Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
File: AS271799.roa (raw, json)
Hash identifier: 3F1kAc6hWGeUGuXs4B/imKspv//1k9f6e4/W4ZVco7c=
Subject key identifier: BE:60:78:41:FD:D7:A8:8D:5D:CE:91:34:FA:8F:25:5C:5E:93:83:C9
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 4C11A2ECEFE56961220A9856267B7E4143F8D94F
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
Signing time: Wed 19 Feb 2025 13:53:55 +0000
ROA not before: Wed 19 Feb 2025 13:48:55 +0000
ROA not after: Wed 18 Feb 2026 13:53:55 +0000
asID: 271799
IP address blocks: 181.214.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:11:a2:ec:ef:e5:69:61:22:0a:98:56:26:7b:7e:41:43:f8:d9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 19 13:48:55 2025 GMT
Not After : Feb 18 13:53:55 2026 GMT
Subject: CN=BE607841FDD7A88D5DCE9134FA8F255C5E9383C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:29:a9:b1:9c:03:f9:d5:23:22:e0:84:e5:
49:af:31:17:1e:cd:6c:0a:04:e7:7d:8e:60:82:18:
6e:3b:51:b2:7d:bb:9d:54:fb:df:2e:4b:e5:18:51:
db:b3:06:d7:73:34:97:79:6c:54:c8:70:a9:20:8a:
bc:df:94:0d:98:fd:29:0b:1a:18:60:ae:42:1b:80:
81:9e:73:07:7b:3d:ff:cc:5f:32:a9:79:b3:55:c1:
b7:bf:75:ab:6c:21:49:ea:02:44:90:3e:22:0a:21:
bd:a0:67:b6:07:5a:1b:c6:c4:a2:fb:96:b6:4a:7f:
c1:9f:9a:91:1c:63:a2:a0:ed:31:91:29:90:66:af:
db:f9:21:27:2d:87:89:fe:db:32:03:ae:79:ba:7b:
5b:4f:17:e1:b3:2f:02:8b:4b:02:e6:51:a0:50:40:
bc:52:5e:1d:d1:2c:36:b7:34:f3:24:01:6f:b0:56:
e0:bb:75:db:02:6a:4e:18:fc:f4:6b:b3:29:a7:dc:
54:fb:1a:99:53:a6:48:5e:86:0c:00:44:cb:cb:98:
72:e7:d7:a9:ec:bb:2f:a6:c5:6d:a1:0c:6d:4e:60:
2e:49:a6:be:4c:b3:f5:cc:b6:28:3d:29:07:cf:84:
ad:a3:e3:fa:22:0e:27:6c:cd:4d:e5:52:9a:dc:eb:
23:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:60:78:41:FD:D7:A8:8D:5D:CE:91:34:FA:8F:25:5C:5E:93:83:C9
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS271799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.29.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b6:ed:1f:46:d2:c5:9d:80:8f:63:18:04:d3:22:a4:7c:94:
d8:17:d7:51:f7:d1:bb:79:a7:89:ff:d3:d1:17:f7:17:ab:a4:
19:7a:e9:67:e4:46:2c:00:67:0d:40:78:02:b5:63:40:a2:95:
6f:d5:8e:01:30:40:1f:c6:b3:f0:ed:b0:00:67:22:94:21:c7:
1c:aa:ab:c4:54:fc:d2:3c:90:40:82:79:8f:a6:44:fe:12:5f:
fc:05:75:65:c9:28:4a:15:ff:07:95:44:8f:9b:c9:37:fb:ed:
c2:e2:ce:87:eb:c1:27:11:92:e5:d1:31:8a:63:4a:ad:ad:62:
ec:67:c3:f0:24:ec:67:45:2e:49:67:b2:40:46:f1:c4:01:56:
94:8b:b3:f1:b9:d5:9f:8e:dd:3b:74:3f:03:8e:91:ac:a0:71:
a6:6b:d1:5f:9b:26:ff:7f:c3:09:9f:c9:45:c5:6a:8b:91:4c:
b9:9c:8f:97:98:e3:91:ec:cc:38:c8:07:c4:17:a5:1f:b5:27:
6b:f0:07:59:46:95:2d:08:81:83:57:58:9a:4e:9d:9d:7c:57:
f0:c2:bd:ba:81:f0:f3:15:10:4f:48:70:f2:33:0d:1e:f1:f6:
be:02:9a:e8:77:ed:ea:f0:7c:23:31:ab:1f:2b:69:54:49:ed:
fb:d0:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:47:59 2025 by rpki-client