Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa
File: 326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa (raw, json)
Hash identifier: MDwJ5fo2zc9BpiWeWjV3SGkIPMsTGtHcrZhrxxJ1ABE=
Subject key identifier: DB:03:8C:CB:E5:D7:64:2F:33:24:97:31:B7:83:18:11:20:B4:68:38
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 686CB0D3CC29603B69826EA262C257679AE97517
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa
Signing time: Thu 02 May 2024 17:55:11 +0000
ROA not before: Thu 02 May 2024 17:50:11 +0000
ROA not after: Thu 01 May 2025 17:55:11 +0000
asID: 215318
IP address blocks: 2a14:1ec7:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:6c:b0:d3:cc:29:60:3b:69:82:6e:a2:62:c2:57:67:9a:e9:75:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: May 2 17:50:11 2024 GMT
Not After : May 1 17:55:11 2025 GMT
Subject: CN=DB038CCBE5D7642F33249731B783181120B46838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:6b:d0:fc:65:ec:98:b6:f3:61:af:fd:a1:
26:2a:23:01:15:b2:3a:26:d1:71:0f:b5:1c:79:75:
ee:b7:aa:1a:79:15:5a:46:b9:9d:39:f0:5d:ef:56:
22:5f:05:ea:e1:6c:eb:74:f3:ca:eb:49:44:16:c9:
14:75:f3:94:f4:6b:07:82:30:3a:05:c3:f6:f8:92:
fc:ea:0f:97:57:1f:24:10:2e:03:c2:b7:31:f8:3c:
d6:9f:54:ee:69:7c:49:01:a1:b5:1a:9d:79:67:8f:
d0:7f:08:61:d1:58:21:37:3a:a4:68:39:99:16:43:
72:26:b5:fa:1a:90:cf:ee:e0:e4:35:1c:ba:a8:f9:
ad:22:88:e5:a3:e9:78:8d:45:b0:e9:b6:20:9a:8d:
56:a4:57:3d:50:f2:1d:9b:d6:b8:3a:5b:58:64:ae:
43:e5:16:a9:52:79:66:04:ba:c9:1c:f2:37:96:16:
3d:bc:04:23:3e:3b:5c:78:ae:43:79:da:23:20:e9:
d1:5a:e5:05:10:bb:13:16:af:60:df:3b:b2:70:7b:
c7:1f:62:33:11:82:fd:0e:99:91:0f:7c:f6:21:2e:
9c:15:be:3c:cc:a1:e7:6e:59:70:8b:b0:3d:40:48:
0a:01:c7:f5:7c:2f:68:6d:08:4a:d9:18:19:77:1f:
e7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:8C:CB:E5:D7:64:2F:33:24:97:31:B7:83:18:11:20:B4:68:38
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663030303a3a2f33362d3336203d3e20323135333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
11:21:3f:1a:54:7f:57:46:62:a5:b0:e8:e6:60:e6:07:ec:a8:
86:7d:37:9b:b0:44:e5:3c:b0:82:cb:9c:14:24:ec:84:36:3d:
de:81:e1:ac:5a:2b:43:8d:90:5a:7a:c3:47:15:03:19:72:f4:
4d:b4:4d:e5:6a:5b:64:26:fc:11:46:5b:7d:cf:2b:93:d1:c4:
72:9b:aa:6e:21:cb:de:2e:e6:84:0c:42:f9:18:02:c9:d0:15:
87:3d:d6:d5:6c:7d:3f:37:6e:b8:64:0e:7e:1d:7a:dc:62:84:
01:2d:6f:de:04:48:2d:af:e1:c1:38:1a:3d:3b:df:f0:87:4b:
55:c8:87:3e:a8:e5:fc:ca:af:de:f5:01:8e:2d:83:49:ff:cf:
24:4d:af:65:d4:b5:77:28:e5:da:47:44:29:62:33:f2:ee:50:
0b:db:5b:93:5e:a1:eb:1a:16:52:f8:88:35:41:67:cc:08:e0:
47:82:b2:87:8d:14:3c:95:69:ad:8d:03:bc:b1:29:8f:38:f4:
a2:1a:78:99:82:3a:c9:22:f3:15:a2:84:d7:76:f2:9c:eb:7d:
92:db:a6:48:81:bd:08:85:52:e0:5e:d8:26:c7:b1:2f:17:92:
d0:f3:da:cb:07:15:92:ec:d5:72:f9:fc:51:90:b9:a8:bc:c7:
b7:13:41:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 02:44:31 2024 by rpki-client on console-fra.rpki-client.org