Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
File: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (raw, json)
Hash identifier: Rl9ZLRzfeQ5TMFtwjNkqn4HdcQhs+IV2vQHawTO70HM=
Subject key identifier: 90:A2:B7:EA:B6:E1:40:14:68:D0:FD:63:95:74:8C:E6:73:65:5A:BD
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 5F701E8C1A4FFF4980058315CF4893FF95FDCB07
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
Signing time: Fri 13 Oct 2023 19:55:05 +0000
ROA not before: Fri 13 Oct 2023 19:50:05 +0000
ROA not after: Fri 11 Oct 2024 19:55:05 +0000
asID: 202881
IP address blocks: 2001:67c:2be8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:70:1e:8c:1a:4f:ff:49:80:05:83:15:cf:48:93:ff:95:fd:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Oct 13 19:50:05 2023 GMT
Not After : Oct 11 19:55:05 2024 GMT
Subject: CN=90A2B7EAB6E1401468D0FD6395748CE673655ABD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:e3:b5:41:25:60:be:1c:06:cf:6e:9b:96:
96:68:31:0e:3c:d7:63:e6:31:d3:15:b1:44:72:2c:
d4:4e:31:ab:26:d8:b0:0c:ee:1e:71:3b:95:ab:a7:
a4:90:12:ad:2f:c4:af:b1:8a:a0:e0:ae:1c:d8:82:
4f:a5:40:e4:42:3e:0b:d2:10:d2:ce:cd:ec:84:40:
9e:9e:5a:ab:fb:9a:14:03:a8:f4:5a:07:dc:85:51:
1a:be:86:29:41:38:6d:69:23:59:0f:84:e3:85:73:
28:6d:61:49:f7:63:f7:22:d0:b6:b3:d3:c3:ef:56:
e4:27:01:26:72:89:b4:f5:74:d2:4a:a9:cc:f8:47:
66:18:63:f1:ec:9c:39:e6:82:4c:83:7f:94:1c:fb:
a4:d3:07:77:d6:a9:8a:f3:41:52:c6:82:d7:76:5f:
87:f0:76:7f:df:16:47:36:40:cf:44:1d:ff:11:df:
93:b3:fe:07:ed:29:10:27:1d:6d:f9:27:fb:f0:d2:
d5:3f:ea:de:23:81:32:00:32:9d:34:17:e0:6e:58:
b2:b6:d0:9c:90:3f:70:31:4c:77:f9:86:86:0e:47:
26:b0:19:82:88:09:18:91:8f:0f:14:9f:3c:23:ed:
de:60:d7:07:e4:97:68:11:cf:59:3c:b7:6e:83:8f:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:B7:EA:B6:E1:40:14:68:D0:FD:63:95:74:8C:E6:73:65:5A:BD
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be8::/48
Signature Algorithm: sha256WithRSAEncryption
de:59:59:46:23:41:c9:74:86:4e:2e:4d:50:69:bd:dc:12:e3:
64:04:ec:45:5a:79:6a:8a:32:05:9a:f8:ad:93:e1:3b:26:0b:
00:e0:f3:5b:8f:93:0a:3b:b9:38:af:a0:fa:de:4a:62:3c:08:
28:e1:4d:aa:fd:02:8f:6c:8b:95:4c:ba:a9:d5:ff:a6:7c:2d:
b8:12:85:b3:17:1a:f8:65:25:ef:2e:e2:42:47:89:0f:84:53:
35:36:d8:38:fe:18:e1:b8:e3:54:7a:7a:be:39:64:81:b2:16:
a8:39:97:6c:59:d3:d9:96:63:34:27:52:90:1f:13:93:20:69:
82:9a:52:40:ca:49:58:95:dc:00:2f:d3:28:81:98:ed:21:f2:
da:f7:84:87:bb:bb:cc:c4:ae:55:0c:27:1e:1a:de:17:77:b4:
f3:ad:c3:31:30:ea:ce:21:31:3c:69:9f:16:06:4c:15:7d:e2:
c4:9e:14:89:32:f8:3e:26:6b:e8:bc:b7:fc:01:88:80:7a:cf:
a8:c1:e5:89:f3:7d:78:94:6d:98:da:e9:50:0d:b1:65:b6:b9:
45:34:cc:fe:60:52:a8:cd:a6:cf:aa:75:52:d7:80:9b:3b:05:
c6:cb:f7:7b:bd:6a:9e:ad:ef:cf:44:71:52:ff:03:76:d8:e8:
0f:f5:69:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:35:14 2024 by rpki-client on console-fra.rpki-client.org