Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563303a333030303a3a2f33362d3336203d3e20323135333138.roa
File: 326131343a316563303a333030303a3a2f33362d3336203d3e20323135333138.roa (raw, json)
Hash identifier: PZAEDd9ib2kKFIHM034HSXdM0DKy++8VTv9Qvs8kcmQ=
Subject key identifier: D0:17:4F:EB:8F:A7:C8:80:7D:61:50:48:A8:C2:6B:38:25:FA:9B:F5
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 3E747AE12736AAFC72FE211366832623AA12E43A
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563303a333030303a3a2f33362d3336203d3e20323135333138.roa
Signing time: Thu 02 May 2024 17:54:37 +0000
ROA not before: Thu 02 May 2024 17:49:37 +0000
ROA not after: Thu 01 May 2025 17:54:37 +0000
asID: 215318
IP address blocks: 2a14:1ec0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:74:7a:e1:27:36:aa:fc:72:fe:21:13:66:83:26:23:aa:12:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: May 2 17:49:37 2024 GMT
Not After : May 1 17:54:37 2025 GMT
Subject: CN=D0174FEB8FA7C8807D615048A8C26B3825FA9BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:48:c5:fc:1c:58:ff:25:50:f5:16:38:ac:
11:fb:d5:6e:20:b1:e0:be:65:8d:c2:63:ca:00:77:
c0:22:a0:b2:f3:dc:c5:4c:3b:19:d4:be:0f:42:ed:
0b:b9:95:84:ca:55:e9:f7:e3:2f:62:94:f3:87:e8:
44:50:32:5b:70:25:45:9a:7f:30:99:ed:9a:ab:50:
43:ae:14:9f:6f:60:60:a3:77:36:d0:e8:f7:39:56:
4f:92:86:e0:20:f2:73:95:42:f9:12:e5:a2:58:df:
c9:10:db:7b:fc:74:85:4d:1e:29:2e:a7:7a:0c:6e:
fc:92:9c:0e:b9:40:d7:74:c4:5a:e8:e3:d8:99:cf:
89:81:55:a1:ad:42:03:24:a8:0a:99:e1:b9:b6:5e:
bc:8f:b8:74:ed:06:bc:11:d6:40:68:24:8a:c6:2e:
95:2b:3c:b1:9d:e1:1c:be:05:a9:aa:f4:d1:cb:90:
57:15:4c:93:74:46:3a:ed:eb:a7:80:68:c5:0f:4b:
08:4d:72:1b:7a:e9:f7:75:93:bb:88:ab:97:97:85:
d0:1c:e3:7d:e1:96:8b:7f:a4:b1:69:d3:6f:64:1a:
69:56:43:d1:4d:59:16:38:b4:68:38:84:58:63:79:
fd:21:58:ff:7c:55:5d:f4:d3:98:a7:2a:8f:6e:23:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:4F:EB:8F:A7:C8:80:7D:61:50:48:A8:C2:6B:38:25:FA:9B:F5
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563303a333030303a3a2f33362d3336203d3e20323135333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
88:a1:9a:6b:52:1b:63:f4:80:05:a0:06:ef:eb:20:80:8b:ca:
0b:48:54:98:ac:af:a9:ea:e1:a9:27:9e:cd:c4:29:bd:20:34:
0b:2c:74:3a:9d:a9:c8:3c:85:b6:91:84:f3:ee:01:84:45:1c:
c1:23:4e:c6:d4:38:82:e8:6a:9c:13:34:a1:f0:7f:62:ed:fe:
90:61:17:41:ce:a5:08:d2:5c:6c:f6:58:5c:9f:a9:57:42:30:
11:5d:b5:a9:c2:f3:bf:22:93:58:fd:7c:08:07:60:68:68:97:
5a:b9:31:4d:1b:38:64:47:4e:cb:35:df:6e:1e:60:46:20:28:
b9:a3:19:d9:9f:5d:33:54:39:fa:13:3a:28:ce:fe:36:c1:e9:
ed:b8:5f:81:41:d0:72:fb:77:22:ad:14:41:44:dd:f4:e7:59:
9c:fd:46:ae:ae:7b:63:ac:bb:d9:e5:14:6e:13:14:54:16:a1:
dc:8c:8d:64:bd:2d:f0:48:67:47:b7:28:20:b5:8f:8f:57:d6:
bb:d7:49:ae:72:14:ed:a1:2f:8b:55:11:7e:3a:62:b4:47:a3:
28:c5:e7:92:7a:68:84:e4:e0:52:fe:16:eb:7f:66:94:cc:04:
11:88:23:83:1a:99:2e:f6:b0:c4:13:19:1d:c5:14:3c:bf:29:
fe:94:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:03:50 2024 by rpki-client on console-ams.rpki-client.org