Route Origin Authorization
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa
File: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (raw, json)
Hash identifier: uM/FAUQPkRY95Rpby4V2olP0ujEMfwEALetI5DXdO+o=
Subject key identifier: 49:2C:F2:74:E0:7C:19:05:3D:C6:41:73:DF:67:2F:2C:8B:4C:20:B6
Certificate issuer: /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial: 78F9CA50B786884CC64C9353E94EA0DF279875E7
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa
Signing time: Sat 14 Sep 2024 01:22:27 +0000
ROA not before: Sat 14 Sep 2024 01:17:27 +0000
ROA not after: Sat 13 Sep 2025 01:22:27 +0000
asID: 206315
IP address blocks: 2a0b:2542:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f9:ca:50:b7:86:88:4c:c6:4c:93:53:e9:4e:a0:df:27:98:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Validity
Not Before: Sep 14 01:17:27 2024 GMT
Not After : Sep 13 01:22:27 2025 GMT
Subject: CN=492CF274E07C19053DC64173DF672F2C8B4C20B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:2b:be:e6:e2:9b:72:1e:95:8a:a0:02:ae:
0f:80:34:0f:09:8e:92:1b:5d:90:cd:ac:83:b3:52:
9d:ab:df:22:1d:72:4c:a3:f9:0b:cd:3d:da:e0:f4:
d1:99:a1:0c:1e:b7:32:b0:33:34:fb:44:f3:37:11:
4c:51:5f:18:87:d7:27:78:57:30:0e:24:50:05:31:
3c:96:2b:d2:4e:b6:b4:ac:6c:c9:17:cc:17:cc:62:
81:b7:be:98:14:27:cc:d4:19:13:b7:d1:64:8b:c9:
f0:86:21:37:6f:e7:1b:e7:9d:4f:79:88:59:66:f8:
5a:cc:41:cb:89:d3:c1:9d:23:e8:d7:95:0c:f4:b9:
27:de:f7:0c:a2:a0:32:26:de:3b:bc:87:98:63:09:
92:eb:56:f0:0f:dc:a1:6f:f3:8d:4d:35:72:6d:78:
25:0d:76:bb:57:a4:09:6e:b6:52:02:1f:80:e2:b6:
4d:39:f9:71:8d:48:7c:59:a6:5c:87:20:4d:0c:fe:
c0:82:c8:37:0b:b9:39:00:a8:de:31:b7:18:06:3a:
dc:9f:96:dd:b4:21:31:a6:47:37:05:a0:a7:bd:93:
15:1a:cb:91:b6:88:f3:15:df:8c:c3:e2:3c:b1:2d:
30:3a:c5:3c:07:67:5f:94:c2:e8:c8:d2:70:2c:7c:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2C:F2:74:E0:7C:19:05:3D:C6:41:73:DF:67:2F:2C:8B:4C:20:B6
X509v3 Authority Key Identifier:
keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2542:300::/40
Signature Algorithm: sha256WithRSAEncryption
4f:29:11:46:2a:5f:4a:30:52:2d:5f:f5:09:c5:40:e1:80:1c:
02:1d:a0:b9:27:64:19:9d:10:cb:c5:3a:31:57:3f:61:0f:21:
c8:63:6e:23:8c:d2:51:a3:fb:25:ac:b1:67:4f:ba:d8:3e:97:
be:6e:6c:36:f8:ee:90:41:06:1c:72:fc:5e:f3:f4:fa:d3:94:
f1:38:c7:e9:ce:54:60:c2:9b:d9:70:6a:71:0f:14:eb:c7:b4:
28:64:c9:95:d9:40:70:85:c6:e4:6f:96:dd:be:2b:80:27:9c:
fd:aa:dd:5f:66:fc:5e:1c:38:24:a3:a0:9b:a9:61:ec:71:aa:
f6:ed:3d:d5:50:ff:a6:fd:0d:ea:7a:97:92:df:c3:9d:e9:f3:
1e:b0:a6:f7:39:4f:dd:9a:8c:f7:bb:40:ce:4a:60:29:88:47:
6d:30:66:1f:6a:e3:77:46:b2:4b:fb:31:5f:a6:4d:39:25:cd:
8a:77:d7:a0:4a:16:f1:93:a4:3e:8d:d0:41:8e:fa:82:48:31:
64:9d:1f:93:11:65:5d:fc:ec:49:b7:64:1d:ae:d5:ea:4f:8e:
bb:00:0a:5e:91:b3:ce:d8:bf:06:49:07:c3:52:97:7a:bf:4d:
5b:1e:63:fb:58:3b:f4:84:e2:b6:1e:df:31:55:1b:bc:45:7c:
41:73:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:04 2024 by rpki-client on console-fra.rpki-client.org