Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203432343237.roa
File: 326130323a356265303a363a3a2f34382d3438203d3e203432343237.roa (raw, json)
Hash identifier: hbzuAEZzM2lgewB5gyaMA6673+IuuAUz9P1FqORzT8E=
Subject key identifier: 55:4A:3F:71:18:7F:AE:B9:46:47:76:EB:46:2A:90:49:81:DF:91:13
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 092C02207A0A897EC428841416760C152BEA0CAF
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203432343237.roa
Signing time: Thu 18 Jul 2024 10:18:22 +0000
ROA not before: Thu 18 Jul 2024 10:13:22 +0000
ROA not after: Thu 17 Jul 2025 10:18:22 +0000
asID: 42427
IP address blocks: 2a02:5be0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2c:02:20:7a:0a:89:7e:c4:28:84:14:16:76:0c:15:2b:ea:0c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Jul 18 10:13:22 2024 GMT
Not After : Jul 17 10:18:22 2025 GMT
Subject: CN=554A3F71187FAEB9464776EB462A904981DF9113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:be:2f:2e:d0:8c:2a:6d:52:6b:d0:d3:c6:
42:72:b9:c3:84:c1:00:fd:f2:2e:62:e3:a2:e8:ce:
af:03:8e:78:9f:bb:32:55:5e:8d:fc:fa:50:ba:6c:
05:22:81:78:a3:fb:16:fc:9e:59:fa:0e:56:76:df:
78:95:56:db:aa:6b:ef:10:63:92:80:bc:2c:ed:c0:
17:c1:81:1c:8a:5a:ad:e1:37:9a:97:65:55:1b:0b:
f7:dc:fe:9e:a0:11:86:db:ff:4c:de:14:e4:87:e4:
8d:06:d5:0b:ec:7c:41:b3:45:5a:97:bf:a5:a2:47:
53:39:03:44:4f:c1:01:ab:d5:ff:9f:ea:c9:3c:3c:
25:c3:32:54:93:01:ef:b7:82:36:28:b5:6a:90:39:
81:11:aa:1c:92:85:5b:0a:3c:17:6e:c1:1f:8b:7b:
59:7d:82:90:aa:4e:34:ca:34:35:dd:f8:01:95:7a:
26:ea:98:72:36:93:1e:c6:c5:3f:d9:b3:a7:05:de:
77:82:c4:3b:48:bc:8b:23:b5:1a:c9:72:bc:2e:1e:
94:ac:6a:3b:86:83:5e:2f:94:7b:32:2a:11:c2:1c:
2e:8e:5b:d1:90:6b:8b:64:89:0d:ef:e9:80:8e:b9:
16:99:bb:ea:35:ad:2b:a7:23:19:c3:c1:fe:94:1f:
49:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:3F:71:18:7F:AE:B9:46:47:76:EB:46:2A:90:49:81:DF:91:13
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a363a3a2f34382d3438203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0:6::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a5:8b:2c:1b:88:8f:da:86:c1:cb:cf:15:4f:44:cf:00:36:
50:5f:00:e2:7d:b0:03:b6:0a:80:ab:35:ca:45:bd:9b:94:6d:
22:f6:db:99:27:2b:85:d8:67:58:c4:c1:ae:fe:de:f1:d9:a6:
6b:70:55:2d:67:25:d6:e6:e2:1f:ec:cb:31:7d:cb:9f:5c:2f:
a0:b3:03:db:3e:fd:24:dd:94:0c:43:28:c6:74:c9:3e:7d:be:
0d:f2:a9:3d:b1:8c:15:f4:ad:c2:fb:83:eb:d0:02:a2:09:a0:
6f:e1:d7:72:15:c0:2d:ee:b5:21:fb:a3:5f:2d:17:fe:67:d2:
5a:ad:bb:c5:74:2d:5a:db:7e:80:62:7d:31:f8:58:c4:f9:45:
31:5a:b9:2e:02:c8:4a:de:c2:5a:03:17:3a:df:64:5d:70:f5:
7c:a0:ca:56:8e:a0:cd:a6:1e:d4:0d:a8:85:0d:d1:fc:ca:eb:
e5:40:f0:a6:33:cc:96:73:9d:c2:06:06:f3:14:5e:c2:9b:ab:
70:6e:dd:00:87:73:7f:5d:39:77:80:ac:14:c0:d8:3c:9c:e6:
87:32:2a:b5:31:5c:e7:7f:00:65:03:74:0b:62:59:36:69:02:
ef:ad:cc:d3:fe:af:e9:ec:52:3b:47:3e:a3:be:40:87:14:af:
c5:58:30:29
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUCSwCIHoKiX7EKIQUFnYMFSvqDK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNDA3MTgxMDEzMjJaFw0yNTA3MTcxMDE4MjJaMDMxMTAvBgNV
BAMTKDU1NEEzRjcxMTg3RkFFQjk0NjQ3NzZFQjQ2MkE5MDQ5ODFERjkxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7L4vLtCMKm1Sa9DTxkJyucOE
wQD98i5i46Lozq8DjnifuzJVXo38+lC6bAUigXij+xb8nln6DlZ233iVVtuqa+8Q
Y5KAvCztwBfBgRyKWq3hN5qXZVUbC/fc/p6gEYbb/0zeFOSH5I0G1QvsfEGzRVqX
v6WiR1M5A0RPwQGr1f+f6sk8PCXDMlSTAe+3gjYotWqQOYERqhyShVsKPBduwR+L
e1l9gpCqTjTKNDXd+AGVeibqmHI2kx7GxT/Zs6cF3neCxDtIvIsjtRrJcrwuHpSs
ajuGg14vlHsyKhHCHC6OW9GQa4tkiQ3v6YCOuRaZu+o1rSunIxnDwf6UH0m1AgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUVUo/cRh/rrlGR3brRiqQSYHfkRMwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUH
MAuGcXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzMvMzI2MTMwMzIzYTM1NjI2NTMwM2EzNjNhM2EyZjM0MzgyZDM0Mzgy
MDNkM2UyMDM0MzIzNDMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqAlvgAAYwDQYJKoZIhvcNAQEL
BQADggEBAC6liywbiI/ahsHLzxVPRM8ANlBfAOJ9sAO2CoCrNcpFvZuUbSL225kn
K4XYZ1jEwa7+3vHZpmtwVS1nJdbm4h/syzF9y59cL6CzA9s+/STdlAxDKMZ0yT59
vg3yqT2xjBX0rcL7g+vQAqIJoG/h13IVwC3utSH7o18tF/5n0lqtu8V0LVrbfoBi
fTH4WMT5RTFauS4CyErewloDFzrfZF1w9XygylaOoM2mHtQNqIUN0fzK6+VA8KYz
zJZzncIGBvMUXsKbq3Bu3QCHc39dOXeArBTA2Dyc5ocyKrUxXOd/AGUDdAtiWTZp
Au+tzNP+r+nsUjtHPqO+QIcUr8VYMCk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:04 2024 by rpki-client on console-fra.rpki-client.org