Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f33322d3438203d3e2033323134.roa
File: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (raw, json)
Hash identifier: fW/K2aMGtg0FYsiK0LKkvlYwDluKLUNm8JBlCU+oslU=
Subject key identifier: 38:0B:95:72:5D:91:C9:FD:63:6A:4D:40:AC:68:16:B2:E7:0A:BC:EF
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 3094A5510A1A820E80F320734C84BEEC578AC677
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f33322d3438203d3e2033323134.roa
Signing time: Sat 14 Sep 2024 01:22:29 +0000
ROA not before: Sat 14 Sep 2024 01:17:29 +0000
ROA not after: Sat 13 Sep 2025 01:22:29 +0000
asID: 3214
IP address blocks: 2a04:6f00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:94:a5:51:0a:1a:82:0e:80:f3:20:73:4c:84:be:ec:57:8a:c6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Sep 14 01:17:29 2024 GMT
Not After : Sep 13 01:22:29 2025 GMT
Subject: CN=380B95725D91C9FD636A4D40AC6816B2E70ABCEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:ef:02:14:5c:15:79:c1:12:77:4e:d5:6d:
fd:71:93:ef:47:a1:94:9e:ad:1a:dc:83:5a:f6:b7:
64:3c:e4:46:4b:57:b7:a2:e0:8d:ad:18:b0:4c:0a:
cc:4e:eb:f7:d9:bf:67:43:a2:ca:2f:b8:ff:72:5f:
3a:92:e5:22:00:07:82:ba:ba:06:65:6b:7d:17:ca:
8e:f0:f2:fe:e9:92:8a:42:00:37:50:14:d8:18:4c:
6b:41:d8:c4:60:dc:c3:a8:60:ab:fb:52:a9:5a:b5:
10:0f:51:8f:e4:ec:8f:fc:98:a5:5a:f9:86:72:97:
48:f4:95:5b:be:72:4a:c4:14:d4:a0:04:7b:4d:31:
1c:cb:c5:61:66:1e:b7:fb:83:b2:a1:f5:93:d3:0a:
40:24:a4:e2:bf:5d:9e:42:c5:1f:2e:ab:04:e4:28:
3d:0a:1b:a2:25:50:a3:09:29:7b:14:e8:d3:b9:7f:
57:1d:d2:c3:5d:d6:d0:fc:0e:38:9e:58:ad:1a:ef:
86:f0:a6:69:ad:71:15:df:f9:94:ff:24:4b:f6:e2:
aa:ff:eb:88:08:b6:09:86:16:db:a2:6f:70:08:0d:
af:49:68:e8:c6:e4:16:57:12:92:48:b2:98:69:f3:
d6:8a:67:39:ae:5b:9d:20:61:a1:87:85:ea:c2:0d:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:95:72:5D:91:C9:FD:63:6A:4D:40:AC:68:16:B2:E7:0A:BC:EF
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130343a366630303a3a2f33322d3438203d3e2033323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6f00::/32
Signature Algorithm: sha256WithRSAEncryption
8d:b9:44:f0:f3:d7:7a:0c:e7:52:a8:2a:c8:9e:e7:4c:a1:a9:
56:3e:78:27:03:46:11:72:6d:53:43:de:65:ad:9a:58:8d:ea:
cf:5d:79:d6:68:44:ff:26:24:ea:29:38:01:d6:bf:55:ca:55:
06:66:07:53:7c:a7:bc:ff:69:40:d7:4b:65:65:ef:73:f3:c1:
73:7e:c3:46:4f:e4:b3:dd:aa:9e:a5:69:33:2f:3d:49:87:8c:
c2:40:ca:97:3d:59:d7:c3:ae:ce:86:93:48:07:2f:bd:c2:6d:
86:d4:ad:06:29:a7:00:c9:79:3c:9c:a5:cd:4a:11:9c:ea:0c:
9d:43:a7:da:57:7b:be:28:e3:3e:b9:e6:b2:40:d5:43:9f:99:
bb:d6:64:f9:6f:07:61:5f:cd:fb:ea:96:1f:9f:75:2f:58:f9:
c1:a4:da:84:e3:e7:33:48:15:ce:b7:08:ef:4b:eb:ad:67:af:
ba:22:f3:8c:14:2f:75:2c:f9:55:cb:26:20:84:25:f5:96:59:
9d:5c:e8:55:6e:9c:ca:ce:93:2d:84:d9:5a:c5:f2:ef:27:15:
ec:36:1b:6c:41:e3:aa:0b:ba:2b:13:e3:48:41:a5:81:58:30:
1b:c3:90:fa:3b:9a:4a:46:ce:ba:14:39:00:76:c7:e6:bb:ef:
d9:08:83:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org