Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203239383032.roa
File: 326131333a393530303a343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier: LLY6577naLK/UpPVe6xTlRnamy4REzJp7U4BvY5lSI0=
Subject key identifier: E4:8E:5B:E1:48:1E:B5:34:50:C7:11:E5:90:6F:67:11:21:AF:BF:56
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 465131EDC65F85415B37C955E126D2E1CDC25C49
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203239383032.roa
Signing time: Fri 01 Dec 2023 07:43:39 +0000
ROA not before: Fri 01 Dec 2023 07:38:39 +0000
ROA not after: Fri 29 Nov 2024 07:43:39 +0000
asID: 29802
IP address blocks: 2a13:9500:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:51:31:ed:c6:5f:85:41:5b:37:c9:55:e1:26:d2:e1:cd:c2:5c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Dec 1 07:38:39 2023 GMT
Not After : Nov 29 07:43:39 2024 GMT
Subject: CN=E48E5BE1481EB53450C711E5906F671121AFBF56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:0b:53:33:12:23:c8:b6:25:e2:ba:fa:80:
4c:5e:f9:0f:95:dd:9b:6c:23:2e:41:71:4e:a5:15:
67:aa:53:15:94:2c:24:bc:10:4a:fa:da:39:db:67:
ea:cc:16:92:dd:e7:3e:df:cd:c6:f5:08:c8:c1:6d:
cf:05:28:0f:fb:ff:a7:ff:ff:98:e9:d9:6c:1c:3b:
c9:c2:72:ef:4f:d1:ae:14:08:f2:5d:fe:30:f6:64:
10:64:0f:ff:09:1a:f6:3a:0d:48:b9:ff:34:44:b2:
21:87:63:16:c9:0d:1f:11:d4:9e:b3:2e:b5:a0:2e:
13:54:33:3a:d5:53:fe:6b:5d:70:ea:a6:9d:06:c6:
ca:c6:04:da:d9:aa:c7:19:e4:8f:64:8c:00:6f:29:
4b:f9:59:30:8b:ed:5c:cd:1e:c9:7c:03:47:f1:58:
8e:aa:e6:25:11:71:c1:ed:bf:bc:67:9a:c1:42:68:
1a:70:3d:93:d1:bb:94:7d:c5:76:48:cf:d3:30:9b:
f8:6c:16:9a:48:6f:0d:56:c2:bc:db:a3:c8:d6:bb:
ac:9f:28:a5:9e:39:51:31:bd:c3:c9:50:49:6b:69:
1e:26:34:3d:d4:01:b4:2a:95:c7:6e:0d:67:ca:83:
3a:2f:c5:02:ab:01:1e:40:a6:91:e3:31:9f:00:e2:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:5B:E1:48:1E:B5:34:50:C7:11:E5:90:6F:67:11:21:AF:BF:56
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:4::/48
Signature Algorithm: sha256WithRSAEncryption
71:7b:a9:ad:94:b0:5f:9d:08:8b:d4:18:00:f1:65:d0:3e:fc:
da:4f:91:53:2b:5d:4a:8d:2b:dc:d1:3f:74:1d:15:e1:41:19:
c2:09:9d:0a:3c:f4:3b:bc:0c:7c:ef:35:b4:cb:f2:d8:f6:1c:
20:23:4b:30:f8:98:60:21:1c:69:42:6c:41:3e:bd:7d:d3:9a:
11:04:a6:b6:2d:52:ec:bf:e8:00:17:98:2a:ed:5b:7a:f4:61:
1e:28:84:65:77:ec:64:be:65:15:35:43:22:f3:07:5b:c7:5c:
b7:65:f1:00:37:f2:24:65:6d:66:b0:30:0a:49:bf:b1:7a:79:
78:92:f4:58:a3:8a:04:5f:f6:aa:f1:65:78:42:bd:bc:39:08:
a0:54:9d:3b:26:14:7c:77:2f:7b:15:87:29:b7:57:e0:85:a8:
82:63:bb:d6:9b:e4:9f:9a:69:7e:90:46:d6:26:67:60:77:dc:
d6:dc:86:eb:3e:fb:a1:ff:70:73:f2:93:03:30:a3:30:18:0e:
a8:9e:d9:5a:7a:9b:91:26:25:77:3a:c4:76:87:84:1f:4d:87:
00:a1:9b:9c:57:4f:c7:0a:41:81:37:e4:f2:84:45:c4:1f:2e:
6f:89:c7:4e:28:b4:4a:e0:39:a5:3c:bd:ff:a1:31:35:30:16:
29:ae:a6:69
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIURlEx7cZfhUFbN8lV4SbS4c3CXEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiMjljZjFiN2U3Yjk0ZjYzNmVkYTc1ZTIyOTk4NzM2
NGE0MGQ0ZDAeFw0yMzEyMDEwNzM4MzlaFw0yNDExMjkwNzQzMzlaMDMxMTAvBgNV
BAMTKEU0OEU1QkUxNDgxRUI1MzQ1MEM3MTFFNTkwNkY2NzExMjFBRkJGNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQQtTMxIjyLYl4rr6gExe+Q+V
3ZtsIy5BcU6lFWeqUxWULCS8EEr62jnbZ+rMFpLd5z7fzcb1CMjBbc8FKA/7/6f/
/5jp2WwcO8nCcu9P0a4UCPJd/jD2ZBBkD/8JGvY6DUi5/zREsiGHYxbJDR8R1J6z
LrWgLhNUMzrVU/5rXXDqpp0GxsrGBNrZqscZ5I9kjABvKUv5WTCL7VzNHsl8A0fx
WI6q5iURccHtv7xnmsFCaBpwPZPRu5R9xXZIz9Mwm/hsFppIbw1Wwrzbo8jWu6yf
KKWeOVExvcPJUElraR4mND3UAbQqlcduDWfKgzovxQKrAR5AppHjMZ8A4sCFAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU5I5b4UgetTRQxxHlkG9nESGvv1YwHwYDVR0j
BBgwFoAU6LKc8bfnuU9jbtp14imYc2SkDU0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2M4ZmY3YTktNTRiYi00MmE1LWI1ODQtMWM2Njg0MDYy
ZDhhLzAvRThCMjlDRjFCN0U3Qjk0RjYzNkVEQTc1RTIyOTk4NzM2NEE0MEQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMS2M4YmZudVU5amJ0cDE0aW1ZYzJT
a0RVMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2M4ZmY3YTkt
NTRiYi00MmE1LWI1ODQtMWM2Njg0MDYyZDhhLzAvMzI2MTMxMzMzYTM5MzUzMDMw
M2EzNDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAqE5UAAAQwDQYJKoZIhvcNAQELBQADggEBAHF7qa2UsF+dCIvUGADxZdA+/NpP
kVMrXUqNK9zRP3QdFeFBGcIJnQo89Du8DHzvNbTL8tj2HCAjSzD4mGAhHGlCbEE+
vX3TmhEEprYtUuy/6AAXmCrtW3r0YR4ohGV37GS+ZRU1QyLzB1vHXLdl8QA38iRl
bWawMApJv7F6eXiS9FijigRf9qrxZXhCvbw5CKBUnTsmFHx3L3sVhym3V+CFqIJj
u9ab5J+aaX6QRtYmZ2B33Nbchus++6H/cHPykwMwozAYDqie2Vp6m5EmJXc6xHaH
hB9NhwChm5xXT8cKQYE35PKERcQfLm+Jx04otErgOaU8vf+hMTUwFimupmk=
-----END CERTIFICATE-----
Generated at Tue Apr 30 12:15:34 2024 by rpki-client on console-fra.rpki-client.org