Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3a2f34382d3438203d3e20313337323536.roa
File: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (raw, json)
Hash identifier: utrq3kNZHnRBnFUOPxeOLAFXu4k71GlAKAZCdI304OU=
Subject key identifier: 49:66:02:49:DE:B9:94:CC:12:7A:1A:4B:AA:30:55:5A:1E:9A:25:59
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 18F77170E1475FCF839F9B952CAD54059243D907
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3a2f34382d3438203d3e20313337323536.roa
Signing time: Thu 12 Oct 2023 16:10:34 +0000
ROA not before: Thu 12 Oct 2023 16:05:34 +0000
ROA not after: Thu 10 Oct 2024 16:10:34 +0000
asID: 137256
IP address blocks: 2a0b:2542::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f7:71:70:e1:47:5f:cf:83:9f:9b:95:2c:ad:54:05:92:43:d9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Oct 12 16:05:34 2023 GMT
Not After : Oct 10 16:10:34 2024 GMT
Subject: CN=49660249DEB994CC127A1A4BAA30555A1E9A2559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:26:96:34:c4:05:34:85:0c:7b:f9:9b:70:
76:f1:9f:18:4c:85:00:37:3c:de:2b:7a:fb:0a:de:
33:56:f3:d1:46:41:c6:95:d2:08:bb:a4:2c:e8:66:
a5:5e:f7:ca:9f:d9:12:47:25:f5:e1:19:50:4a:90:
28:1f:b7:f1:31:e2:be:bc:be:c6:65:c4:81:30:79:
5c:db:64:01:bf:76:21:1f:5f:24:d5:9e:b4:f7:ac:
fa:c4:19:ec:f3:8d:13:39:e5:06:66:83:c7:0d:2e:
00:80:85:d6:73:55:b3:e0:1d:a6:01:7d:fd:cd:2c:
75:d0:04:7a:9f:13:0b:53:49:07:ab:be:63:9b:0b:
e8:dc:0c:5a:9d:e6:f1:88:8e:fb:dd:2c:23:45:cf:
0c:79:e0:10:6d:e5:55:cc:f5:94:9f:a3:d8:b2:5c:
af:c4:9b:d3:a7:34:13:6c:7b:f8:96:43:92:2a:81:
26:09:3f:11:2b:df:c0:df:a8:d3:43:26:f1:f4:fb:
57:e8:b6:99:c0:ec:ce:c3:b8:c7:ce:37:aa:e0:3d:
06:a5:8a:6d:61:24:fe:dd:eb:88:ad:5a:03:fa:fc:
91:cf:06:8f:70:f4:7f:18:3d:d3:7b:a7:7d:13:53:
f9:83:58:4a:44:e0:16:4b:e7:65:b6:9a:57:11:5e:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:66:02:49:DE:B9:94:CC:12:7A:1A:4B:AA:30:55:5A:1E:9A:25:59
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3a2f34382d3438203d3e20313337323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2542::/48
Signature Algorithm: sha256WithRSAEncryption
5d:7b:e7:e6:4e:8c:98:af:af:e1:91:f5:1d:f1:99:1f:90:06:
6a:fd:05:0a:1a:c8:a4:29:d8:42:d1:5a:f5:51:e1:21:12:10:
09:68:2c:fa:6c:30:9b:5c:8d:b4:94:6c:b5:f9:35:6f:21:e6:
14:6b:3f:7d:d3:9d:6d:1e:83:3d:93:7c:9f:6f:e7:ba:7c:f4:
29:e4:bb:3e:ad:ed:5a:9f:1b:95:22:79:2e:59:08:66:f2:ec:
b8:d9:c4:0b:f2:7c:ca:8e:00:68:1e:3d:04:5c:1b:00:8e:2d:
87:ba:7f:1a:c9:2a:41:25:7a:23:74:7d:c8:2d:b5:c5:2f:c4:
12:91:a9:fe:a4:40:3d:92:96:53:5a:16:f2:22:8d:85:f6:95:
e1:e0:93:ae:fb:6e:16:db:6e:69:78:a6:3d:16:15:70:ea:5c:
b1:c4:97:65:2e:52:7b:ba:8f:a6:3e:68:1d:24:9e:a1:84:92:
df:8c:c6:e2:6f:49:6a:23:f1:fd:7d:e1:9b:f8:95:e8:f3:5a:
52:69:29:93:df:8d:66:fa:29:f8:1b:60:c2:e2:62:7e:33:84:
d2:f5:3c:45:73:fe:4c:4b:9c:e1:ee:e2:df:6d:7b:84:c0:e9:
5a:ff:75:6a:76:a6:f0:dc:e0:64:3b:89:25:5d:26:b8:01:3c:
4e:51:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:41:17 2024 by rpki-client on console-fra.rpki-client.org