Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213200.roa
File: AS213200.roa (raw, json)
Hash identifier: wZSsJF9jf+Q9mQFvdhKwrzcqVeS5XqYPFfWEh92ra5I=
Subject key identifier: A3:DD:31:A2:F5:04:98:AE:49:5D:D7:FF:EC:57:16:E1:39:9D:F0:1A
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 7F9F7595A4231ED6919ECB4C700D62F6560248FC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213200.roa
Signing time: Mon 26 Aug 2024 14:32:01 +0000
ROA not before: Mon 26 Aug 2024 14:27:01 +0000
ROA not after: Mon 25 Aug 2025 14:32:01 +0000
asID: 213200
IP address blocks: 91.124.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9f:75:95:a4:23:1e:d6:91:9e:cb:4c:70:0d:62:f6:56:02:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Aug 26 14:27:01 2024 GMT
Not After : Aug 25 14:32:01 2025 GMT
Subject: CN=A3DD31A2F50498AE495DD7FFEC5716E1399DF01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:32:de:f8:e2:ca:77:55:81:1c:02:6a:1e:
57:e6:9b:0d:dc:16:e0:a1:0e:a1:a2:77:76:53:d0:
7b:0d:74:e8:15:a5:e1:4c:0e:80:1d:e1:23:62:4e:
85:d2:c4:5f:57:d8:28:a8:83:c4:25:48:4c:56:ed:
66:5d:eb:75:38:7d:54:9e:58:6d:bb:9f:29:5e:5e:
89:19:9a:e2:be:f0:63:42:19:a1:38:18:27:71:9d:
99:25:e5:ee:e8:8b:54:60:dd:a6:89:b4:49:82:e8:
3a:d6:b6:fe:9f:c2:1c:b9:89:92:b7:97:75:ea:60:
1b:f6:4c:21:68:6a:82:c1:34:66:7f:38:5d:79:cc:
f1:c0:5b:3e:c4:8b:bd:e4:4b:ed:e8:98:3d:e0:66:
ad:b3:2e:92:0f:e5:0a:73:41:d6:83:63:3e:38:37:
b4:39:ac:f1:29:09:85:7d:a4:02:b0:07:e9:05:fa:
75:49:5f:e1:d9:39:38:a1:0f:8d:41:02:ae:e9:ce:
ea:28:09:ac:6c:e3:0d:a6:41:42:9f:9b:75:c0:e1:
31:c5:13:08:8d:c0:c1:58:6d:9a:92:39:84:10:7a:
b3:f9:37:31:6a:d8:91:03:01:52:dc:88:56:8c:cc:
7b:bd:bc:5e:f5:1a:72:cf:f0:41:bd:2c:73:0d:ba:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DD:31:A2:F5:04:98:AE:49:5D:D7:FF:EC:57:16:E1:39:9D:F0:1A
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS213200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.91.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e1:65:16:41:3e:6e:93:a1:56:d6:41:d1:c1:39:89:89:99:
a0:0f:17:43:24:50:e5:f6:0d:2a:b0:b6:31:48:e8:88:35:7c:
68:31:19:c4:d6:37:27:fa:13:db:b9:92:4a:8b:6d:cd:a3:b4:
86:9d:81:95:60:56:27:5d:61:62:1a:ec:ac:63:c8:f4:71:ca:
da:b6:ee:f1:b3:bf:5a:ea:e9:cb:2e:7a:1b:46:20:05:d7:09:
ae:64:62:e8:3e:e7:ac:ca:4f:b9:91:9d:ce:11:f3:70:32:22:
f7:f1:e2:21:fd:81:ce:ff:33:74:4d:fe:68:d2:17:62:79:63:
3c:83:8e:fd:99:f3:be:d8:9b:35:e6:dd:c6:7b:c8:23:8b:5f:
a4:3f:10:95:77:55:59:a1:6d:27:58:f7:a0:4b:c3:3d:3c:56:
77:42:ac:51:92:87:5a:aa:b4:06:2f:68:c2:42:90:05:d8:89:
83:3b:64:f1:0b:a8:13:66:81:1c:10:33:1d:fa:39:b4:fb:f2:
86:5e:72:bb:18:b1:f0:fd:a5:4e:d3:67:4e:4f:be:29:22:e7:
00:d6:96:ff:c9:b6:48:32:3a:c4:a4:de:5d:46:40:ec:f4:6b:
18:d5:48:5c:34:37:24:0f:89:34:e4:d4:7a:c6:2c:29:cf:d0:
8c:e6:27:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:06 2024 by rpki-client on console-fra.rpki-client.org