Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
File: 323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa (raw, json)
Hash identifier: NDgRNVQCoAKRO1YJTGI1AK9wEBZVvXv1RDhf51rQHng=
Subject key identifier: 01:2C:86:2E:5A:09:83:50:EE:66:CB:32:AA:6B:CD:44:0B:5C:78:6C
Certificate issuer: /CN=7ed778da4a3c37c059929c1861648182d738009f
Certificate serial: 621C0A609F09A4634A7230477023EEA50D644197
Authority key identifier: 7E:D7:78:DA:4A:3C:37:C0:59:92:9C:18:61:64:81:82:D7:38:00:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
Signing time: Wed 08 Nov 2023 14:50:09 +0000
ROA not before: Wed 08 Nov 2023 14:45:09 +0000
ROA not after: Wed 06 Nov 2024 14:50:09 +0000
asID: 208051
IP address blocks: 2001:678:b34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 16:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:1c:0a:60:9f:09:a4:63:4a:72:30:47:70:23:ee:a5:0d:64:41:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed778da4a3c37c059929c1861648182d738009f
Validity
Not Before: Nov 8 14:45:09 2023 GMT
Not After : Nov 6 14:50:09 2024 GMT
Subject: CN=012C862E5A098350EE66CB32AA6BCD440B5C786C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:ea:1f:a1:73:ba:90:5e:01:aa:8a:44:ff:
24:82:3f:ea:64:bc:22:6b:38:50:df:38:e1:5e:f0:
7f:9e:7a:51:32:f6:b2:7c:78:a0:d9:9a:1b:4c:d2:
91:ce:76:e3:1a:77:8a:c5:35:47:66:25:ec:da:b3:
d5:e7:5a:b1:b3:2e:f8:2b:7a:76:ee:3e:5b:a4:fb:
8c:e1:76:c3:74:fa:ae:4e:32:eb:a2:4a:cc:90:94:
46:e9:df:d5:2c:14:d4:c6:b9:8a:f4:51:af:9f:33:
48:f5:b9:84:ce:f1:94:f3:c9:63:dd:4b:db:b8:1e:
34:0d:d2:82:cd:2a:7d:c6:d6:25:a9:a5:80:1d:22:
25:f8:04:fb:b5:a9:1b:b9:d9:b7:98:c0:91:05:cd:
9f:e6:d0:e3:a5:16:9a:35:f7:f4:0d:81:7c:29:b7:
03:dd:89:61:3f:52:1e:49:c4:95:11:b4:19:94:0c:
a6:6d:0c:4b:1d:a2:c2:8f:91:9b:4f:8c:96:51:89:
d8:64:8d:05:04:e1:90:9a:7c:22:7d:43:3e:f3:f5:
68:48:bb:a5:d6:e7:ba:62:c0:de:ac:39:cb:88:c6:
42:14:ad:a2:f3:a8:c2:b0:1e:68:04:67:0f:a1:38:
1d:8d:0b:6f:2a:da:8c:bb:be:a6:c3:a6:66:ab:12:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2C:86:2E:5A:09:83:50:EE:66:CB:32:AA:6B:CD:44:0B:5C:78:6C
X509v3 Authority Key Identifier:
keyid:7E:D7:78:DA:4A:3C:37:C0:59:92:9C:18:61:64:81:82:D7:38:00:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/7ED778DA4A3C37C059929C1861648182D738009F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftd42ko8N8BZkpwYYWSBgtc4AJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/10/323030313a3637383a6233343a3a2f34382d3438203d3e20323038303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b34::/48
Signature Algorithm: sha256WithRSAEncryption
27:f7:a0:6d:8d:19:f8:00:17:f9:ae:f2:4a:d3:4a:cb:6c:78:
d4:40:06:cb:42:ba:74:75:dd:a3:e0:79:7e:2e:7d:6d:b9:57:
6f:06:e7:2c:1b:36:60:f6:41:23:75:a2:d4:c9:2f:67:17:ac:
0f:04:09:b0:46:2c:32:99:7a:9b:46:c5:9a:d5:42:74:dc:bd:
3e:e4:b5:da:68:c4:a5:b6:58:26:1b:89:bc:0d:f0:57:0b:02:
44:9c:b9:56:8c:34:da:ac:f7:99:e8:fa:24:9c:7d:24:cc:4d:
00:1d:8e:ee:ba:6b:1a:4d:36:ba:32:83:6d:51:fa:8b:ee:c4:
f0:2f:49:7e:78:12:94:cc:62:3e:42:ba:fb:20:23:7d:7e:0d:
fe:ff:4a:2b:91:04:e5:5a:f9:9d:b8:95:e1:9d:cc:f7:33:be:
4e:4d:59:36:9c:07:d9:ab:f9:c7:cd:fa:1d:cb:34:44:81:fc:
f5:82:0e:d0:bf:22:e0:61:13:f7:d4:63:ef:17:22:a2:6c:fd:
ab:68:61:2c:ff:1a:f5:87:b5:dc:3f:78:47:22:9c:66:a5:8a:
62:1e:4e:e8:a3:72:3f:e5:88:76:ce:65:af:ed:ba:ce:6b:2e:
fe:09:f9:a8:e3:15:30:af:b6:47:f1:3d:10:32:92:0b:5c:d9:
5a:49:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 02:02:16 2024 by rpki-client on console-ams.rpki-client.org