Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323136303431.roa
File: 326131313a323963303a32633a3a2f34382d3438203d3e20323136303431.roa (raw, json)
Hash identifier: Sw3+8j2rk3PoEoYONvHePFfgpq6Afx8m/C2bRvcv0Ig=
Subject key identifier: 6D:DF:1B:AA:DF:0F:3C:96:B2:9E:B1:EA:1A:2C:95:25:65:D5:62:C4
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 450A4F5AF9F4D942E0DA7A07749AE609256841F5
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323136303431.roa
Signing time: Fri 17 Nov 2023 19:28:40 +0000
ROA not before: Fri 17 Nov 2023 19:23:40 +0000
ROA not after: Fri 15 Nov 2024 19:28:40 +0000
asID: 216041
IP address blocks: 2a11:29c0:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0a:4f:5a:f9:f4:d9:42:e0:da:7a:07:74:9a:e6:09:25:68:41:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Nov 17 19:23:40 2023 GMT
Not After : Nov 15 19:28:40 2024 GMT
Subject: CN=6DDF1BAADF0F3C96B29EB1EA1A2C952565D562C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:82:5c:68:86:8b:f8:4d:01:63:68:3f:2c:
20:6d:f1:d2:6b:6e:8a:32:0b:35:23:d7:aa:97:fc:
ef:ab:60:83:7b:60:b8:ea:19:a0:4e:16:bd:7b:c2:
f8:03:ca:fe:a0:f2:8c:bc:fc:ee:e8:0b:97:92:cd:
8f:5f:52:6f:3d:b1:ab:f8:f1:79:21:ef:74:23:52:
6c:5d:1b:bf:07:bd:01:19:24:e0:cb:3f:f8:80:e7:
e8:2f:68:ec:f5:2b:b8:b3:c9:53:d6:c4:c9:7f:1d:
7d:2b:93:63:f3:01:33:94:bd:f7:8a:e6:0e:0b:ff:
24:62:6d:c2:b7:79:f6:2f:4b:4f:3c:79:dc:6a:05:
28:75:36:ad:f9:27:ce:96:48:0a:d3:4e:f0:71:68:
ef:63:09:05:c0:30:8b:4b:9b:72:b4:da:96:8e:ec:
99:50:45:aa:b0:59:8d:55:6b:c5:a8:4b:42:a5:46:
23:82:25:07:11:fc:c0:1f:78:d9:d6:0e:2a:3e:bf:
74:a4:61:58:e3:38:d9:6d:85:50:3c:a8:58:3e:ae:
42:32:d2:47:79:13:f2:4f:52:e8:ac:b1:05:30:96:
00:f4:4f:69:28:63:e4:47:ca:94:0f:80:e9:6c:c9:
8f:d0:ae:88:3a:23:84:42:41:bb:31:00:3c:84:be:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:1B:AA:DF:0F:3C:96:B2:9E:B1:EA:1A:2C:95:25:65:D5:62:C4
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323136303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2c::/48
Signature Algorithm: sha256WithRSAEncryption
29:0d:d3:4e:ca:fc:41:68:6c:ec:b2:49:11:22:0b:d1:a5:52:
ee:8c:40:c9:15:c6:85:c2:79:ea:6a:82:65:69:52:28:46:8d:
cd:ce:d7:2d:72:24:c8:b7:ba:e5:07:b4:67:ba:e8:22:77:f9:
15:08:f8:f0:4e:be:a0:d5:fd:ce:b4:d0:11:f8:45:53:0e:8c:
c1:af:32:bb:b3:39:46:cb:26:5e:ac:1b:43:99:c8:33:f4:dd:
91:cf:52:1a:b9:57:b7:1c:3a:65:42:3c:3a:12:3d:95:d8:a7:
c2:7d:f9:d8:05:59:d1:db:a8:ef:ac:ca:f6:23:44:9c:3f:95:
eb:bf:50:76:36:39:04:39:ad:cb:bc:bb:ee:39:4e:5d:e6:5e:
de:b4:d9:6b:3b:bd:c3:63:35:65:2d:0c:16:a0:13:d3:d9:24:
0e:7d:28:96:55:c0:28:ba:4a:98:13:67:aa:b9:5d:40:09:41:
2e:dd:c9:16:f3:c2:8c:76:ea:93:cf:9f:4e:4b:9e:47:af:c9:
e2:c3:0d:1a:20:44:1b:33:b9:1b:6c:cf:7d:4f:42:5e:59:f2:
6e:71:01:78:ba:c5:85:76:f8:df:b4:8b:c4:b2:0e:58:18:93:
f3:2b:ab:d2:75:b5:8c:bc:7d:71:5a:37:12:b9:d0:48:f0:0f:
c1:57:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 20:25:27 2024 by rpki-client on console-ams.rpki-client.org