Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203630343932.roa
File: 326130323a356265303a343a3a2f34382d3438203d3e203630343932.roa (raw, json)
Hash identifier: 4PbeqbBtIe3OiIEpMDiy+rsWQ7ySRRXJ0EBI12Fb8Bc=
Subject key identifier: CA:DB:FC:6F:B4:1A:EE:0A:66:7A:44:4D:33:CE:01:4D:9A:72:3A:72
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 1B97A35499A4C9142B9AE029129C14A03E54D5EA
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203630343932.roa
Signing time: Thu 17 Aug 2023 10:04:32 +0000
ROA not before: Thu 17 Aug 2023 09:59:32 +0000
ROA not after: Thu 15 Aug 2024 10:04:32 +0000
asID: 60492
IP address blocks: 2a02:5be0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:97:a3:54:99:a4:c9:14:2b:9a:e0:29:12:9c:14:a0:3e:54:d5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Aug 17 09:59:32 2023 GMT
Not After : Aug 15 10:04:32 2024 GMT
Subject: CN=CADBFC6FB41AEE0A667A444D33CE014D9A723A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:9f:e8:3e:fe:e6:e2:f4:ee:0f:5c:17:74:
14:e4:b1:52:4f:3a:c1:bf:7d:25:da:a8:f1:d3:59:
de:0f:f2:17:d6:03:e6:84:cf:b8:8a:2d:2f:d2:1d:
cd:d2:03:04:de:f2:81:86:30:e1:f3:b6:5c:ae:34:
23:55:4b:5c:e3:9b:0a:b0:ee:c3:18:e7:a4:57:76:
d8:33:cc:19:32:a0:03:79:c5:8d:e7:ce:44:98:4e:
18:a7:6b:1c:76:1b:8f:b0:5f:47:56:71:64:77:db:
54:cb:3d:c0:03:5a:b7:25:3f:60:4c:42:2c:52:b6:
3b:a0:dd:ff:85:1a:55:6c:ed:6a:fa:16:cd:2d:67:
c3:c2:47:ec:d2:a3:2b:af:bc:56:8b:f0:3c:05:c4:
c5:37:58:0e:68:b4:90:8f:d9:49:cb:bc:92:c9:13:
b7:77:3e:52:57:83:40:ab:29:86:74:5e:46:20:1a:
51:aa:c5:64:fb:f8:b5:4a:fe:81:fb:d8:38:4e:7b:
91:6d:e2:c1:e1:e2:0e:f2:5d:b8:c6:06:82:f2:38:
54:10:c4:df:cd:cd:4a:d3:d2:52:8e:ee:18:75:d3:
b6:e6:5b:7d:0c:76:44:0c:68:93:44:72:e1:7d:1d:
e8:e6:ba:0f:19:05:df:51:d2:b8:79:11:c3:35:8a:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DB:FC:6F:B4:1A:EE:0A:66:7A:44:4D:33:CE:01:4D:9A:72:3A:72
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a343a3a2f34382d3438203d3e203630343932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:4::/48
Signature Algorithm: sha256WithRSAEncryption
95:9c:14:73:42:75:4b:5a:5d:d6:41:e8:d9:9e:f9:17:12:5c:
51:bd:7a:a9:95:40:00:1f:fc:c7:b2:1e:99:1e:de:86:ea:31:
91:c2:a5:4d:39:58:c0:03:69:d2:8e:88:1b:36:bd:7c:32:bd:
68:08:76:a5:10:fa:59:61:66:ac:bc:6a:04:ab:53:a1:74:53:
3e:93:5f:40:a8:4c:1c:72:05:8f:c3:8e:4f:49:bc:5c:15:8c:
1c:e6:ba:7c:c7:53:08:77:19:59:20:7d:09:25:bb:e5:ae:c0:
52:20:18:90:9f:23:49:44:2e:21:af:9f:a3:bf:a7:44:fc:0f:
37:07:e6:0f:9a:88:0b:24:65:12:f3:37:20:b2:5d:90:b3:92:
42:d2:3c:4c:d6:ce:c5:3e:bd:ea:e0:88:fb:cf:0c:06:4b:1d:
04:81:52:6c:fb:6f:63:21:80:47:96:d8:2b:4f:81:26:f4:a1:
09:77:ff:25:1b:d3:84:da:6f:be:0e:c4:b7:66:9f:03:51:62:
8b:4d:2c:7a:44:6c:62:3f:59:94:22:51:2e:49:f9:c4:77:52:
af:33:c2:7c:5a:c7:c5:cf:26:8f:e7:b8:fd:df:b4:22:ba:31:
94:61:e0:ed:af:5c:11:33:89:de:26:48:05:4e:2f:40:3d:27:
ab:18:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:17:16 2024 by rpki-client on console-fra.rpki-client.org