Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730373a3a2f33322d3332203d3e203438303730.roa
File: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (raw, json)
Hash identifier: csIYkNp2hytcvt0mNyllKlOkf/V5AwPD07MZNt/f7Ao=
Subject key identifier: BE:A8:EE:A1:9A:FC:5B:DF:28:1F:8F:3B:7C:F5:70:00:A8:56:F4:05
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 2A44EA3F2924B7AD93F12848D231DA9627127CB3
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730373a3a2f33322d3332203d3e203438303730.roa
Signing time: Tue 25 Jul 2023 15:02:39 +0000
ROA not before: Tue 25 Jul 2023 14:57:39 +0000
ROA not after: Tue 23 Jul 2024 15:02:39 +0000
asID: 48070
IP address blocks: 2a11:5707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:44:ea:3f:29:24:b7:ad:93:f1:28:48:d2:31:da:96:27:12:7c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Jul 25 14:57:39 2023 GMT
Not After : Jul 23 15:02:39 2024 GMT
Subject: CN=BEA8EEA19AFC5BDF281F8F3B7CF57000A856F405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:b3:10:40:f6:e1:2e:b3:37:e0:0b:ae:93:
53:c7:75:5c:44:8f:ed:be:b7:6f:ff:90:1f:5b:c7:
e3:71:fa:52:0c:1d:72:bd:f3:1b:9b:31:11:ae:e2:
6f:cf:80:6c:05:87:8a:a2:33:17:35:76:f2:4d:9e:
73:12:0c:ec:6d:d2:5a:6e:1a:8f:f0:f0:23:1e:40:
fd:37:a9:31:13:f0:06:bd:f9:7b:5d:cc:a9:52:31:
72:e3:ac:79:10:57:35:01:20:d2:1c:6f:03:14:8a:
dd:c5:16:9c:79:cc:17:4a:c2:d7:62:c8:7d:53:6a:
52:c8:06:ad:9e:a5:05:34:ea:cd:b8:a3:e9:74:ba:
e5:c1:7b:1e:b8:0e:a5:b5:62:ab:c6:c0:3a:aa:19:
47:97:0d:1d:af:35:9a:2b:16:3d:84:9b:d7:ff:d1:
48:a3:fa:c3:5b:5e:fc:9c:86:83:53:e0:24:64:79:
f9:eb:34:95:11:e7:b0:8e:d4:26:39:ee:89:7c:5b:
df:c6:c0:24:34:b0:07:2e:8a:1e:69:87:e3:3b:f6:
ec:e5:0b:b9:a2:df:2c:92:ab:fe:4d:58:f0:7a:50:
56:af:e6:f3:60:3e:cc:2c:02:a2:04:99:9a:66:93:
35:6b:81:7a:13:af:08:77:00:ae:a4:34:44:2f:49:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:EE:A1:9A:FC:5B:DF:28:1F:8F:3B:7C:F5:70:00:A8:56:F4:05
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730373a3a2f33322d3332203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5707::/32
Signature Algorithm: sha256WithRSAEncryption
69:71:75:14:5e:6e:b2:ca:ab:2b:44:97:5b:4c:1a:6c:54:a0:
80:ca:6a:a9:2b:94:01:84:9c:6c:99:86:11:de:3a:d9:b8:53:
96:85:47:77:46:20:2e:1b:bf:75:51:ec:fa:ce:db:cc:c7:62:
c9:6a:94:61:f4:1b:32:22:55:4d:53:72:f3:ac:fc:5c:77:92:
c4:55:65:48:af:a4:73:0b:ed:f0:8b:53:37:b5:93:9b:6e:14:
84:b4:75:a6:73:8b:52:8c:52:60:35:c6:7f:41:59:b2:ac:2d:
7d:c6:ec:ba:e6:ef:bf:25:6a:83:01:7b:fc:80:84:03:8d:38:
2a:eb:ad:90:65:2e:83:b1:65:04:a8:58:5b:a0:f7:f7:bc:65:
cf:90:84:e8:80:ac:ad:b2:e3:af:cc:3b:80:d5:7c:b7:fc:97:
65:30:1e:fe:69:65:29:4e:8c:25:38:f8:94:36:9c:93:74:89:
24:23:fe:cc:08:c9:db:b6:46:06:59:90:5f:ba:6b:94:6f:c8:
91:d6:57:56:9f:47:ae:6b:0c:61:5d:e2:f9:bf:a6:c3:73:25:
a8:e0:2f:b5:41:b4:6c:8d:c2:c6:75:f4:a1:85:6f:01:f4:56:
12:47:46:9d:6e:2b:e0:a8:ea:3b:bb:97:45:c5:5f:08:75:6c:
a6:1a:4b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 11:19:00 2024 by rpki-client on console-ams.rpki-client.org