Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a3a2f34382d3438203d3e203432343237.roa
File: 326130323a356265303a3a2f34382d3438203d3e203432343237.roa (raw, json)
Hash identifier: 7eLqxz8LuloN58YBDsLNT+6dPyIWCYXpM8mRKEo8ysk=
Subject key identifier: BC:B7:B6:44:F5:73:3D:46:CB:D1:15:7C:D8:87:FD:99:E7:79:9F:C0
Certificate issuer: /CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Certificate serial: 3700C5A2B897AB42718B7CF129D9EA7B7CECAD2B
Authority key identifier: 5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a3a2f34382d3438203d3e203432343237.roa
Signing time: Fri 02 Aug 2024 11:24:25 +0000
ROA not before: Fri 02 Aug 2024 11:19:25 +0000
ROA not after: Fri 01 Aug 2025 11:24:25 +0000
asID: 42427
IP address blocks: 2a02:5be0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:00:c5:a2:b8:97:ab:42:71:8b:7c:f1:29:d9:ea:7b:7c:ec:ad:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ead10be7ec295336e4b5680e0d393b677c3649a
Validity
Not Before: Aug 2 11:19:25 2024 GMT
Not After : Aug 1 11:24:25 2025 GMT
Subject: CN=BCB7B644F5733D46CBD1157CD887FD99E7799FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:08:a8:94:41:6e:09:f6:f9:cb:e2:0d:1e:
80:94:4a:d0:be:c8:31:97:39:0c:3c:86:74:ad:1b:
22:7d:fc:56:a3:b6:2f:5c:e8:39:43:3f:a3:31:90:
f9:05:ae:f5:56:e5:03:f5:bf:4c:2b:02:43:1f:4b:
02:e4:ec:ba:6c:84:f6:49:d4:29:15:38:e3:23:bd:
d0:d4:df:06:55:62:07:ed:3b:3b:98:d5:9c:8f:c2:
f7:75:c0:c4:fa:09:68:a5:ea:9c:ef:19:fe:21:69:
d8:c0:1f:84:3b:99:22:cc:6e:a3:87:a1:40:dd:1e:
73:60:6c:d0:1a:96:aa:d8:45:47:90:41:d2:a2:ad:
8e:41:40:16:2d:94:8f:4c:50:33:a7:88:8a:40:1e:
c1:93:9d:6c:91:05:05:31:ac:0c:ca:f7:8f:cf:da:
ea:75:6d:37:f8:71:bc:aa:ab:1a:16:5c:b3:57:7f:
d5:a1:35:8e:56:cc:ff:93:0b:66:8e:f3:80:33:54:
b5:3f:21:c7:21:e3:6b:27:64:fd:01:cb:c4:0f:ce:
b1:4b:8f:d3:f2:a7:c6:1f:d8:6a:4b:b3:5c:e3:5d:
1f:05:ae:75:be:eb:04:44:ea:9e:ee:cb:af:28:b2:
f2:1c:f0:ef:39:ac:66:0d:86:a8:60:e7:c7:f1:e2:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B7:B6:44:F5:73:3D:46:CB:D1:15:7C:D8:87:FD:99:E7:79:9F:C0
X509v3 Authority Key Identifier:
keyid:5E:AD:10:BE:7E:C2:95:33:6E:4B:56:80:E0:D3:93:B6:77:C3:64:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/5EAD10BE7EC295336E4B5680E0D393B677C3649A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq0Qvn7ClTNuS1aA4NOTtnfDZJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/3/326130323a356265303a3a2f34382d3438203d3e203432343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5be0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:d0:99:9b:f5:18:64:4a:f3:c3:49:23:ad:91:dc:01:cc:3f:
fa:7e:f9:79:11:16:ca:4d:78:c1:70:e6:c4:da:95:ec:e9:12:
09:73:e6:4d:b7:f6:1d:2f:0d:25:bd:a2:d2:4d:2f:92:2b:28:
7b:6c:cb:cd:85:ac:ef:a0:1e:29:80:50:f7:fa:ed:1a:64:56:
18:21:ce:95:45:db:96:a1:3e:d8:93:7d:20:64:c5:f1:68:64:
41:96:68:5a:38:04:d1:fc:c6:23:0c:7f:b4:77:ad:0a:0e:0d:
c0:8a:ae:3c:bb:bd:4e:54:45:03:41:b9:ee:b8:d5:7b:a6:df:
a6:09:84:02:9d:60:af:fb:68:21:1b:19:30:11:26:11:85:00:
16:6c:78:63:09:b8:fe:a0:85:f1:f4:09:e1:c5:d8:aa:6d:4c:
6a:b5:db:7f:1a:05:09:f4:d1:d1:03:94:70:b7:43:17:ea:f8:
89:c3:db:f2:05:09:82:a0:7c:c6:88:ce:2f:bf:ba:c5:05:12:
40:ca:28:af:d2:81:a0:da:56:84:2b:64:73:da:34:32:2c:e5:
5f:e6:b7:45:56:5f:2a:e8:68:89:8b:c6:94:a7:2c:f8:4e:f9:
82:ec:89:7f:83:b9:b9:6f:22:13:98:f1:20:61:3d:33:10:b2:
6c:0d:fe:a8
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIUNwDForiXq0Jxi3zxKdnqe3zsrSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVhZDEwYmU3ZWMyOTUzMzZlNGI1NjgwZTBkMzkzYjY3
N2MzNjQ5YTAeFw0yNDA4MDIxMTE5MjVaFw0yNTA4MDExMTI0MjVaMDMxMTAvBgNV
BAMTKEJDQjdCNjQ0RjU3MzNENDZDQkQxMTU3Q0Q4ODdGRDk5RTc3OTlGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxAiolEFuCfb5y+INHoCUStC+
yDGXOQw8hnStGyJ9/Fajti9c6DlDP6MxkPkFrvVW5QP1v0wrAkMfSwLk7LpshPZJ
1CkVOOMjvdDU3wZVYgftOzuY1ZyPwvd1wMT6CWil6pzvGf4hadjAH4Q7mSLMbqOH
oUDdHnNgbNAalqrYRUeQQdKirY5BQBYtlI9MUDOniIpAHsGTnWyRBQUxrAzK94/P
2up1bTf4cbyqqxoWXLNXf9WhNY5WzP+TC2aO84AzVLU/Icch42snZP0By8QPzrFL
j9Pyp8Yf2GpLs1zjXR8FrnW+6wRE6p7uy68osvIc8O85rGYNhqhg58fx4kunAgMB
AAGjggH4MIIB9DAdBgNVHQ4EFgQUvLe2RPVzPUbL0RV82If9med5n8AwHwYDVR0j
BBgwFoAUXq0Qvn7ClTNuS1aA4NOTtnfDZJowDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzMvNUVBRDEwQkU3RUMyOTUzMzZFNEI1NjgwRTBEMzkz
QjY3N0MzNjQ5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3lu
YzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hxMFF2bjdDbFRO
dVMxYUE0Tk9UdG5mRFpKby5jZXIwgYkGCCsGAQUFBwELBH0wezB5BggrBgEFBQcw
C4ZtcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5
ODAwMDAvMy8zMjYxMzAzMjNhMzU2MjY1MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNl
MjAzNDMyMzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsG
AQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJb4AAAMA0GCSqGSIb3DQEBCwUAA4IB
AQA60Jmb9RhkSvPDSSOtkdwBzD/6fvl5ERbKTXjBcObE2pXs6RIJc+ZNt/YdLw0l
vaLSTS+SKyh7bMvNhazvoB4pgFD3+u0aZFYYIc6VRduWoT7Yk30gZMXxaGRBlmha
OATR/MYjDH+0d60KDg3Aiq48u71OVEUDQbnuuNV7pt+mCYQCnWCv+2ghGxkwESYR
hQAWbHhjCbj+oIXx9AnhxdiqbUxqtdt/GgUJ9NHRA5Rwt0MX6viJw9vyBQmCoHzG
iM4vv7rFBRJAyiiv0oGg2laEK2Rz2jQyLOVf5rdFVl8q6GiJi8aUpyz4TvmC7Il/
g7m5byITmPEgYT0zELJsDf6o
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:52:35 2024 by rpki-client on console-fra.rpki-client.org