Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa
File: 326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier: Op0EW+JVufcUwrTwCqn1clj3UsdMDc1PAREwIH9B2YI=
Subject key identifier: ED:CE:90:F2:41:08:F5:7A:BA:52:3E:EC:79:3D:83:DD:3E:B0:BC:0A
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 3EC381DEDD285EDACBFDF0B602F706C76CE186FA
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa
Signing time: Tue 12 Mar 2024 11:53:59 +0000
ROA not before: Tue 12 Mar 2024 11:48:59 +0000
ROA not after: Tue 11 Mar 2025 11:53:59 +0000
asID: 20473
IP address blocks: 2a13:9500:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c3:81:de:dd:28:5e:da:cb:fd:f0:b6:02:f7:06:c7:6c:e1:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Mar 12 11:48:59 2024 GMT
Not After : Mar 11 11:53:59 2025 GMT
Subject: CN=EDCE90F24108F57ABA523EEC793D83DD3EB0BC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:52:c9:19:5d:e5:68:aa:2e:b6:5e:41:0e:
ac:9b:f3:01:09:7b:da:d4:f8:6f:ae:fd:6c:e1:f1:
73:58:ae:10:15:e2:3a:62:2a:06:70:0a:1e:f1:7f:
a9:58:ee:25:ac:70:6f:bd:be:f6:32:14:1a:73:db:
8b:47:7a:bd:f9:db:3f:7c:18:6e:36:83:fa:58:69:
b8:31:4b:77:5c:9b:73:2a:8e:bb:4e:d0:06:12:e9:
ac:56:ee:97:61:25:94:0b:e0:8d:e7:6e:e9:8a:80:
26:b5:57:2d:60:fe:d9:44:35:b7:09:2b:48:cd:c2:
f5:e2:39:f0:d0:c0:96:6f:ff:b7:c4:3d:a9:7b:e4:
61:25:7a:63:65:da:bf:17:8b:9a:a6:74:7b:07:0f:
70:89:2e:7a:42:7f:0d:ff:f6:d1:85:37:e5:8c:91:
6f:82:5f:e6:fb:6b:8e:fd:6e:16:6e:fa:3c:94:56:
7c:01:a5:cb:88:56:3f:ec:e6:fd:f8:03:a1:64:0a:
3a:2b:2b:9b:4c:2c:73:40:26:5c:a4:63:1c:d0:84:
23:28:37:30:f8:59:82:14:27:64:83:32:0d:e3:ab:
39:27:68:82:c5:2c:d5:bc:cf:97:d4:2a:6c:a2:36:
d8:a0:6e:61:aa:a0:fa:12:87:dd:39:e9:ff:6e:73:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:90:F2:41:08:F5:7A:BA:52:3E:EC:79:3D:83:DD:3E:B0:BC:0A
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a323a3a2f34382d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:2::/48
Signature Algorithm: sha256WithRSAEncryption
7a:7b:56:97:0c:ab:46:75:4b:1d:36:19:e6:d7:7d:c2:95:4b:
dc:f6:03:1a:9e:1e:ec:89:19:e3:67:55:07:7e:9f:ce:11:76:
b2:90:8a:f0:92:02:41:75:1d:5a:1a:c8:0e:2a:c7:28:67:cf:
39:f4:f7:e6:38:ac:69:60:f3:ef:9b:cb:d2:d1:b8:ac:aa:a9:
29:8d:5e:48:d3:96:6f:bb:f3:61:69:28:70:e0:86:87:e3:60:
03:9f:de:a1:00:57:4c:7d:5d:10:62:54:c1:a5:7b:67:6f:e2:
3a:de:d0:f4:5d:c5:a3:53:1a:4f:f9:98:81:ca:04:34:29:cc:
11:09:7b:73:f3:fd:35:61:dc:ea:75:25:68:ed:30:83:35:13:
c8:d1:d0:39:68:17:47:b5:e6:c3:30:42:c0:9e:32:37:a0:de:
b2:37:ba:65:5d:fe:2f:c0:4c:2d:43:fa:5f:5b:09:e6:43:61:
6d:8a:01:14:27:5a:5a:13:57:49:8c:f5:96:86:3b:ec:9e:c3:
8f:b5:db:fb:bb:8e:e3:e0:59:d2:7a:e0:ee:88:0f:75:1a:17:
e8:1b:53:82:27:ed:b5:1e:1c:09:55:e5:81:68:ca:e1:32:fa:
d1:f1:24:1f:fd:3c:ba:f6:68:ba:e8:7b:c5:53:f8:c6:7a:64:
18:51:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:42:51 2024 by rpki-client on console-fra.rpki-client.org