Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
File: AS55410.roa (raw, json)
Hash identifier: l6wBkeJNZCy8W9bSNGg6/zjs2TGQ8UOpfl+1PrvnmY0=
Subject key identifier: CA:05:77:3B:4F:CA:F0:3B:56:00:ED:05:4F:05:68:00:77:9B:D7:1B
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 0EBB88FDF9F563E82E6AF477ADCB649ABDA8DA05
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
Signing time: Tue 02 Jul 2024 16:01:49 +0000
ROA not before: Tue 02 Jul 2024 15:56:49 +0000
ROA not after: Tue 01 Jul 2025 16:01:49 +0000
asID: 55410
IP address blocks: 92.112.24.0/22 maxlen: 24
92.112.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:bb:88:fd:f9:f5:63:e8:2e:6a:f4:77:ad:cb:64:9a:bd:a8:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jul 2 15:56:49 2024 GMT
Not After : Jul 1 16:01:49 2025 GMT
Subject: CN=CA05773B4FCAF03B5600ED054F056800779BD71B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:4c:99:7c:a7:f4:d2:ef:2a:03:d6:2e:dd:
ab:60:f0:30:5c:b6:e5:4f:94:ca:d2:68:02:29:99:
8d:70:b2:74:96:b6:45:a7:48:fc:31:b0:e9:41:7f:
6e:0a:a2:b7:14:7b:a5:06:10:e7:05:0c:2f:79:76:
f3:7a:8f:b2:2f:98:7f:ae:cf:07:7b:89:81:a2:9a:
8d:72:02:50:51:03:69:b5:af:97:af:2e:3d:83:4d:
36:95:f2:31:15:65:a8:0a:0e:94:c2:84:1a:50:ed:
29:a9:70:89:b3:30:18:bd:5a:8e:b3:09:7f:90:5e:
d3:f2:69:36:7f:d5:d3:99:82:44:cb:ea:4a:c6:72:
7b:6c:d6:3d:df:21:15:60:56:fc:91:f2:53:75:f7:
3e:14:e5:ef:40:73:56:a3:6d:6f:88:e5:32:5e:be:
60:68:a6:93:a4:36:bc:83:a2:e9:fc:81:4d:ea:8a:
6d:83:ae:1a:44:e6:4c:7b:7a:6a:23:e6:d1:4e:05:
1b:20:db:cc:6a:3c:1d:52:de:f6:88:c4:b7:ab:18:
ea:a6:e9:bf:58:55:11:64:1f:e4:ef:d7:f5:25:e1:
c7:b9:4f:26:f3:5b:c8:bc:b4:dc:f8:88:d1:a0:a2:
0c:ad:89:b6:7e:dc:56:d6:ce:4a:df:62:ab:17:70:
47:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:77:3B:4F:CA:F0:3B:56:00:ED:05:4F:05:68:00:77:9B:D7:1B
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS55410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.24.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:24:30:11:12:db:d4:a1:0e:7e:e6:4c:ef:22:5e:e4:80:a0:
cd:c2:c8:b6:dc:e3:9b:b6:7e:7c:4a:63:64:d0:95:95:ff:a5:
a4:f7:f5:6b:b2:35:9b:34:fd:fe:9a:52:77:9d:d9:17:1f:26:
a1:d4:c9:82:e9:01:0c:a2:6d:30:ae:e5:15:65:fc:75:dd:ce:
a8:bc:60:96:0f:3e:62:10:ed:eb:9d:53:b4:ea:6c:73:60:8c:
94:2d:1a:ab:fb:e2:84:e5:1c:84:88:d6:88:8c:47:28:05:da:
02:21:ae:0c:99:c9:af:4f:e4:68:b2:39:a2:ae:31:6a:1b:6b:
15:28:c2:c6:c2:8c:e7:ec:39:52:ea:8c:db:85:e7:ae:d7:e9:
4d:e9:b5:99:97:49:0c:80:ba:09:de:16:df:6d:06:d9:62:39:
98:5a:a8:d6:c9:5f:09:b7:51:fd:37:5b:c0:11:9d:03:6d:b0:
04:f8:4c:70:3e:91:b1:9f:92:99:35:13:da:66:2a:c3:aa:e9:
13:92:01:a2:0a:b6:95:6f:b4:2d:0f:fa:28:82:f2:4d:87:a0:
05:d2:ff:52:12:b2:e2:7c:35:7e:5f:55:0a:be:05:21:8d:6a:
9c:99:8b:d4:7c:55:41:e5:7d:d7:2e:26:84:0b:a1:35:04:08:
7a:61:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:42 2024 by rpki-client on console-ams.rpki-client.org