Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
File: 326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa (raw, json)
Hash identifier: YGp9VzYjL4jR56hnrtKG2rrq7mhLpNWn0acgE0e5CMQ=
Subject key identifier: 5C:65:9A:CB:EA:86:1A:91:7D:A8:D2:F4:90:7D:92:0A:0A:6D:E7:F5
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 0F8EFC046426300A2BDB000DF4981AD0E7C93D3F
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
Signing time: Wed 19 Jul 2023 13:30:10 +0000
ROA not before: Wed 19 Jul 2023 13:25:10 +0000
ROA not after: Wed 17 Jul 2024 13:30:10 +0000
asID: 208333
IP address blocks: 2a11:29c0:3df5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:8e:fc:04:64:26:30:0a:2b:db:00:0d:f4:98:1a:d0:e7:c9:3d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 19 13:25:10 2023 GMT
Not After : Jul 17 13:30:10 2024 GMT
Subject: CN=5C659ACBEA861A917DA8D2F4907D920A0A6DE7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:d1:bc:97:7c:4d:6f:f7:d7:2c:a1:3a:1b:
18:ea:3c:05:98:1a:3c:86:be:bd:01:11:cf:98:a9:
e7:db:c2:61:d7:08:40:95:cb:fa:95:12:56:f8:78:
e0:f3:ea:c8:99:2e:95:93:8e:d9:42:dd:73:92:60:
f7:e6:1e:dc:86:e6:70:40:83:1b:98:98:bb:32:fa:
ef:dc:8e:1d:fc:6e:9e:5d:a6:f2:b4:67:11:ca:23:
6c:15:84:e7:27:ab:2d:75:94:b2:23:96:8b:53:0f:
ba:3e:0b:42:e5:43:47:0c:fe:d3:7d:61:b9:cf:18:
5d:3e:db:c9:4c:ae:14:64:bb:63:cd:ae:a5:16:4a:
fa:bd:11:4d:6f:98:f7:ed:78:c2:e4:08:e5:eb:06:
d5:4a:69:e6:44:99:44:2c:18:41:23:a2:61:c1:e4:
52:60:c7:1f:f3:97:a0:2a:4e:42:07:56:75:0d:7d:
ac:63:11:bd:7d:60:0b:f5:9a:3a:f4:a9:3d:3b:1f:
03:ba:9a:d6:b9:ee:29:c8:0f:02:b0:43:e7:d3:46:
c5:a5:e5:04:1e:05:c8:e0:8d:a2:6e:c6:28:68:c7:
29:1b:cf:46:27:fc:a4:56:76:5b:15:33:98:7f:37:
5a:fe:1a:72:ed:1d:f6:53:a4:c7:fa:2d:e0:e5:98:
bc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:9A:CB:EA:86:1A:91:7D:A8:D2:F4:90:7D:92:0A:0A:6D:E7:F5
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df5::/48
Signature Algorithm: sha256WithRSAEncryption
95:68:f9:77:c0:57:40:00:3c:bd:e7:9e:e6:60:b6:5c:9d:65:
c0:f7:45:0a:35:e1:1c:29:43:e1:ee:ae:d1:0b:48:7c:ed:89:
a4:4a:6a:90:98:8c:5a:54:8b:0d:d6:a0:a8:5f:a2:df:aa:2f:
85:60:0a:85:4d:bc:ef:d7:65:20:c2:36:9d:20:e1:8c:4b:bb:
cb:8e:7c:d9:3e:8f:46:e1:f5:7e:2e:a6:6b:5b:55:63:96:55:
4d:f4:7a:ba:0b:0e:23:c6:d2:96:af:1a:d6:1b:e0:c7:7e:5a:
36:c3:cf:bc:08:ff:08:5f:49:22:a4:3c:5c:6e:b7:1e:97:2a:
00:ca:23:1c:b5:e7:b3:44:5f:a8:77:bf:ef:4f:f1:41:fa:a9:
57:7c:d0:da:99:25:88:2b:04:f1:4f:11:ce:25:a9:7b:65:d1:
24:af:9c:39:4a:69:3c:7a:27:31:14:ca:72:75:6f:96:33:5b:
3c:43:6c:8e:07:42:80:48:b3:c5:58:66:5b:87:88:29:11:72:
e5:b0:24:85:c5:6d:ef:95:50:e9:a3:b5:50:6c:3a:11:35:00:
97:60:61:f4:6c:8c:3f:16:60:7b:b8:0c:a4:aa:d3:0b:59:d3:
56:0d:b9:e2:87:52:34:f9:b7:0b:ed:40:4c:ac:0d:89:7f:9c:
d7:64:c3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 15:59:02 2024 by rpki-client on console-fra.rpki-client.org