Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa
File: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (raw, json)
Hash identifier: nra9M7oOL084kUhDb94JMKTRN1Dz8z2J49Rj7RF+AAE=
Subject key identifier: 28:A9:4D:E3:E4:01:85:9B:39:66:D2:ED:F5:47:66:46:4B:71:FB:D1
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 29CA384E4F31CE2F780CD084C27D768C5C23A325
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa
Signing time: Tue 31 Oct 2023 21:18:28 +0000
ROA not before: Tue 31 Oct 2023 21:13:28 +0000
ROA not after: Tue 29 Oct 2024 21:18:28 +0000
asID: 205603
IP address blocks: 2a0b:2542:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ca:38:4e:4f:31:ce:2f:78:0c:d0:84:c2:7d:76:8c:5c:23:a3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Oct 31 21:13:28 2023 GMT
Not After : Oct 29 21:18:28 2024 GMT
Subject: CN=28A94DE3E401859B3966D2EDF54766464B71FBD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:37:ec:5c:a5:b3:b0:a5:5b:0a:fa:66:76:46:
1d:99:f4:28:a2:ac:22:24:ae:ae:11:0c:8d:6f:2d:
33:31:b9:e1:86:c5:9d:3a:29:eb:d7:1e:13:33:a9:
26:60:23:d2:52:ad:84:23:a7:e2:12:4f:ed:d3:c5:
a0:da:aa:f0:0a:41:28:28:44:76:18:d9:ba:5d:f3:
5c:66:37:61:a6:8f:93:71:5a:0f:b8:63:9b:07:94:
ac:2b:63:59:1f:4f:ee:b3:09:66:75:97:40:ba:a9:
de:d7:45:a9:7a:76:92:66:f6:37:74:67:83:dd:15:
52:8b:b2:38:14:30:39:6a:e3:18:52:b8:6f:69:ca:
61:39:b3:78:88:b6:ac:e7:34:6f:27:4b:92:8d:2c:
2f:32:d0:2a:fa:15:d8:1b:39:c6:5c:f7:7c:e0:d8:
56:bd:22:82:57:d7:9c:78:02:b2:74:0d:b5:1c:c7:
b3:94:51:fc:de:3e:e4:69:cd:e6:b2:f6:c9:69:e0:
29:04:45:d4:db:57:05:43:9c:ac:2d:34:2a:ce:a0:
fa:4b:3d:aa:95:42:cd:14:c3:5b:0e:7b:00:b0:6c:
b8:18:f2:3a:c8:0f:bc:14:22:2c:e9:c2:55:c6:97:
0e:00:07:56:62:57:5d:62:e9:e7:0f:c9:54:a5:a7:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A9:4D:E3:E4:01:85:9B:39:66:D2:ED:F5:47:66:46:4B:71:FB:D1
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2542:400::/40
Signature Algorithm: sha256WithRSAEncryption
7a:a8:8f:78:fc:c9:41:9c:e9:78:43:90:7b:70:4a:31:ac:5f:
c9:80:58:72:6c:3d:ef:7e:6b:58:25:56:11:f0:ca:8e:00:98:
92:54:39:74:1e:6e:ae:1d:a7:95:72:14:17:08:a9:70:fe:77:
22:02:94:2c:08:f0:6a:2d:d3:b6:2f:37:68:e5:59:49:1d:08:
3d:bd:19:cf:93:67:0c:1a:a1:6a:0c:9e:d8:a4:f6:03:2c:0a:
12:b1:35:f3:0b:d9:c1:ca:e3:85:2b:7c:ea:60:84:df:2d:c6:
e8:b4:03:ee:f0:52:84:e4:e4:e9:46:fe:ac:48:e3:01:6b:f5:
c1:6e:88:38:61:42:d3:cc:56:d2:59:32:2b:5b:7e:61:be:f1:
6c:a4:a6:48:a0:81:11:a1:37:a8:19:ab:70:54:7e:ce:65:62:
b5:2f:c8:d1:0a:30:71:f7:8b:cd:cd:42:df:96:91:32:8c:02:
ac:7a:48:3b:04:f0:e1:cf:cc:96:92:3b:2c:a7:df:c6:7c:d8:
83:ae:e9:2a:e7:30:d4:f9:66:12:59:66:3e:55:5c:13:d1:39:
94:33:26:7e:0f:84:5e:03:eb:ed:f0:c1:ac:cb:e8:23:b6:a1:
01:ca:a4:78:20:b0:27:c7:12:30:18:7d:66:73:3b:dd:d8:ac:
79:2c:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 21:57:28 2024 by rpki-client on console-fra.rpki-client.org