Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a323a3a2f34382d3438203d3e203339353838.roa
File: 326130323a356265303a323a3a2f34382d3438203d3e203339353838.roa (raw, json)
Hash identifier: iAHUkr19ZMuXrmo2Vz2K3pMDJLmnPR6I/qziixf7iiM=
Subject key identifier: AE:30:05:6A:40:44:E5:07:83:5F:49:C8:88:DB:9F:E3:7A:8D:18:2A
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 2827914D92B8D539746D796FF644D425E59E1CF9
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a323a3a2f34382d3438203d3e203339353838.roa
Signing time: Fri 02 Aug 2024 11:24:24 +0000
ROA not before: Fri 02 Aug 2024 11:19:24 +0000
ROA not after: Fri 01 Aug 2025 11:24:24 +0000
asID: 39588
IP address blocks: 2a02:5be0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:27:91:4d:92:b8:d5:39:74:6d:79:6f:f6:44:d4:25:e5:9e:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Aug 2 11:19:24 2024 GMT
Not After : Aug 1 11:24:24 2025 GMT
Subject: CN=AE30056A4044E507835F49C888DB9FE37A8D182A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:69:c3:4c:01:f7:d6:c2:79:82:24:2b:94:
e3:d8:8a:a7:d0:ad:0f:2e:3b:10:79:4b:33:6a:a2:
65:18:95:ba:c3:7b:ab:e8:b1:7f:90:c4:89:97:93:
65:7f:a4:51:c9:77:f4:b0:eb:1c:2c:a5:71:f1:6c:
fa:d2:4b:5f:3a:5a:66:04:41:af:81:ef:7f:fe:d7:
b5:b0:14:74:67:c3:8c:c0:a2:47:d4:af:1c:24:7e:
53:40:5d:10:64:7c:db:80:e8:3d:6e:dd:86:98:59:
bd:e3:1e:cf:aa:80:5c:1a:cf:ea:f5:11:c1:e9:d7:
22:4f:9e:37:ec:49:fd:4c:d9:97:6c:0c:94:ab:02:
58:a1:88:4f:66:9c:8f:d6:ff:88:42:70:d4:78:cf:
20:a7:7d:ce:be:16:f7:d0:63:a0:b5:b1:19:88:7e:
21:90:0d:2d:15:16:f4:9a:14:1a:c1:d9:87:c4:e2:
79:d0:1d:2c:bc:72:b4:1b:07:10:88:0a:e2:53:fa:
80:9b:e2:05:f9:89:ee:26:42:39:f7:58:7d:9f:89:
36:c6:cf:50:bd:da:60:28:ed:20:6f:df:ac:dc:ca:
dc:46:46:d4:84:9e:a2:92:0f:d3:6b:11:5d:26:8c:
cf:f7:b5:13:f7:b0:c4:6e:f9:d5:06:ce:ec:64:e0:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:05:6A:40:44:E5:07:83:5F:49:C8:88:DB:9F:E3:7A:8D:18:2A
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a323a3a2f34382d3438203d3e203339353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:2::/48
Signature Algorithm: sha256WithRSAEncryption
38:a0:f0:01:0c:59:98:41:3b:9f:a9:57:a2:0a:33:9d:7a:ac:
ef:66:35:4d:e7:da:63:0c:ca:5d:c8:f7:c5:c1:42:b9:50:06:
c0:c8:8e:b0:fb:81:a7:bd:b8:6e:ad:09:3c:bf:38:2e:ea:fb:
11:35:0e:63:c2:12:94:19:c8:98:b7:1b:73:3b:da:56:05:a5:
15:b4:38:2e:17:0e:66:85:8b:3b:01:dc:fc:ea:c4:ec:de:e4:
63:cc:32:f4:7d:3f:f9:ef:6c:8b:86:2d:0c:d8:a3:63:c9:72:
2e:57:79:64:71:f8:90:e5:02:00:58:aa:9c:0c:db:cc:40:e1:
fb:6d:e0:37:21:62:d2:25:f2:01:59:14:1b:64:3c:43:30:3a:
82:f9:5d:43:f2:32:7d:ec:8c:8c:9d:27:7d:ec:f2:74:db:eb:
c6:24:78:b9:b4:92:53:6d:e1:4c:c4:3b:ad:a0:10:31:62:3a:
1b:26:d6:20:70:91:a1:44:d0:f0:ac:58:e0:b2:24:05:83:b6:
0b:41:48:55:03:7d:76:19:f6:bc:bf:c9:97:76:2c:f6:95:14:
40:4f:36:26:8a:88:6a:d2:d4:cd:38:61:8f:f6:bf:54:50:ca:
3e:ce:a0:1b:e5:12:c9:8a:56:7d:6e:4b:5f:ab:74:8d:ae:45:
96:d2:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:13 2025 by rpki-client