Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
File: AS61138.roa (raw, json)
Hash identifier: Xggk/ZfmdeJWtgWwMcli4KcrCoVdA+YHGMyZ8kv8vsU=
Subject key identifier: BC:CD:81:70:76:4B:8E:1D:26:4B:DF:96:CF:65:B1:4A:C7:B6:8D:F0
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 2AA0830BE98F1E27D3BFFBD113B74D6A40BEBB92
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
Signing time: Fri 11 Oct 2024 11:41:21 +0000
ROA not before: Fri 11 Oct 2024 11:36:21 +0000
ROA not after: Fri 10 Oct 2025 11:41:21 +0000
asID: 61138
IP address blocks: 92.112.96.0/22 maxlen: 24
92.113.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a0:83:0b:e9:8f:1e:27:d3:bf:fb:d1:13:b7:4d:6a:40:be:bb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Oct 11 11:36:21 2024 GMT
Not After : Oct 10 11:41:21 2025 GMT
Subject: CN=BCCD8170764B8E1D264BDF96CF65B14AC7B68DF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:b6:e9:d0:86:9b:f5:a1:17:53:3b:ff:c7:
f9:3e:af:5f:d6:bb:17:75:ba:7a:a5:28:0c:99:84:
89:08:01:bd:bf:48:80:56:d2:8e:c1:08:c2:f6:ec:
06:b5:af:48:3f:f1:a8:f2:cd:83:84:07:5c:0e:10:
6a:5c:4b:f9:ee:7c:49:2e:02:b0:a0:1a:0c:66:18:
38:fb:8a:42:57:b8:09:7a:23:35:39:15:a6:af:00:
8e:24:05:cc:94:b1:e9:aa:aa:74:53:ea:e0:84:9e:
5e:40:b7:6b:22:12:d8:d9:e8:4a:09:1c:a2:4c:b3:
16:13:2a:91:1c:72:e8:41:54:d5:94:a3:9b:37:c3:
48:e3:0c:f4:16:ba:c6:02:76:a0:84:be:73:d5:8f:
8c:77:c2:87:fa:f8:c7:44:b2:aa:b3:09:73:71:47:
3a:a5:5a:0c:fb:ba:a8:33:f5:d5:14:ed:00:3d:b6:
1e:9a:21:b6:4a:eb:4e:99:04:bb:50:fa:e5:67:6c:
9e:5f:17:10:15:d2:7b:56:bc:25:8b:e9:07:85:75:
ff:9b:70:d8:76:dc:80:cc:0e:82:48:3d:43:18:6c:
d6:8a:54:27:14:88:74:59:fa:fe:86:8e:8a:a9:25:
5c:6e:70:c3:1f:64:67:64:43:b4:97:a0:77:99:03:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:81:70:76:4B:8E:1D:26:4B:DF:96:CF:65:B1:4A:C7:B6:8D:F0
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS61138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.112.96.0/22
92.113.152.0/22
Signature Algorithm: sha256WithRSAEncryption
74:50:f9:9f:15:9f:98:d3:83:81:1d:da:32:9a:db:db:9a:55:
5a:91:ea:10:cc:be:b9:9a:c9:3a:52:36:ff:91:17:31:c5:d5:
f4:74:ad:f3:63:b7:30:37:2a:29:21:1c:d4:d4:b4:8a:f6:6b:
7e:46:86:69:dd:4b:5b:3d:18:09:ee:ac:3a:b7:46:8e:10:b8:
79:d3:ed:b5:83:06:04:5e:fe:83:4a:a3:75:2f:6d:08:83:63:
1b:3c:3e:aa:15:ad:7d:f4:95:b3:80:d1:8a:cf:cc:0a:9f:73:
6c:1a:b9:03:13:2b:7f:de:b1:86:00:56:be:48:dc:97:f0:78:
ca:2a:da:09:3c:b3:0f:50:f8:2a:9a:4d:05:de:ab:42:3a:6a:
ad:42:8c:92:bc:71:d6:d8:01:a1:bb:e0:d9:7d:4a:37:5d:55:
77:64:3d:48:96:89:71:0d:28:c8:b2:5b:55:09:ba:90:5a:dd:
68:4f:fd:2c:98:35:5e:1a:73:82:63:c5:d4:9d:e1:cd:31:ac:
f8:74:ec:eb:c9:cb:1d:cb:ab:07:91:9c:10:95:08:ff:5c:40:
b9:c8:d1:5a:2f:0c:62:27:ee:55:2e:83:ef:05:8e:90:7c:7f:
1f:a0:58:64:34:59:d1:2e:75:dc:3e:de:4d:51:cc:ae:1c:9b:
f2:2e:6c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:51 2024 by rpki-client on console-fra.rpki-client.org