Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
File: AS273508.roa (raw, json)
Hash identifier: 9AIcES5OfnlM0CGdpk7O0e3cqrRIMxWT9ojsNhJQAK8=
Subject key identifier: 61:94:E6:03:3A:CB:C8:DB:25:D3:35:45:71:40:B3:95:C7:94:B4:E3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 01AC8BC319D4FD1E35F19834929DD1F9026331FE
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
Signing time: Fri 05 Jul 2024 17:12:02 +0000
ROA not before: Fri 05 Jul 2024 17:07:02 +0000
ROA not after: Fri 04 Jul 2025 17:12:02 +0000
asID: 273508
IP address blocks: 92.112.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ac:8b:c3:19:d4:fd:1e:35:f1:98:34:92:9d:d1:f9:02:63:31:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 5 17:07:02 2024 GMT
Not After : Jul 4 17:12:02 2025 GMT
Subject: CN=6194E6033ACBC8DB25D335457140B395C794B4E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:ce:ce:c7:e3:c5:cb:dd:79:eb:00:95:47:
d0:ce:23:96:4c:18:b8:45:9d:80:68:9d:df:90:f8:
e3:d4:54:b8:b7:79:9a:29:d6:51:12:ce:27:d2:5c:
6e:a7:27:4c:e8:af:cd:0e:f0:6a:8b:27:61:35:a4:
2e:07:b0:95:b3:99:5a:39:59:e7:84:75:84:ad:32:
db:88:c3:b3:7a:ca:6b:ae:f0:e9:55:d3:f6:3c:7b:
95:44:f1:a3:00:fc:e7:92:c2:72:b0:b6:15:94:67:
7a:ac:a1:c6:33:ec:c7:8e:3b:b1:cc:a0:5f:20:fe:
4e:f7:52:c7:dc:5b:e0:98:d2:74:af:f4:e7:e5:b4:
58:88:25:7e:5b:40:94:0c:5c:c6:bd:01:a8:5c:8f:
95:15:80:65:fb:b1:1f:83:b8:73:5b:2a:74:0d:95:
70:ad:ba:6c:37:4c:b9:98:e4:94:f6:be:b0:9d:6b:
5d:cd:93:cf:ef:a5:59:27:1f:12:ce:6f:95:27:d4:
0c:22:c7:02:2f:11:48:1f:e2:06:63:8f:ac:5f:8a:
09:6f:87:ff:dd:32:75:e0:c8:52:76:1f:62:0e:f2:
84:09:18:90:5c:71:09:fd:dd:e5:24:b6:eb:8d:02:
8c:51:95:b6:d5:7d:e4:e4:bd:ea:3b:39:47:74:04:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:E6:03:3A:CB:C8:DB:25:D3:35:45:71:40:B3:95:C7:94:B4:E3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b4:cd:53:f8:7b:89:38:c2:79:e3:6c:07:b8:ce:7e:66:9a:
02:e5:33:41:a6:95:0a:3b:f9:dc:aa:2f:8c:d7:ec:3a:c8:4c:
61:9d:74:5f:6e:67:a8:28:67:e1:09:89:e3:bd:35:5c:96:b4:
78:bf:19:83:38:5f:b4:2f:f0:fe:dc:57:96:04:1c:57:0d:47:
7a:17:20:a4:9c:c2:d4:04:47:90:bd:84:00:0f:a2:06:83:4a:
a6:42:09:70:de:92:ee:b9:61:d4:68:17:1d:4c:25:34:e4:a5:
2e:b5:23:b2:d9:57:cc:f3:49:1a:0e:a0:44:3a:69:8d:63:2d:
c2:9b:34:1e:a9:e5:52:b7:c3:90:62:5c:9e:f4:20:e4:0e:bc:
8c:17:84:33:2f:1d:49:c9:d3:cd:c0:b3:0b:d7:0f:9e:eb:84:
20:5a:d7:4d:ff:5f:cc:40:90:d0:1e:ff:0c:60:b8:8c:5a:0a:
bd:58:4d:13:ed:08:01:0c:67:aa:9c:fc:4b:f7:6c:5b:9d:66:
cb:64:6e:ba:76:ce:33:24:97:9b:1e:e6:31:79:9c:c7:5d:6d:
28:df:9e:24:7e:1b:12:cb:66:d3:dd:69:5c:96:5a:66:2d:f2:
b5:c2:cc:58:b9:d4:b1:68:46:52:12:62:b8:1a:a2:73:78:89:
07:a6:97:1f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUAayLwxnU/R418Zg0kp3R+QJjMf4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWJkODEzMzkxZTRhZjJhZTMxMDNjMTg5MWIyMjcyZDRk
NWMxM2I1ZjAeFw0yNDA3MDUxNzA3MDJaFw0yNTA3MDQxNzEyMDJaMDMxMTAvBgNV
BAMTKDYxOTRFNjAzM0FDQkM4REIyNUQzMzU0NTcxNDBCMzk1Qzc5NEI0RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOc7Ox+PFy9156wCVR9DOI5ZM
GLhFnYBond+Q+OPUVLi3eZop1lESzifSXG6nJ0zor80O8GqLJ2E1pC4HsJWzmVo5
WeeEdYStMtuIw7N6ymuu8OlV0/Y8e5VE8aMA/OeSwnKwthWUZ3qsocYz7MeOO7HM
oF8g/k73UsfcW+CY0nSv9OfltFiIJX5bQJQMXMa9Aahcj5UVgGX7sR+DuHNbKnQN
lXCtumw3TLmY5JT2vrCda13Nk8/vpVknHxLOb5Un1AwixwIvEUgf4gZjj6xfiglv
h//dMnXgyFJ2H2IO8oQJGJBccQn93eUktuuNAoxRlbbVfeTkveo7OUd0BC5VAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUYZTmAzrLyNsl0zVFcUCzlceUtOMwHwYDVR0j
BBgwFoAUm9gTOR5K8q4xA8GJGyJy1NXBO18wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQ3OGY2ZjUtNDQ5YS00ODI3LTk5ZDUtYmY2YjkzYThm
NmI0LzAvOUJEODEzMzkxRTRBRjJBRTMxMDNDMTg5MUIyMjcyRDRENUMxM0I1Ri5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL205Z1RPUjVLOHE0eEE4R0pHeUp5MU5Y
Qk8xOC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0NzhmNmY1LTQ0OWEt
NDgyNy05OWQ1LWJmNmI5M2E4ZjZiNC8wL0FTMjczNTA4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHA8
MA0GCSqGSIb3DQEBCwUAA4IBAQA7tM1T+HuJOMJ542wHuM5+ZpoC5TNBppUKO/nc
qi+M1+w6yExhnXRfbmeoKGfhCYnjvTVclrR4vxmDOF+0L/D+3FeWBBxXDUd6FyCk
nMLUBEeQvYQAD6IGg0qmQglw3pLuuWHUaBcdTCU05KUutSOy2VfM80kaDqBEOmmN
Yy3CmzQeqeVSt8OQYlye9CDkDryMF4QzLx1JydPNwLML1w+e64QgWtdN/1/MQJDQ
Hv8MYLiMWgq9WE0T7QgBDGeqnPxL92xbnWbLZG66ds4zJJebHuYxeZzHXW0o354k
fhsSy2bT3WlcllpmLfK1wsxYudSxaEZSEmK4GqJzeIkHppcf
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:42 2024 by rpki-client on console-ams.rpki-client.org