Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
File: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (raw, json)
Hash identifier: 63gfoovPBYo7cWk3wqqhDZQwQYFTU+4m9e90gLjXrqA=
Subject key identifier: 28:92:8D:5E:13:22:4E:CA:F3:CB:05:A2:FF:4C:2B:A5:9D:97:25:01
Certificate issuer: /CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Certificate serial: 40F9BAE2C70E6041ADB73B49463AA79C3135AEF9
Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
Signing time: Tue 23 Jan 2024 17:59:54 +0000
ROA not before: Tue 23 Jan 2024 17:54:54 +0000
ROA not after: Tue 21 Jan 2025 17:59:54 +0000
asID: 47272
IP address blocks: 2001:67c:d88::/48 maxlen: 128
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl
rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:f9:ba:e2:c7:0e:60:41:ad:b7:3b:49:46:3a:a7:9c:31:35:ae:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e
Validity
Not Before: Jan 23 17:54:54 2024 GMT
Not After : Jan 21 17:59:54 2025 GMT
Subject: CN=28928D5E13224ECAF3CB05A2FF4C2BA59D972501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:1e:29:71:eb:39:6d:a8:00:44:29:80:3c:
db:bf:a7:48:6c:f0:bf:9d:09:b1:19:d8:eb:0e:2f:
b4:91:a1:77:23:fc:dd:86:d6:83:84:e2:54:c6:7f:
6b:0e:c2:30:01:e3:f4:1c:2a:0a:70:7a:11:17:4a:
c8:74:fe:5b:05:cc:cd:0d:d4:f7:11:50:56:b1:c7:
3a:da:8c:44:77:13:2b:2a:37:6d:c5:5a:ad:4c:30:
b1:27:63:e4:be:74:93:6f:6f:d9:87:4c:1e:f5:67:
b5:42:0b:cc:0e:77:8b:b0:5c:16:9b:60:16:6f:2c:
43:4f:23:b4:de:49:a1:80:d7:5c:ac:48:ff:9e:f4:
58:18:1f:f8:6e:f5:fb:37:1e:96:7a:a5:2a:3c:a3:
04:1b:8b:03:00:f8:ca:d9:3e:16:81:87:a6:95:4d:
c0:5a:e2:ed:20:21:b8:b5:2c:45:16:b7:cd:7d:77:
f0:9f:97:6f:c2:91:03:5a:0a:a7:41:d7:7b:17:a3:
be:63:04:aa:7c:54:92:4b:23:7f:88:61:25:3d:fc:
1e:aa:07:c2:5d:2f:42:c4:14:c8:33:83:97:4f:43:
06:0c:2c:04:95:0f:a5:27:37:c7:99:78:f4:2d:29:
a1:b4:fb:f4:ff:c5:b6:11:4c:02:0c:81:98:45:04:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:8D:5E:13:22:4E:CA:F3:CB:05:A2:FF:4C:2B:A5:9D:97:25:01
X509v3 Authority Key Identifier:
keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d88::/48
Signature Algorithm: sha256WithRSAEncryption
a0:0b:a2:7f:90:36:1c:a3:a5:3f:1f:af:b1:e0:c5:a2:5d:3f:
c5:9f:42:57:57:1a:b5:16:22:22:e7:b6:2a:6d:99:23:4c:1e:
38:fe:71:d9:ae:71:10:6b:64:5b:2c:5f:81:9a:9a:21:c3:16:
88:08:2f:74:bb:81:2c:f0:09:d5:fb:4b:77:57:c7:36:fa:4f:
9a:74:26:da:71:d7:ed:84:35:da:02:87:84:24:b6:8f:c5:b8:
88:6d:8b:ec:68:2e:c0:a8:aa:f5:73:e5:bf:03:cd:8f:fe:1d:
10:83:47:5d:db:5f:5d:05:17:06:66:31:67:74:ed:16:9c:76:
e8:b5:28:7f:10:2a:32:62:cb:5f:62:02:66:e6:67:71:1a:8f:
1e:e3:35:7b:a7:6c:c8:1b:4b:82:fc:86:88:7a:40:2b:2f:47:
88:00:c3:db:f7:37:a2:bc:38:e4:41:8f:f7:1b:74:87:f6:83:
74:f7:41:5a:eb:1a:78:6e:bf:98:be:d9:56:61:ae:a2:68:d1:
1d:e5:14:4e:ab:25:0f:39:a1:4a:24:8f:eb:f1:68:b0:c0:f9:
6c:c9:ed:23:9b:f5:b5:e6:ea:f3:2f:74:b6:86:58:32:e9:77:
b8:3a:ba:a4:0e:d9:c1:26:03:a2:39:bd:f2:d3:39:62:8e:83:
69:ca:6e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:04:21 2024 by rpki-client on console-ams.rpki-client.org