Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a393530303a3a2f34302d3438203d3e20323037333134.roa
File: 326131343a373538313a393530303a3a2f34302d3438203d3e20323037333134.roa (raw, json)
Hash identifier: 0w/yCAVvhS5CASVIavdd6vjYhFIdGG4XHQhWVpTapvY=
Subject key identifier: AC:F5:AF:6F:68:C3:37:B4:E5:69:B9:C8:7B:44:67:39:AC:0B:B4:69
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5D99ABE5C852D74C6AB6E2F77C39EDB625EEA8E1
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a393530303a3a2f34302d3438203d3e20323037333134.roa
Signing time: Fri 21 Jun 2024 15:15:22 +0000
ROA not before: Fri 21 Jun 2024 15:10:22 +0000
ROA not after: Fri 20 Jun 2025 15:15:22 +0000
asID: 207314
IP address blocks: 2a14:7581:9500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:99:ab:e5:c8:52:d7:4c:6a:b6:e2:f7:7c:39:ed:b6:25:ee:a8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 21 15:10:22 2024 GMT
Not After : Jun 20 15:15:22 2025 GMT
Subject: CN=ACF5AF6F68C337B4E569B9C87B446739AC0BB469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:cb:f8:21:57:6a:1d:93:4d:6a:7a:6c:8e:
d1:62:d3:3d:0b:53:f5:f1:64:af:6c:87:ec:da:17:
76:da:42:0f:d2:bb:a6:d5:df:2f:e4:21:26:ee:13:
df:8b:5d:2d:77:8c:b2:29:ef:fe:df:b2:fb:57:29:
3d:db:37:1f:0a:81:da:8f:ba:32:32:43:ee:c9:e9:
18:1e:d1:03:38:8b:86:5d:df:ec:13:01:00:14:f8:
ac:50:ae:9a:bd:25:5e:a4:5e:8b:7a:f1:a9:08:6a:
6c:e2:9e:e5:85:42:76:72:66:ba:d3:1b:af:02:36:
42:ac:a8:97:b9:3d:16:57:29:b4:d2:48:3b:66:d0:
4e:5b:51:49:f5:94:ce:57:91:00:4f:cb:33:ea:88:
23:5d:c0:9d:76:50:6f:dc:f6:75:83:86:b8:10:c1:
13:5b:df:68:51:ee:57:60:7d:ca:c9:6e:f7:ad:79:
f0:a0:ea:72:fe:2d:77:a0:3c:a9:92:9a:fd:31:47:
e5:0e:48:15:6a:d0:77:af:72:b0:62:a4:64:2c:63:
73:f2:97:b8:56:ca:07:39:97:04:90:08:54:c8:cf:
8b:b8:cd:63:99:0c:5e:d9:93:57:80:29:5c:0f:19:
54:9b:d5:a6:cd:d1:e4:b0:4d:8f:55:4c:ef:c2:6d:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F5:AF:6F:68:C3:37:B4:E5:69:B9:C8:7B:44:67:39:AC:0B:B4:69
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a393530303a3a2f34302d3438203d3e20323037333134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9500::/40
Signature Algorithm: sha256WithRSAEncryption
58:05:f2:cf:9e:69:85:7f:07:27:69:12:96:ef:e7:a3:57:81:
ea:79:8c:15:63:9e:0d:9e:bf:cb:92:1f:fc:60:2f:cb:e5:a8:
7d:43:a9:d1:95:7f:dc:3f:ac:45:1f:7b:2b:3e:ff:e2:02:76:
88:94:59:7d:b0:97:ee:7d:61:f6:3a:dc:c2:ba:04:95:3e:35:
82:24:a7:37:3c:3f:a4:5f:44:42:07:df:8c:3d:ce:f8:94:5e:
e8:63:28:73:e7:40:27:7c:07:82:2c:eb:15:42:8a:6f:b0:f7:
a4:93:73:a5:ed:43:fe:d1:5b:6f:1f:20:7f:b1:7c:7e:e7:99:
eb:11:5e:9c:27:10:50:d1:33:7f:8d:4d:7a:50:03:5d:95:05:
65:27:fe:9e:55:a9:97:f9:0e:7a:29:b4:7a:38:40:17:cd:ac:
81:16:4d:c3:62:d1:fd:43:34:e2:a0:9a:e6:67:fe:c7:a4:a3:
5e:4a:5f:d1:51:fb:bd:f3:4c:6d:73:50:60:79:a1:a4:0d:e9:
7a:5b:b2:17:92:e0:27:e3:43:5e:63:e2:80:66:ac:d0:9b:82:
28:46:20:ef:10:fd:17:aa:bd:a7:c3:5a:14:bc:e5:44:db:0b:
7d:33:0f:f3:eb:b4:46:16:dd:e6:e2:fc:5a:b9:10:3a:1c:9e:
c4:90:ee:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:16 2024 by rpki-client on console-ams.rpki-client.org