roEi+IHeEK5z/1TOYGb/zkpkXaYeSL+KqqvTb7wNLz
ZnE802vcqbYHKM3WOtnLRtwABQAPefKLF/02tsXiQw5v5nkj/O4cy6Djur1e1tLj
lYgkj0qN8dkZ0cgEgfLxHOBTKDbGJ4iyUZ+n0BobC9qLeSFIYJJE62FcoENGTkmh
C8fRxXyJgRFlXjC7qLEIubM6F7w3C+YzsAnXFs/W2pFFe73SObJnRWOh6ayN3U7L
stGP2LFR+6ULyJDtq0gsO1fp3M2qB6v4wGcmzNxC0qT4KlNNLe8qCcb2mqslAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUdiZFndNKLJyZ2PYzmAHfx+1JoYUwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjEyMjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBAAu
yvkDBAAuyvoDBAAuywADBAAuywcDBAAuyyIDBAAuyygDBAAuy0kDBAAuy08DBAAu
y2cDBAAuy3MDBAAuy5MDBAAuy8MwDQYJKoZIhvcNAQELBQADggEBAF8DD4H5UU6m
cMfTWUb2TxL7ft2czl0QK4elRJe4XHr4wNWpymFlycDMoQZiZsahnzA5+z95Dd9U
JzYT1MBE9KkU5NR9z16tKYhXjQk0T7WE2paBSl14Hwz4DWZanMz94+HAHS4E9I/9
tcang9EYKQ2M2FdNjmMQI5c0CTl9XhFuD7RGWn6atDtdWeArbf7pUw7IbbPLVW2L
k1Ii9zBmTzfdZ72CSlaqbaVEZEo/9A/SVP6FordY+TVqbS/+fOe5pjfAaEC8hDFE
da+WRhZEYSdG6aRUWRqsdlA92E4tG6MmvIMH42puM0t7Bo4GJ2mSxbefAZltav8R
EvqKLA+4jx0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:00 2024 by rpki-client on console-ams.rpki-client.org