Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/326131343a396530303a6330303a3a2f33382d3438203d3e20323134383334.roa
File: 326131343a396530303a6330303a3a2f33382d3438203d3e20323134383334.roa (raw, json)
Hash identifier: kVdj7Wq5Ef9Da1DNMIIj52YKl9MKNjhz3UDk6vAR5EM=
Subject key identifier: 5A:76:51:28:21:27:FE:66:98:45:14:43:86:94:84:D9:7A:11:B9:46
Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842
Certificate serial: 4FB2481CED001B9C10017893E16AB3E5F1D377A2
Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject info access: rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a6330303a3a2f33382d3438203d3e20323134383334.roa
Signing time: Mon 30 Dec 2024 01:09:39 +0000
ROA not before: Mon 30 Dec 2024 01:04:39 +0000
ROA not after: Mon 29 Dec 2025 01:09:39 +0000
asID: 214834
IP address blocks: 2a14:9e00:c00::/38 maxlen: 48
Validation: OK
Signature path: rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b2:48:1c:ed:00:1b:9c:10:01:78:93:e1:6a:b3:e5:f1:d3:77:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842
Validity
Not Before: Dec 30 01:04:39 2024 GMT
Not After : Dec 29 01:09:39 2025 GMT
Subject: CN=5A7651282127FE6698451443869484D97A11B946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:ed:d0:e0:25:da:01:32:9c:2e:0c:41:64:
f7:2f:1c:6c:29:3f:7d:0e:1d:71:d5:80:a5:75:1a:
b2:45:20:37:e4:de:20:f2:2d:08:ae:01:19:eb:d8:
a0:04:c2:7d:ec:92:ee:a8:91:35:aa:75:a4:c3:a4:
87:58:88:8b:14:4f:22:d6:0e:b7:4e:10:86:24:37:
b6:3a:87:c8:0e:8a:ca:0f:74:3d:80:97:c1:7a:28:
96:99:26:2a:99:fe:d1:ff:5c:48:a9:9f:61:4f:f0:
21:8b:37:d2:5f:0f:e2:7c:76:54:11:b6:f8:c5:e1:
f6:07:f8:41:36:2b:be:e0:d6:25:ea:47:ae:ab:f7:
54:4c:b8:00:cc:40:d6:3d:b9:04:18:c6:38:94:af:
c4:7b:0f:53:e2:b6:5a:97:7d:aa:44:45:a7:bc:d9:
56:db:2d:6b:d0:6e:0d:98:df:19:7b:a5:fb:73:39:
61:a4:e3:4f:ec:be:25:fe:dc:6e:76:0b:6e:7b:cd:
3f:70:5f:e7:da:6e:d3:23:8f:83:58:9e:92:40:96:
5d:16:ce:37:d1:f9:61:fc:5d:55:b9:45:b7:1a:6e:
1e:c1:f1:72:af:f4:0b:65:2d:d6:78:1f:9e:8e:9c:
fa:11:5b:c2:1a:0c:f0:9d:c8:f1:3d:3c:84:7b:56:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:51:28:21:27:FE:66:98:45:14:43:86:94:84:D9:7A:11:B9:46
X509v3 Authority Key Identifier:
keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/326131343a396530303a6330303a3a2f33382d3438203d3e20323134383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9e00:c00::/38
Signature Algorithm: sha256WithRSAEncryption
a4:e7:b7:1e:42:b1:28:70:74:af:2d:ee:4c:33:c1:cb:32:35:
1a:b1:d6:6c:a2:35:81:00:27:9f:af:24:91:d2:5b:8b:27:fe:
10:87:ab:e5:a1:f3:95:9d:d9:8d:7f:de:1d:98:36:25:04:fc:
7c:d3:ba:1e:1a:df:50:01:5d:39:7d:44:80:0b:e0:ab:42:cc:
4c:f0:7e:bc:45:4b:65:53:ee:e2:34:b2:4d:7f:7b:69:53:38:
72:bf:1c:41:ae:8f:92:77:96:56:dc:8d:72:44:8c:f8:5a:66:
64:a4:e9:18:13:d2:d4:f2:b7:66:5e:06:52:f0:56:ae:26:d2:
92:b3:87:22:73:06:38:67:0b:8a:6a:92:b6:44:81:19:d7:37:
ef:41:bd:77:4a:87:ad:1d:63:19:24:3f:4f:8d:4f:76:d7:c3:
59:30:05:9e:f7:b0:d7:bf:7c:64:41:8e:db:1e:f6:a6:e6:f7:
75:3f:c0:d4:d7:77:21:5d:ae:10:b0:dc:1e:82:d5:89:73:53:
e7:8d:ba:ab:9e:45:76:ff:e7:f0:cb:e8:41:9d:29:b3:43:37:
c3:1f:21:46:eb:f8:92:ac:77:bd:ea:f3:ff:90:3b:40:c3:c7:
49:24:1b:f0:2f:fd:56:af:76:df:83:67:95:6b:4e:c7:e4:06:
32:41:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:44:13 2025 by rpki-client