Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa
File: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (raw, json)
Hash identifier: Kuq/T5/58120SUpTorsr1ML70JXySqoRjipE0Min4z0=
Subject key identifier: A5:34:AD:24:3F:C5:E9:2C:87:83:60:70:F9:E9:1C:9E:CD:F8:9D:60
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 523239CD4EF9780AC72AB0A5361443E62BDFF409
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa
Signing time: Fri 18 Oct 2024 12:13:49 +0000
ROA not before: Fri 18 Oct 2024 12:08:49 +0000
ROA not after: Fri 17 Oct 2025 12:13:49 +0000
asID: 208453
IP address blocks: 2a14:1ec7:f500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 07:52:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:32:39:cd:4e:f9:78:0a:c7:2a:b0:a5:36:14:43:e6:2b:df:f4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Oct 18 12:08:49 2024 GMT
Not After : Oct 17 12:13:49 2025 GMT
Subject: CN=A534AD243FC5E92C87836070F9E91C9ECDF89D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:ba:cd:c6:dd:c4:55:e6:fc:3e:61:75:ec:
75:96:ec:96:54:ee:43:33:ed:05:d4:7c:b1:ea:65:
a5:ad:9d:7d:81:3e:01:1a:9d:08:59:bd:fc:be:4f:
44:62:94:77:c8:f9:e7:d2:e4:9e:37:4f:cb:94:0c:
7b:7c:fe:0e:6d:3c:35:b6:f3:a0:8e:e4:fe:ae:8e:
60:47:2f:45:61:21:b1:cc:5c:63:4c:0d:d4:bc:ee:
45:63:2e:d3:88:45:0a:1e:e6:60:e8:dd:90:22:be:
6e:5f:17:6e:3f:89:77:23:c8:a1:d4:a4:ce:24:24:
77:c0:0c:16:93:dd:b6:de:ea:fd:65:b8:7c:91:48:
2e:a2:d4:93:2d:05:03:5e:45:29:e4:46:a1:ce:32:
c9:e5:57:a7:dc:eb:ea:ab:34:16:66:40:36:fe:fb:
3f:34:77:61:b8:56:e1:53:be:90:66:a8:dc:0b:48:
50:89:b7:6d:9e:1f:01:32:73:4e:43:c1:82:fa:72:
f2:eb:44:de:6e:91:72:8e:60:da:89:be:7e:fb:5c:
75:1b:f6:e8:39:57:ed:19:5e:8f:c6:9c:4b:d5:79:
a5:bd:28:bf:83:ac:a6:d4:62:18:8a:7a:c8:2c:65:
2c:ec:dc:9c:a2:bc:3d:4f:60:b1:41:45:db:17:55:
ab:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:AD:24:3F:C5:E9:2C:87:83:60:70:F9:E9:1C:9E:CD:F8:9D:60
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1ec7:f500::/40
Signature Algorithm: sha256WithRSAEncryption
12:ec:5e:8d:a5:66:e3:55:da:15:bc:d7:01:86:de:8f:3e:01:
ef:d8:b7:14:71:8e:95:5f:93:54:52:e7:9b:52:d6:77:72:90:
fe:16:d9:85:4b:46:0c:02:9e:6e:4b:7b:bf:bd:5c:68:73:f2:
8e:39:0c:13:aa:03:e9:3b:da:a1:26:3e:32:72:2e:32:85:9f:
65:4a:bc:12:94:8b:58:22:7f:74:f5:df:4c:8c:92:f3:1e:e8:
5e:53:6c:53:58:f4:87:21:8a:09:90:b6:77:29:1e:b7:23:9c:
b1:c8:26:cc:48:19:01:5b:09:99:b7:16:e6:3d:ae:d6:0b:36:
25:e9:6a:1f:bd:9a:7d:8a:ba:f6:b8:ee:89:a0:78:87:bb:58:
4f:4f:ad:57:48:4d:15:4a:61:73:36:6a:10:7d:18:c4:e0:05:
8e:f9:3e:31:41:4f:91:fe:c7:14:fb:e2:e6:2f:74:73:28:8a:
13:8c:1e:e4:20:2e:3d:03:32:13:83:28:11:b2:2c:73:fb:3f:
ec:fa:78:c8:05:26:d4:02:8d:63:e2:43:1c:44:ba:05:33:57:
70:0e:b0:45:56:0f:68:ab:ec:ac:26:8a:10:25:cd:21:8b:7d:
8e:45:5f:04:dc:4f:5c:32:a3:a1:4f:ac:8a:0d:0f:d5:31:dd:
3b:4e:e0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:59:22 2025 by rpki-client