Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4648.roa
File: AS4648.roa (raw, json)
Hash identifier: ry+eSeG9hpbYLG47h2M8moX3lfkVamKKTip/VUCYCKY=
Subject key identifier: C0:E3:3F:9D:B0:67:B8:A6:B6:9E:92:52:87:79:E8:92:38:5D:7D:E3
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4C6022DFB70B7F8302DC5B6AE2EBD6A1D7A87A21
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4648.roa
Signing time: Sun 26 May 2024 08:05:43 +0000
ROA not before: Sun 26 May 2024 08:00:43 +0000
ROA not after: Sun 25 May 2025 08:05:43 +0000
asID: 4648
IP address blocks: 92.112.204.0/22 maxlen: 24
92.112.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:60:22:df:b7:0b:7f:83:02:dc:5b:6a:e2:eb:d6:a1:d7:a8:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: May 26 08:00:43 2024 GMT
Not After : May 25 08:05:43 2025 GMT
Subject: CN=C0E33F9DB067B8A6B69E92528779E892385D7DE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:41:4c:64:3a:6f:dd:f6:98:1a:a6:ed:5e:
4b:b2:34:60:36:b2:41:1b:1a:ba:fc:a7:48:37:a6:
f2:c3:fd:35:c8:b7:38:73:66:6c:7f:0d:6a:ef:48:
a9:36:99:cf:ec:00:91:5a:f8:a5:6f:a2:fe:e3:d8:
8a:0c:83:1a:4b:a6:96:9f:50:29:ec:e3:b0:e2:4e:
59:d6:5a:e0:d0:8c:0d:f7:33:1f:81:1d:32:c7:be:
86:5e:96:27:3d:d2:e7:38:6c:99:32:c4:dc:d9:5d:
f3:42:a1:dd:66:ac:87:38:46:fd:73:d9:91:38:8a:
a4:86:87:fb:71:da:a4:32:99:5a:7f:d2:db:bd:96:
75:b5:8b:b5:49:fd:ef:f8:bf:41:bd:b0:a6:bc:c2:
35:0c:33:5d:18:22:57:b8:71:e4:47:47:b6:6d:d9:
1f:e5:66:7e:83:65:c7:fc:98:68:d1:ea:1d:78:e8:
ed:0c:db:a8:7b:1c:52:ef:e6:38:f2:48:91:20:e6:
a3:aa:b6:b2:1c:92:03:19:17:20:7a:eb:90:07:18:
12:11:20:35:4b:6d:fe:28:5d:af:3b:bb:9b:c8:25:
70:10:2b:be:91:cc:43:ce:c2:3c:56:bb:d9:9c:3a:
18:53:31:69:32:52:e7:b4:32:54:88:3d:ba:81:29:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:3F:9D:B0:67:B8:A6:B6:9E:92:52:87:79:E8:92:38:5D:7D:E3
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS4648.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.204.0-92.112.211.255
Signature Algorithm: sha256WithRSAEncryption
26:55:f4:f2:58:bb:dd:08:75:51:5d:78:9c:31:da:be:a8:fc:
60:26:80:69:73:a4:0f:6b:d4:88:46:88:7d:2c:5f:ad:87:76:
a3:4a:a7:84:0d:33:a1:f9:36:6a:63:67:fc:c0:de:3b:c0:a3:
c0:51:e5:c0:94:d7:70:a2:09:2d:03:5c:29:1d:17:ef:45:58:
dd:a7:50:d6:64:df:d5:e0:cb:6e:54:1a:1e:d6:b1:d5:d2:84:
29:32:4e:10:83:37:72:56:33:9b:39:79:2c:5b:d2:51:ce:04:
e6:b4:f1:2d:35:90:42:12:bd:36:f5:08:cb:ea:ca:a6:5f:6c:
f2:f0:5f:a4:f2:2c:b3:cd:eb:46:67:b7:f4:f8:4b:12:24:57:
f1:e4:8c:75:d2:d6:67:8c:36:16:ff:b4:23:48:e9:36:85:a3:
df:63:e8:0b:56:c5:00:bb:84:e2:e0:5c:c8:69:48:2f:cd:7b:
f2:7a:99:a0:70:73:c9:9c:d8:96:cf:5c:ae:28:ba:07:6e:26:
9b:70:95:ae:5e:0d:d7:40:c5:4a:c2:37:43:f1:e4:4a:23:60:
d7:69:bb:3f:8c:91:57:e4:90:e4:db:bd:0b:4f:05:9e:1d:4b:
3d:64:9a:ea:41:5b:42:42:81:62:a8:f5:62:4c:56:9e:f8:6d:
12:30:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:27 2025 by rpki-client