Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa
File: 326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa (raw, json)
Hash identifier: GMrgIdYKjjkedp4qSoWbHVuT7DtHbyZuJfFZ6k8x7vk=
Subject key identifier: 1C:39:40:BB:54:6F:1E:D2:0B:B1:35:6B:12:33:EE:C5:2D:15:F3:B3
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 2F097844DA42311DAF764515B9C7807DED4AB872
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa
Signing time: Thu 19 Oct 2023 14:04:18 +0000
ROA not before: Thu 19 Oct 2023 13:59:18 +0000
ROA not after: Thu 17 Oct 2024 14:04:18 +0000
asID: 61317
IP address blocks: 2a13:9500:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:09:78:44:da:42:31:1d:af:76:45:15:b9:c7:80:7d:ed:4a:b8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Oct 19 13:59:18 2023 GMT
Not After : Oct 17 14:04:18 2024 GMT
Subject: CN=1C3940BB546F1ED20BB1356B1233EEC52D15F3B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:1d:c7:16:10:f1:4c:42:3f:af:f8:0d:8d:
40:0c:bc:e3:fd:dc:5b:d5:6c:7a:19:60:53:7d:33:
db:d8:b8:a4:d7:7b:7a:20:24:87:7c:15:ae:d4:8b:
38:e8:a8:30:06:4c:e1:1d:68:31:8d:90:d8:09:20:
43:bd:e9:97:d3:bc:ca:2b:d8:41:40:5d:75:7c:49:
e0:f3:15:e8:7b:d4:14:b0:aa:d3:51:19:55:c0:52:
77:5d:51:43:9e:06:57:b7:de:eb:60:33:5c:4e:49:
53:a8:84:db:e7:5d:d9:b2:88:68:6c:65:b3:c1:fc:
78:46:e8:f1:4c:20:a7:ba:91:96:c4:b9:84:5b:f8:
b5:15:ac:71:68:cd:2a:a7:67:d7:1b:80:bd:5f:41:
03:67:ed:f6:fd:50:b1:c3:a8:40:9f:5f:a7:2c:7b:
12:13:52:b1:5c:e7:78:ab:a9:5f:37:7e:5d:ce:ca:
e2:70:7e:05:97:57:1e:ba:0c:17:35:f3:42:45:0c:
dc:d6:a3:6e:4f:b3:fd:11:a5:83:d9:57:de:fb:e2:
c6:9c:57:93:5c:64:bb:d5:f6:52:21:c2:1d:77:d8:
88:96:d5:ea:a1:43:30:b6:9e:d1:71:0e:e8:cf:90:
b6:7d:b1:2b:d3:09:c0:a6:68:c1:12:14:2f:1e:cd:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:40:BB:54:6F:1E:D2:0B:B1:35:6B:12:33:EE:C5:2D:15:F3:B3
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a343a3a2f34382d3438203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:4::/48
Signature Algorithm: sha256WithRSAEncryption
2b:c1:61:c0:e7:09:f8:76:9e:88:c0:63:01:68:f6:ba:39:f0:
3b:24:7a:c2:8b:26:01:48:9e:e9:4c:3c:39:dd:68:69:b0:d1:
c0:7d:0e:30:0f:87:c9:16:ee:b2:ad:9d:87:11:91:21:9f:0d:
6f:6b:fa:7b:e9:65:25:46:1f:1b:40:b9:67:dc:04:c4:cc:4c:
7a:f6:92:42:9b:fb:db:eb:d4:d0:ef:11:67:35:a9:30:cf:21:
6a:e9:bb:5f:07:71:26:27:ed:06:fa:e7:04:ae:b5:8e:e3:39:
aa:5a:23:fb:ff:d3:d7:c8:4f:b2:52:e1:db:c2:03:a6:fc:a9:
77:c1:91:ec:c9:44:5c:56:cb:4e:c4:a4:0c:02:36:30:bd:f8:
6a:5e:0e:6c:ae:c8:4d:34:66:7a:be:b5:eb:f8:99:25:85:5f:
5e:e4:e4:c7:1a:68:8e:e7:12:f2:55:61:68:29:58:fe:cd:16:
66:5e:3e:ff:d7:18:e7:53:0e:99:3f:99:a1:90:55:b8:cb:03:
6a:23:4a:df:0c:e0:d3:33:bc:da:a4:89:06:ae:71:bc:09:5b:
2a:dc:60:fc:26:ce:c3:e0:a3:57:5e:b0:c5:c1:25:72:ce:42:
ac:f6:a6:60:33:81:ec:73:c7:7e:e6:97:1c:87:4b:b1:8f:c8:
62:4c:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:25:49 2024 by rpki-client on console-ams.rpki-client.org