Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730303a3a2f33322d3332203d3e203438303730.roa
File: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (raw, json)
Hash identifier: v7p6apy1EGQeXgeQMOZ/mTgl2MqVAgWKVI4MG5KZOT4=
Subject key identifier: 37:B5:1E:3A:30:E6:49:89:16:6B:3E:34:F1:FD:56:50:BE:44:C7:D0
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 41FB36C69D277C4EE4B92409A9C66F1AC7AFDF3E
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730303a3a2f33322d3332203d3e203438303730.roa
Signing time: Tue 25 Jul 2023 15:01:16 +0000
ROA not before: Tue 25 Jul 2023 14:56:16 +0000
ROA not after: Tue 23 Jul 2024 15:01:16 +0000
asID: 48070
IP address blocks: 2a11:5700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:fb:36:c6:9d:27:7c:4e:e4:b9:24:09:a9:c6:6f:1a:c7:af:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Jul 25 14:56:16 2023 GMT
Not After : Jul 23 15:01:16 2024 GMT
Subject: CN=37B51E3A30E64989166B3E34F1FD5650BE44C7D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:27:8b:09:b1:51:d3:cc:ea:ab:c8:70:ad:
d3:0c:1b:de:c5:1d:ed:de:36:ca:ae:2f:ef:56:24:
6b:1a:3d:92:d7:b6:4e:99:5a:79:d9:0d:96:af:7f:
a9:5e:e9:a5:dc:18:f1:2e:f9:6a:1a:b2:77:2c:f9:
10:55:2c:6e:60:0a:ed:05:97:2a:6a:78:cb:62:85:
c3:12:39:d3:1c:28:68:c4:be:6f:eb:c6:09:95:f9:
9f:23:9b:1d:25:2b:b8:4b:89:64:aa:51:f9:2f:70:
cb:7a:2d:5f:b3:8b:ba:bd:88:95:40:92:d1:09:a4:
18:f9:8c:90:78:d1:d3:8b:7a:a4:0e:24:90:9e:94:
ee:22:23:e7:14:3e:a1:9b:ee:a8:33:60:d0:7a:73:
cd:52:ef:67:cb:04:c1:b5:6a:f8:9b:cb:b6:35:8c:
91:8f:1b:bf:7a:08:4c:b4:64:14:74:97:9c:ed:2e:
b2:4e:24:07:8c:8b:0a:79:b6:ec:32:d8:08:c5:9c:
85:62:f0:8a:d1:bb:8f:ea:fc:3e:58:f3:f3:e9:ab:
37:b4:2c:f6:9f:fd:02:34:2a:25:e4:ae:56:0c:27:
ef:09:39:45:b2:66:02:c1:8c:de:e4:ef:8d:3d:c8:
ad:e5:1b:e4:3c:83:a9:28:2f:8e:a6:c4:04:7c:d2:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B5:1E:3A:30:E6:49:89:16:6B:3E:34:F1:FD:56:50:BE:44:C7:D0
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730303a3a2f33322d3332203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5700::/32
Signature Algorithm: sha256WithRSAEncryption
60:d7:82:a7:23:24:e8:bb:cd:90:27:21:44:3c:34:04:d8:5b:
e6:0e:02:65:96:29:52:79:8f:bc:4c:40:db:be:ba:e1:e4:5a:
6e:d3:5e:89:8f:23:71:c6:42:d3:1c:a5:a3:58:4b:7b:fd:1e:
11:9a:d5:c5:24:1e:be:e0:a0:e6:02:2a:ee:6b:70:90:06:4a:
9a:8a:57:9f:0d:36:ff:45:81:e3:ad:2f:b3:36:b7:9b:b1:63:
d3:c5:47:67:4d:f7:00:34:a4:c2:df:6b:69:4c:73:27:cd:f0:
61:44:8c:5f:33:d1:68:a6:8a:74:77:d2:0e:3f:5a:2c:e6:cd:
a2:52:b6:5d:11:a4:a6:06:b7:e1:cd:0f:37:69:df:0e:50:e4:
8b:81:87:e1:ca:46:b3:54:26:93:ac:87:f1:76:de:23:ff:d6:
d2:eb:f6:30:46:95:e9:bb:72:7f:ea:b6:c5:ec:35:9e:37:3c:
c1:d4:95:b3:51:cf:11:3e:1b:33:5d:45:1d:37:f5:0a:6c:d6:
6f:b9:20:cb:b9:65:76:29:7f:62:80:08:78:7b:32:4e:c1:24:
c5:2b:d3:43:63:79:74:35:d5:78:fc:0d:0e:ad:15:24:11:4b:
bc:09:f5:9e:1f:ad:90:d2:31:80:a8:b0:e5:dc:30:fb:16:00:
67:fe:4b:e9
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQfs2xp0nfE7kuSQJqcZvGsev3z4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yMzA3MjUxNDU2MTZaFw0yNDA3MjMxNTAxMTZaMDMxMTAvBgNV
BAMTKDM3QjUxRTNBMzBFNjQ5ODkxNjZCM0UzNEYxRkQ1NjUwQkU0NEM3RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VyeLCbFR08zqq8hwrdMMG97F
He3eNsquL+9WJGsaPZLXtk6ZWnnZDZavf6le6aXcGPEu+Woasncs+RBVLG5gCu0F
lypqeMtihcMSOdMcKGjEvm/rxgmV+Z8jmx0lK7hLiWSqUfkvcMt6LV+zi7q9iJVA
ktEJpBj5jJB40dOLeqQOJJCelO4iI+cUPqGb7qgzYNB6c81S72fLBMG1aviby7Y1
jJGPG796CEy0ZBR0l5ztLrJOJAeMiwp5tuwy2AjFnIVi8IrRu4/q/D5Y8/Ppqze0
LPaf/QI0KiXkrlYMJ+8JOUWyZgLBjN7k7409yK3lG+Q8g6koL46mxAR80oXbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUN7UeOjDmSYkWaz408f1WUL5Ex9AwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUt
NGIxYS00NmVhLTljOTUtNGFmMTI5NjRhNDlkLzAvMzI2MTMxMzEzYTM1MzczMDMw
M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzQzODMwMzczMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACoR
VwAwDQYJKoZIhvcNAQELBQADggEBAGDXgqcjJOi7zZAnIUQ8NATYW+YOAmWWKVJ5
j7xMQNu+uuHkWm7TXomPI3HGQtMcpaNYS3v9HhGa1cUkHr7goOYCKu5rcJAGSpqK
V58NNv9FgeOtL7M2t5uxY9PFR2dN9wA0pMLfa2lMcyfN8GFEjF8z0WiminR30g4/
WizmzaJStl0RpKYGt+HNDzdp3w5Q5IuBh+HKRrNUJpOsh/F23iP/1tLr9jBGlem7
cn/qtsXsNZ43PMHUlbNRzxE+GzNdRR039Qps1m+5IMu5ZXYpf2KACHh7Mk7BJMUr
00NjeXQ11Xj8DQ6tFSQRS7wJ9Z4frZDSMYCosOXcMPsWAGf+S+k=
-----END CERTIFICATE-----
Generated at Fri Jun 21 11:19:00 2024 by rpki-client on console-ams.rpki-client.org