Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/326130373a323438363a6665303a3a2f34342d3438203d3e203434333331.roa
File: 326130373a323438363a6665303a3a2f34342d3438203d3e203434333331.roa (raw, json)
Hash identifier: JOh1qDxez9MViTehCFAKFSEpPEUI46E4zUCwiRpViWk=
Subject key identifier: 44:64:6E:A8:98:DD:88:24:79:CF:35:4D:CC:01:94:B1:ED:EF:81:13
Certificate issuer: /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial: 6D3080CC1426039145F7667538AF47C9028E1C07
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/326130373a323438363a6665303a3a2f34342d3438203d3e203434333331.roa
Signing time: Mon 20 May 2024 13:33:22 +0000
ROA not before: Mon 20 May 2024 13:28:22 +0000
ROA not after: Mon 19 May 2025 13:33:22 +0000
asID: 44331
IP address blocks: 2a07:2486:fe0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:30:80:cc:14:26:03:91:45:f7:66:75:38:af:47:c9:02:8e:1c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Validity
Not Before: May 20 13:28:22 2024 GMT
Not After : May 19 13:33:22 2025 GMT
Subject: CN=44646EA898DD882479CF354DCC0194B1EDEF8113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:85:4d:cc:0a:4a:ea:b5:c4:f7:ef:be:43:
69:cb:35:76:72:1b:95:7a:f6:60:0c:49:58:97:91:
f4:6f:ca:5c:8e:03:d2:0e:a5:d3:b9:8d:a2:c4:5e:
4f:76:9b:46:7d:d6:1e:be:43:68:13:3b:83:d2:d5:
c9:10:23:54:d1:dd:35:c3:48:e5:50:78:f3:33:c2:
c5:b6:39:93:e2:43:56:39:77:47:55:96:a8:5a:bf:
06:9d:d2:79:fd:ed:ff:5e:60:6a:e0:db:64:fc:e0:
38:e6:a1:e4:19:01:58:cb:5d:53:79:36:6a:95:53:
75:78:4d:3f:2e:ed:4c:8c:38:40:01:15:0f:ec:98:
a8:b3:0e:b5:88:b9:3e:e1:7d:b4:cc:97:af:85:40:
4f:1b:97:6d:e5:88:75:86:62:9f:eb:50:aa:81:2f:
15:d8:22:c6:f8:c8:7a:9f:06:22:34:fc:76:98:39:
c6:c4:d9:de:98:c6:a0:63:db:b9:bf:b4:8e:33:5a:
4c:89:e6:14:da:73:5f:fd:a2:c6:54:a4:96:c6:3e:
9c:93:1e:25:4d:23:cc:8c:10:f8:56:45:79:a1:da:
2b:29:6d:1f:62:35:17:e9:d5:f8:48:62:c3:86:32:
b5:30:e8:ac:20:c8:cd:50:6c:08:64:d8:3a:b6:7c:
b8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:64:6E:A8:98:DD:88:24:79:CF:35:4D:CC:01:94:B1:ED:EF:81:13
X509v3 Authority Key Identifier:
keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/326130373a323438363a6665303a3a2f34342d3438203d3e203434333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:fe0::/44
Signature Algorithm: sha256WithRSAEncryption
32:0e:b4:a0:e4:00:46:6c:2c:c9:51:67:d0:1f:2e:08:77:1e:
ba:38:75:21:bb:dd:25:84:19:8a:cf:b1:66:f2:99:f5:e3:d4:
60:9b:aa:b1:76:2e:d7:bd:a8:18:c8:73:56:48:c8:13:90:56:
e0:38:23:e1:f2:46:36:c7:30:22:d8:8d:0d:40:46:c1:68:27:
9e:92:c3:c8:6e:2c:54:a1:2e:d0:21:64:0c:ea:3a:c9:25:7c:
e4:ce:5f:1c:9b:6e:f3:43:57:7c:17:10:63:c4:22:34:8c:67:
8c:28:9d:d4:b9:f3:53:23:74:7a:21:97:df:c5:f7:0b:a4:60:
29:18:9c:f2:1d:c6:f8:a5:84:c3:7d:71:dd:26:a6:5d:0d:fb:
c0:db:d1:ee:f4:f9:47:03:52:39:4f:93:67:59:50:5f:ce:02:
46:80:53:90:ab:bb:d8:4f:dd:bb:e6:92:d7:0f:02:8d:ac:79:
fd:24:a4:72:d4:72:1a:a3:54:fe:4f:15:5e:23:8d:46:8f:b7:
e5:70:d5:26:71:f1:8c:fa:a5:b6:12:b6:f6:18:11:46:ee:a0:
32:60:ac:8e:3e:b9:18:04:01:f5:25:44:46:25:bf:e4:c2:4f:
fd:10:40:fc:29:80:0b:84:9c:1f:06:bc:f7:d7:3d:b0:b8:59:
ef:23:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 14:43:49 2024 by rpki-client on console-fra.rpki-client.org