Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a666530303a3a2f34302d3430203d3e203432333636.roa
File: 326130313a3666303a666530303a3a2f34302d3430203d3e203432333636.roa (raw, json)
Hash identifier: Acbhw/Z4v3NXPxH9TLhX1tKistKF60CqEMgWYesItOQ=
Subject key identifier: 86:88:9F:48:99:81:04:E5:C1:44:1B:BB:E9:21:FA:2D:C2:2F:E2:5C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 263EF2EFE4F37D14617FA81D2D46BE4DE3E7B8AD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a666530303a3a2f34302d3430203d3e203432333636.roa
Signing time: Mon 26 Feb 2024 08:53:31 +0000
ROA not before: Mon 26 Feb 2024 08:48:31 +0000
ROA not after: Mon 24 Feb 2025 08:53:31 +0000
asID: 42366
IP address blocks: 2a01:6f0:fe00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3e:f2:ef:e4:f3:7d:14:61:7f:a8:1d:2d:46:be:4d:e3:e7:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:31 2024 GMT
Not After : Feb 24 08:53:31 2025 GMT
Subject: CN=86889F48998104E5C1441BBBE921FA2DC22FE25C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:e1:ed:7d:46:df:7c:da:4f:c1:8d:8a:3f:
72:6c:41:bd:62:c7:d6:d5:5c:7f:47:fe:68:7e:18:
62:05:23:5d:89:19:c1:e9:ce:42:cb:26:45:12:a4:
05:7b:d6:af:95:f5:96:cd:f5:32:88:be:d1:39:42:
67:bc:c7:70:09:15:bd:73:89:4a:a3:70:46:bf:13:
19:cf:d3:88:aa:95:d8:80:b0:33:b2:9b:33:51:4f:
64:33:04:08:dc:4e:06:d2:d6:7f:d7:95:d3:4f:df:
a9:c6:9e:a4:c8:6a:a2:29:7e:6c:79:84:6e:24:7c:
2e:11:e3:1a:44:ed:2a:c7:e6:4f:07:2b:a4:d2:3b:
fc:4b:bc:d1:dc:62:f5:b1:34:67:8e:c2:ce:2b:e0:
e5:fd:73:4a:8c:b6:93:37:28:5f:c2:56:f4:ce:1a:
49:d4:4a:f4:29:79:7e:9f:a8:f1:65:bb:29:7a:f0:
4c:89:e7:e6:de:e2:a8:b7:17:6e:5c:95:45:97:3b:
de:94:8c:bd:30:ae:0a:16:ff:8e:96:b5:7e:fe:80:
e1:00:35:b5:bc:5d:e6:9e:2c:26:70:a9:e5:e6:fe:
76:f5:03:ee:22:34:31:95:b8:43:f0:25:f0:a1:20:
dd:8f:72:c0:f0:43:03:eb:3f:a9:14:c4:92:a8:ae:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:88:9F:48:99:81:04:E5:C1:44:1B:BB:E9:21:FA:2D:C2:2F:E2:5C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/326130313a3666303a666530303a3a2f34302d3430203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6f0:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
37:f0:bf:68:3d:9b:01:f2:66:7c:ef:18:6a:f3:c4:18:b5:42:
fd:e7:45:4c:87:3d:83:33:cc:22:16:fe:96:04:d6:26:10:18:
b6:15:a9:b3:77:f3:7a:f0:b6:d8:b9:d1:83:dd:c7:88:85:22:
00:67:4a:9b:24:a4:24:d5:71:65:fd:cb:0c:40:53:5b:94:90:
b7:e6:6a:cd:a3:49:e5:7b:d6:1e:cd:e8:89:f5:83:76:c8:ee:
52:7a:2d:9f:c0:32:f0:c5:70:08:94:87:61:fb:c2:39:c7:db:
c3:6c:23:10:a7:df:06:35:42:43:3b:f1:de:41:a0:d9:36:fe:
c4:97:0b:55:82:80:fb:f4:ff:0d:18:32:bb:c2:9e:a9:34:e3:
af:28:96:94:59:ba:dd:6e:61:19:5f:5d:63:f0:e0:b6:c2:b3:
05:fa:b7:d9:cf:bc:cb:bd:9c:61:5e:92:24:cb:dd:cc:99:c7:
7f:75:2a:e8:41:fc:b5:62:af:54:ee:64:70:7a:ed:a5:29:dd:
e7:d4:a0:68:b1:8d:68:73:5f:74:c3:41:ae:36:25:35:be:88:
b7:02:41:96:f1:84:6f:41:d2:b2:c3:d7:47:c9:fb:21:d9:31:
bb:b6:0d:91:b3:c0:63:10:0c:8e:a0:63:c8:fe:7b:fb:29:61:
cf:df:0c:27
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUJj7y7+TzfRRhf6gdLUa+TePnuK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDAyMjYwODQ4MzFaFw0yNTAyMjQwODUzMzFaMDMxMTAvBgNV
BAMTKDg2ODg5RjQ4OTk4MTA0RTVDMTQ0MUJCQkU5MjFGQTJEQzIyRkUyNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjOHtfUbffNpPwY2KP3JsQb1i
x9bVXH9H/mh+GGIFI12JGcHpzkLLJkUSpAV71q+V9ZbN9TKIvtE5Qme8x3AJFb1z
iUqjcEa/ExnP04iqldiAsDOymzNRT2QzBAjcTgbS1n/XldNP36nGnqTIaqIpfmx5
hG4kfC4R4xpE7SrH5k8HK6TSO/xLvNHcYvWxNGeOws4r4OX9c0qMtpM3KF/CVvTO
GknUSvQpeX6fqPFluyl68EyJ5+be4qi3F25clUWXO96UjL0wrgoW/46WtX7+gOEA
NbW8XeaeLCZwqeXm/nb1A+4iNDGVuEPwJfChIN2PcsDwQwPrP6kUxJKornP/AgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUhoifSJmBBOXBRBu76SH6LcIv4lwwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzI2MTMwMzEzYTM2NjYzMDNh
NjY2NTMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNDMyMzMzNjM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIA
AjAIAwYAKgEG8P4wDQYJKoZIhvcNAQELBQADggEBADfwv2g9mwHyZnzvGGrzxBi1
Qv3nRUyHPYMzzCIW/pYE1iYQGLYVqbN383rwtti50YPdx4iFIgBnSpskpCTVcWX9
ywxAU1uUkLfmas2jSeV71h7N6In1g3bI7lJ6LZ/AMvDFcAiUh2H7wjnH28NsIxCn
3wY1QkM78d5BoNk2/sSXC1WCgPv0/w0YMrvCnqk0468olpRZut1uYRlfXWPw4LbC
swX6t9nPvMu9nGFekiTL3cyZx391KuhB/LVir1TuZHB67aUp3efUoGixjWhzX3TD
Qa42JTW+iLcCQZbxhG9B0rLD10fJ+yHZMbu2DZGzwGMQDI6gY8j+e/spYc/fDCc=
-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org