Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa
File: 326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa (raw, json)
Hash identifier: ds2lLDZSGHcfh58rWef0UZxx/m9PPbld4zjLoa1VJNk=
Subject key identifier: 6D:FB:A8:B8:A2:3B:81:59:27:20:DD:85:6C:83:A6:41:99:5A:E4:D8
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 7FD37ACDE7EA06CB69493496E78B53513C3FDB3C
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa
Signing time: Wed 19 Jul 2023 13:30:16 +0000
ROA not before: Wed 19 Jul 2023 13:25:16 +0000
ROA not after: Wed 17 Jul 2024 13:30:16 +0000
asID: 208771
IP address blocks: 2a11:29c0:3df9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d3:7a:cd:e7:ea:06:cb:69:49:34:96:e7:8b:53:51:3c:3f:db:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jul 19 13:25:16 2023 GMT
Not After : Jul 17 13:30:16 2024 GMT
Subject: CN=6DFBA8B8A23B81592720DD856C83A641995AE4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:15:92:10:a5:4d:26:f7:63:4a:07:39:53:
ef:b7:c9:a9:0a:db:f2:ce:e1:a7:f8:62:b7:cd:79:
cf:da:a8:b9:ac:1c:a8:eb:ae:f8:27:8d:25:c5:75:
77:2c:7f:36:f2:be:35:13:d7:cb:a1:ae:86:a5:4b:
33:65:de:b9:a7:82:d1:7b:72:e7:22:9d:22:c5:be:
23:77:cd:2b:1b:df:59:9a:a0:b8:a5:8b:a4:5a:fc:
49:57:45:57:69:e5:33:9b:c0:50:ae:4f:2f:b7:d7:
38:a6:1f:8f:11:eb:33:3c:fe:32:e5:e7:c7:17:5c:
80:70:f7:d5:46:ac:7a:8c:95:72:a1:70:91:9d:32:
61:8e:0b:7b:dc:8e:d2:6b:ad:31:a0:3a:51:21:30:
52:68:d2:98:ba:2e:56:3c:ab:9a:58:ce:b4:de:6f:
17:21:06:c5:c5:9c:eb:de:23:07:14:5c:ad:18:00:
6f:22:d5:fa:a7:4e:30:81:15:3c:1f:cf:b3:59:ea:
e7:3e:61:e0:e9:70:38:ad:64:06:68:74:50:12:50:
27:d8:25:9f:2f:4d:d5:1f:1b:b9:a1:41:a7:36:a2:
18:ac:74:f0:d5:31:a9:97:7a:d2:7d:e4:d0:fa:20:
c8:7c:c7:f7:7b:8a:c2:2e:06:a4:96:4a:e9:32:4b:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FB:A8:B8:A2:3B:81:59:27:20:DD:85:6C:83:A6:41:99:5A:E4:D8
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466393a3a2f34382d3438203d3e20323038373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df9::/48
Signature Algorithm: sha256WithRSAEncryption
31:c9:27:b9:f2:f3:1d:67:1e:79:b4:21:44:c3:8f:67:ce:c8:
c7:17:ee:ad:ac:ed:a1:5b:d8:c6:46:47:a8:7f:7c:e9:29:ba:
b3:08:de:84:86:e3:f4:60:38:e4:6b:b5:b1:e7:e1:9b:ca:cb:
e9:0f:54:01:49:b2:a6:bb:82:e3:c1:7a:47:f7:f0:a0:6c:f1:
0a:64:84:e5:94:9d:a8:4a:b1:88:80:67:5c:3f:3d:8c:0e:40:
af:e9:af:76:e9:48:55:0b:58:68:8a:4b:d4:55:b5:46:45:e3:
95:12:58:5a:28:47:08:1e:bc:f9:f1:c2:be:5f:b8:63:ff:c4:
10:13:05:fe:9e:38:01:16:e9:f6:ec:29:00:b4:89:d1:1e:df:
f0:71:65:b2:7b:c2:40:01:ba:58:f8:b9:66:12:40:7b:b6:a8:
2b:91:51:92:58:98:b8:10:c7:2e:00:3d:67:62:a4:2c:4f:de:
21:1f:2b:be:97:85:f0:a6:56:73:7b:e9:8d:dc:90:86:e4:2f:
57:2f:5e:c1:48:cf:1e:0a:87:db:30:a7:f7:26:90:13:14:10:
d2:69:cf:c0:4c:62:16:43:59:5f:e2:b2:66:26:72:5d:0b:ad:
c2:05:ee:2c:3e:74:62:39:e8:a9:50:39:87:d7:96:4e:cf:49:
78:01:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:58:21 2024 by rpki-client on console-ams.rpki-client.org