Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a313a3a2f34382d3438203d3e203432343237.roa
File: 326130323a356265303a313a3a2f34382d3438203d3e203432343237.roa (raw, json)
Hash identifier: lDzmEaB2irLYbwOZEejksEJ0VActRrGA53FXN7i4A0E=
Subject key identifier: 6E:BB:1B:F9:6E:2E:61:66:EE:D8:6F:41:2B:3E:DE:21:E0:BE:B8:9E
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 64F11CB46B9B558CBAA5468D0361DCADD2E3B888
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a313a3a2f34382d3438203d3e203432343237.roa
Signing time: Fri 02 Aug 2024 11:24:24 +0000
ROA not before: Fri 02 Aug 2024 11:19:24 +0000
ROA not after: Fri 01 Aug 2025 11:24:24 +0000
asID: 42427
IP address blocks: 2a02:5be0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f1:1c:b4:6b:9b:55:8c:ba:a5:46:8d:03:61:dc:ad:d2:e3:b8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Aug 2 11:19:24 2024 GMT
Not After : Aug 1 11:24:24 2025 GMT
Subject: CN=6EBB1BF96E2E6166EED86F412B3EDE21E0BEB89E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:1b:71:61:e1:50:b4:0a:46:06:cb:c0:1f:
17:1f:8e:f6:7d:6a:2d:f1:3b:4c:dd:6f:45:00:67:
b5:f2:81:f4:aa:c0:c9:24:0d:0b:7d:3d:62:ba:e6:
1c:54:50:37:de:52:21:7b:64:6a:29:ff:8d:ad:19:
68:b1:0b:80:91:d4:71:37:fe:b3:ae:67:30:54:fe:
c2:40:c6:1b:a8:e1:73:8a:66:8b:e9:6f:4b:aa:6b:
ff:9b:95:ba:10:74:f7:57:3c:bc:5f:9f:16:d2:63:
bb:58:fa:53:4c:58:6e:af:89:3d:0b:7b:0b:6f:5a:
33:cb:ff:4e:a9:3e:ad:88:fe:85:a4:d9:84:85:31:
47:b6:87:c8:42:a0:ee:18:dd:7d:88:ea:00:f6:d3:
99:10:91:19:b6:ff:40:a0:13:26:be:53:63:72:2d:
c9:0d:4f:da:43:61:f5:97:b1:d0:74:80:3f:9c:53:
7a:e8:7f:b2:6c:10:7b:99:59:4a:ce:fc:4a:f9:0d:
28:28:1d:64:99:2f:5c:18:5b:5f:ec:53:a1:a5:74:
a4:97:a8:d3:3f:11:55:db:51:a1:dc:da:05:44:15:
4f:33:bb:5d:8f:50:48:6e:c8:48:bf:43:cf:66:12:
16:1e:b1:19:0b:cf:51:58:3a:7f:1b:c4:6f:29:1b:
e7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BB:1B:F9:6E:2E:61:66:EE:D8:6F:41:2B:3E:DE:21:E0:BE:B8:9E
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a313a3a2f34382d3438203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:1::/48
Signature Algorithm: sha256WithRSAEncryption
8c:72:7b:c2:14:f1:23:e1:bb:a7:10:fe:22:9b:a2:72:a2:31:
c6:9b:f2:6c:d2:31:38:9a:9b:ff:d1:45:c8:3d:24:94:cb:52:
40:7d:5b:84:d3:17:9e:de:67:1d:b1:ee:0e:e4:af:c6:99:ab:
d3:4b:68:2e:51:12:20:44:f6:3e:59:35:89:f5:91:b1:eb:45:
5d:34:e6:71:d6:0e:46:ef:5b:84:df:21:a7:1e:e6:92:40:3e:
50:8e:b8:6c:28:02:80:a3:28:2c:58:e0:c1:86:61:12:9d:da:
6f:a3:18:d9:af:00:b8:d4:dc:ba:2b:38:be:1a:eb:46:87:f9:
48:ed:e5:08:d5:10:4d:3e:2e:53:f5:60:7f:c2:09:01:15:b2:
72:0b:81:3c:db:b3:12:ed:9c:9c:6f:eb:14:c8:08:49:fe:7e:
a1:c9:fa:6e:62:3a:a7:fb:96:a4:93:5d:de:91:cf:d9:e5:b0:
c4:94:8c:98:9e:62:82:d4:4f:02:a1:d3:ab:a2:f2:8c:c5:e5:
d6:08:20:69:21:33:e3:e8:df:e9:48:fe:1e:44:ec:04:3e:e4:
a7:4a:ee:82:3f:1c:9a:25:2f:6e:a0:2d:de:f8:9a:8c:f6:a3:
82:4b:b0:83:13:96:1f:af:d6:b7:f2:ed:8d:a1:4a:17:78:d6:
f2:f9:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:25 2024 by rpki-client on console-ams.rpki-client.org