Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214616.roa
File: AS214616.roa (raw, json)
Hash identifier: pWQzqHkeva9Dzc8W3kJuPFHy1jyY7CuQHhYlX7D48Rw=
Subject key identifier: 3F:CA:6E:DC:BE:BB:56:B0:D3:61:1C:A4:E1:5A:FD:26:DE:32:64:80
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 3FC97FFA0ACAE799FB7A96A57D0F37DA356159AE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214616.roa
Signing time: Thu 11 Jul 2024 08:57:11 +0000
ROA not before: Thu 11 Jul 2024 08:52:11 +0000
ROA not after: Thu 10 Jul 2025 08:57:11 +0000
asID: 214616
IP address blocks: 91.124.1.0/24 maxlen: 24
92.113.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c9:7f:fa:0a:ca:e7:99:fb:7a:96:a5:7d:0f:37:da:35:61:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 11 08:52:11 2024 GMT
Not After : Jul 10 08:57:11 2025 GMT
Subject: CN=3FCA6EDCBEBB56B0D3611CA4E15AFD26DE326480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:57:6d:d9:01:a6:d1:b6:cf:bf:2d:5e:2a:
48:67:e9:82:cc:b3:b7:36:48:82:5c:e1:20:33:0d:
52:b2:fb:87:c3:df:c7:3a:a1:13:0b:9b:6f:1e:8a:
46:3b:d3:a0:a9:86:d5:32:11:32:af:2b:7e:8d:93:
cb:5e:35:80:b1:ff:b9:0b:5d:59:9f:26:6e:67:61:
7b:ae:da:01:d0:79:6b:6e:35:8d:e7:35:99:d4:a8:
4a:2a:de:36:53:f4:38:59:e2:d6:cc:f9:a3:a4:b9:
15:f4:7f:a2:e7:c5:d8:9d:cb:8a:99:7e:5f:b9:3c:
e1:c9:96:df:5f:98:37:11:c6:3c:1d:12:00:a5:37:
3f:86:38:00:00:c7:a0:14:a1:38:ef:b1:65:58:c6:
56:33:c9:10:31:08:42:b6:68:c7:b2:ba:03:32:56:
0b:c7:e9:cf:d9:a0:f8:1e:80:aa:bb:a1:e6:f3:0b:
87:24:5f:8b:ca:12:d7:6d:74:c2:ab:39:5e:6c:b4:
f5:5b:43:f0:5c:42:d6:33:c1:e6:2c:ee:5b:1c:13:
80:64:ad:f4:67:7e:67:d6:48:97:39:81:6d:b0:b0:
dc:80:9f:72:7a:4f:a9:27:2a:de:18:46:99:a5:ec:
9d:e8:cf:46:7d:76:b8:fb:f8:c5:8a:11:f4:19:a8:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CA:6E:DC:BE:BB:56:B0:D3:61:1C:A4:E1:5A:FD:26:DE:32:64:80
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS214616.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.124.1.0/24
92.113.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:31:58:3a:16:b5:12:c3:27:e5:f2:f6:4e:ce:4d:0a:ce:86:
36:bf:15:7c:74:20:cd:9a:7f:cd:17:f0:9e:11:06:87:66:4b:
7a:c5:ae:69:c5:d1:2a:8a:ea:7f:6f:9c:14:71:f7:d6:fc:94:
df:f4:52:bd:4b:b2:bb:3a:04:cf:05:63:88:7f:19:5a:bc:df:
45:b7:e3:9b:b0:a1:aa:be:cf:32:37:2e:e6:95:ad:66:bb:ac:
6d:6b:20:9d:8f:bb:c4:cb:08:c3:89:c0:f9:a4:2f:fe:31:df:
8a:d4:b7:3d:1d:24:72:b1:a4:f2:75:84:24:7f:a1:7c:70:99:
e0:24:96:95:47:42:27:42:e0:ae:aa:74:ac:3b:e9:9e:11:c4:
95:cf:cd:01:d2:54:ff:8a:65:0b:6f:8d:4b:da:9c:80:f8:72:
6c:5a:f8:b7:0d:a4:36:bd:c8:2c:ad:d7:2d:13:79:d6:6f:a6:
51:52:3f:01:ab:e8:55:77:f2:94:2b:be:5a:69:f5:59:6b:aa:
0f:7a:3a:10:8f:95:80:44:76:a1:70:b6:41:a2:d9:6a:5b:60:
42:ea:b3:43:f8:2a:b8:75:d8:86:30:59:d8:8d:38:7d:c7:03:
f3:04:0f:35:b0:21:0b:ab:5b:4c:0f:81:bb:14:c3:2d:80:46:
7b:79:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:06 2024 by rpki-client on console-fra.rpki-client.org