Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa
File: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (raw, json)
Hash identifier: xyVeniR3LS2bZlUijGrUW75mDjHK8Jghu3MvJXI2srY=
Subject key identifier: 2D:80:D1:A6:C4:BF:C6:9B:1B:73:9E:C2:7C:0A:33:BE:FD:A4:C8:F7
Certificate issuer: /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial: 6BEE67A088A9EAF1AD399C9CE586EB9FBEC7E921
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa
Signing time: Wed 18 Dec 2024 10:58:13 +0000
ROA not before: Wed 18 Dec 2024 10:53:13 +0000
ROA not after: Wed 17 Dec 2025 10:58:13 +0000
asID: 47496
IP address blocks: 2a05:dfc1:c42c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl
rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ee:67:a0:88:a9:ea:f1:ad:39:9c:9c:e5:86:eb:9f:be:c7:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Validity
Not Before: Dec 18 10:53:13 2024 GMT
Not After : Dec 17 10:58:13 2025 GMT
Subject: CN=2D80D1A6C4BFC69B1B739EC27C0A33BEFDA4C8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:93:45:3d:3a:c5:2f:aa:16:09:c9:f4:ab:
c0:51:47:68:e9:ea:e0:5f:8e:88:45:af:f4:b2:8a:
65:e4:79:ec:1d:8d:ec:8d:47:f7:6b:af:27:bf:6d:
55:01:4b:90:8b:62:6c:80:f3:87:4f:d7:d0:ae:de:
90:91:3b:0c:79:b0:6a:a0:89:1d:63:02:9f:64:da:
9d:53:9f:c6:1d:26:f9:4d:a8:b7:1d:cf:1d:9e:f7:
73:7f:30:08:f5:5e:c8:92:b0:9b:06:99:61:7f:43:
ff:fe:1e:df:c2:45:16:1a:2c:58:56:d5:c4:72:5b:
1c:cb:2a:12:85:4b:92:78:5a:4f:2d:cd:d3:e6:3a:
d6:85:e8:f2:2b:2e:7d:4d:a6:8c:79:f0:00:f2:89:
ba:a3:c8:fc:9d:62:73:38:48:b9:30:6f:0b:a4:e6:
c2:1e:07:d3:62:ea:3b:2e:d6:a5:c8:55:2c:a0:34:
d4:6b:71:15:99:a6:a3:71:d0:c4:73:6c:aa:11:6a:
e2:a0:27:88:6e:17:35:47:0d:76:0c:55:ae:5e:9f:
2f:13:7c:ab:af:98:76:4a:92:63:a8:c3:ee:72:7a:
71:df:18:9e:c3:1c:31:a9:6f:26:0a:84:14:0d:b0:
09:1e:67:aa:ac:7b:7a:1f:7f:bf:50:b7:12:93:41:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:80:D1:A6:C4:BF:C6:9B:1B:73:9E:C2:7C:0A:33:BE:FD:A4:C8:F7
X509v3 Authority Key Identifier:
keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:c42c::/48
Signature Algorithm: sha256WithRSAEncryption
ab:0e:cf:83:e5:26:ac:ea:cd:d6:f1:38:f2:d8:a7:9c:47:25:
52:ae:4f:d8:36:0f:50:0f:9c:67:bf:c6:60:2b:17:25:6c:ca:
2d:a8:9b:70:73:30:8f:18:81:a7:24:f7:a1:8e:9e:ae:34:e2:
b3:60:90:c8:83:c5:64:ef:ee:82:39:0a:46:17:be:1f:ef:fd:
d4:25:02:4d:26:07:f8:5a:ff:91:a9:0c:6b:42:1d:5d:60:d2:
5d:a0:97:61:3d:ec:4d:57:52:c5:4d:b0:c6:ce:fc:42:65:bb:
40:42:03:e8:ef:ea:e8:3c:7e:b3:70:dd:09:4b:7d:9b:04:87:
51:c2:ac:0b:46:c1:2d:ce:af:d5:71:d2:43:14:f8:fe:f2:ec:
3a:53:db:aa:20:d3:b1:cf:d3:12:44:6c:7d:94:af:66:f4:01:
1e:22:e6:80:aa:2a:48:0e:65:c1:f2:89:74:8f:4e:39:b5:a1:
3d:e0:f4:83:e9:13:7d:1b:17:d9:8f:64:69:10:16:26:66:da:
8f:03:5c:ff:97:2a:3d:62:80:c9:e5:de:d9:36:49:9a:51:3c:
b5:b3:68:fe:3b:f7:75:f9:d8:a0:2f:b4:13:ef:2c:69:25:e2:
3f:df:2c:63:72:5f:b5:d3:26:18:8b:c0:76:c7:a3:bc:c0:a5:
cd:ea:ae:a8
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUa+5noIip6vGtOZyc5Ybrn77H6SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5
NkZFQTRGMDAeFw0yNDEyMTgxMDUzMTNaFw0yNTEyMTcxMDU4MTNaMDMxMTAvBgNV
BAMTKDJEODBEMUE2QzRCRkM2OUIxQjczOUVDMjdDMEEzM0JFRkRBNEM4RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbZNFPTrFL6oWCcn0q8BRR2jp
6uBfjohFr/SyimXkeewdjeyNR/drrye/bVUBS5CLYmyA84dP19Cu3pCROwx5sGqg
iR1jAp9k2p1Tn8YdJvlNqLcdzx2e93N/MAj1XsiSsJsGmWF/Q//+Ht/CRRYaLFhW
1cRyWxzLKhKFS5J4Wk8tzdPmOtaF6PIrLn1Npox58ADyibqjyPydYnM4SLkwbwuk
5sIeB9Ni6jsu1qXIVSygNNRrcRWZpqNx0MRzbKoRauKgJ4huFzVHDXYMVa5eny8T
fKuvmHZKkmOow+5yenHfGJ7DHDGpbyYKhBQNsAkeZ6qse3off79QtxKTQXP1AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQULYDRpsS/xpsbc57CfAozvv2kyPcwHwYDVR0j
BBgwFoAUiong24lTH3I+QsdQkoLMVJb+pPAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzIvOEE4OUUwREI4OTUzMUY3MjNFNDJDNzUwOTI4MkNDNTQ5NkZFQTRGMC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzhBODlFMERCODk1MzFG
NzIzRTQyQzc1MDkyODJDQzU0OTZGRUE0RjAuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4LTNlZjlkMDk4MjM1
Mi8yLzMyNjEzMDM1M2E2NDY2NjMzMTNhNjMzNDMyNjMzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNDM3MzQzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwcQsMA0GCSqGSIb3DQEB
CwUAA4IBAQCrDs+D5Sas6s3W8Tjy2KecRyVSrk/YNg9QD5xnv8ZgKxclbMotqJtw
czCPGIGnJPehjp6uNOKzYJDIg8Vk7+6COQpGF74f7/3UJQJNJgf4Wv+RqQxrQh1d
YNJdoJdhPexNV1LFTbDGzvxCZbtAQgPo7+roPH6zcN0JS32bBIdRwqwLRsEtzq/V
cdJDFPj+8uw6U9uqINOxz9MSRGx9lK9m9AEeIuaAqipIDmXB8ol0j045taE94PSD
6RN9GxfZj2RpEBYmZtqPA1z/lyo9YoDJ5d7ZNkmaUTy1s2j+O/d1+digL7QT7yxp
JeI/3yxjcl+10yYYi8B2x6O8wKXN6q6o
-----END CERTIFICATE-----
Generated at Tue Apr 8 18:47:56 2025 by rpki-client