Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa
File: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (raw, json)
Hash identifier: MYKoEmllVAyYKTmfRaWUIl1KQBpJiM51RTw82pBlZ/0=
Subject key identifier: 1B:E4:8A:1B:33:9F:D3:71:88:F4:5B:86:46:30:58:25:74:AC:59:4B
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 54158EFC9909959AEAFB62883B3260B5908FF102
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa
Signing time: Sun 28 Jul 2024 10:44:56 +0000
ROA not before: Sun 28 Jul 2024 10:39:56 +0000
ROA not after: Sun 27 Jul 2025 10:44:56 +0000
asID: 199582
IP address blocks: 2a14:6f44:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 13:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:15:8e:fc:99:09:95:9a:ea:fb:62:88:3b:32:60:b5:90:8f:f1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Jul 28 10:39:56 2024 GMT
Not After : Jul 27 10:44:56 2025 GMT
Subject: CN=1BE48A1B339FD37188F45B864630582574AC594B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:97:61:68:0d:70:44:68:28:fb:2f:f0:e6:
67:c2:0e:ce:96:36:87:13:be:b9:c9:81:db:b6:bc:
2b:ca:d4:bf:4c:a3:ff:a5:cb:0b:8d:a9:04:46:25:
98:f5:0f:74:7a:55:13:58:4a:b6:a2:1f:08:25:29:
7a:01:87:96:27:e6:d9:f9:2c:c3:c3:12:fe:76:03:
4c:40:33:9e:77:96:b6:2e:d8:cd:41:c1:cc:3b:0b:
4d:ef:21:7f:57:f5:13:f8:db:43:aa:e5:97:3c:92:
fe:f6:a5:4d:ad:83:3c:9f:b0:07:02:2a:b5:0c:e7:
46:c1:81:ec:61:06:f2:37:4d:29:4c:e5:ae:6f:25:
69:db:dc:73:77:40:42:d9:3f:80:cb:6d:eb:e3:5a:
c2:9d:db:49:e0:ff:0a:3f:06:1c:04:ea:cf:02:2c:
a1:fd:7c:a6:4b:51:b4:5d:17:83:5d:15:5a:76:a1:
61:76:d3:c2:aa:63:a1:85:bd:74:6b:67:00:d9:61:
ec:77:24:a9:37:c9:a2:9c:25:16:c5:c0:c0:06:eb:
b9:81:43:f4:7d:33:b4:a3:2c:15:09:1d:2d:74:a3:
22:5f:6e:d0:9d:73:21:0e:c4:b8:44:92:83:f5:d8:
7b:37:66:7f:4e:8c:f8:0d:de:23:aa:1b:01:24:a6:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:8A:1B:33:9F:D3:71:88:F4:5B:86:46:30:58:25:74:AC:59:4B
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f44:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
4e:2a:58:f3:26:17:9e:c0:02:96:91:7e:78:8c:72:e5:3c:41:
e9:cf:f2:b8:f2:78:94:f7:45:57:9b:0a:b3:9e:17:4d:16:92:
87:e3:69:fe:e7:72:85:be:19:1d:36:d1:89:31:f3:57:d8:f2:
2e:ee:6d:3e:ea:fa:8e:49:bf:dc:a5:37:c2:0f:9c:8f:a8:67:
47:e2:71:20:fa:6b:06:c2:95:2d:78:cb:bc:2f:a4:88:2d:4e:
0a:21:41:da:0c:e1:37:9f:86:c4:a7:69:32:d5:e4:00:13:1d:
20:47:51:72:50:46:47:74:e9:68:c2:73:dd:4f:56:c3:10:2b:
c2:a4:54:9c:8c:57:09:33:53:30:66:a1:0b:3c:b3:c2:34:e5:
26:f9:ea:61:a2:9a:60:29:71:0c:03:ae:a0:3f:6c:18:b3:53:
49:0b:42:fe:46:55:89:b0:7b:94:cb:5c:39:f5:3b:f8:c0:72:
d9:8f:32:e3:6f:32:d7:a1:52:d6:32:09:80:ac:b1:9a:b8:70:
02:32:4b:bd:ab:4c:38:a9:06:f2:d8:8d:f0:af:94:cc:89:3f:
33:96:25:19:e5:9e:d1:1b:b6:e5:0b:45:86:52:eb:3a:65:65:
76:47:25:5d:c0:f4:14:e1:71:e9:78:d1:63:53:3d:e3:ca:25:
54:78:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:02 2024 by rpki-client on console-ams.rpki-client.org