Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
File: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (raw, json)
Hash identifier: zQ/yzhK7qvzoSsvDcyClVn7AKwYrbUYHcG3F64niJUE=
Subject key identifier: 47:7C:FB:98:12:3B:4E:A7:B8:26:5B:66:80:86:52:54:82:87:52:A4
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 25E7981F3124ECA0F92AA95C374FB4B213D1CA61
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
Signing time: Sun 08 Sep 2024 20:10:10 +0000
ROA not before: Sun 08 Sep 2024 20:05:10 +0000
ROA not after: Sun 07 Sep 2025 20:10:10 +0000
asID: 214757
IP address blocks: 2a14:6f45:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e7:98:1f:31:24:ec:a0:f9:2a:a9:5c:37:4f:b4:b2:13:d1:ca:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Sep 8 20:05:10 2024 GMT
Not After : Sep 7 20:10:10 2025 GMT
Subject: CN=477CFB98123B4EA7B8265B6680865254828752A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:29:e3:8b:33:f5:f8:1c:19:3e:f2:ec:e6:
8f:ab:ad:ee:3a:e3:c2:15:cd:10:28:18:91:e8:34:
94:e1:87:fc:60:7b:84:99:0e:e8:ce:be:95:ca:cf:
27:92:30:be:2d:2c:94:79:af:f6:9e:58:4b:06:9c:
cb:a4:c7:ff:c3:84:56:24:85:49:9c:9f:66:88:d6:
55:05:52:61:4c:8e:24:dc:2a:d2:41:58:d3:f1:dc:
d0:ff:d3:b5:8c:2f:5c:24:d7:b8:af:b9:a1:4e:96:
50:b0:78:9e:ce:d3:55:ce:aa:63:85:a6:26:27:3e:
6c:1f:49:bf:2e:15:23:dd:9c:fa:dd:c3:e9:fb:0c:
cb:77:81:74:a2:00:cf:94:3c:a1:a5:8f:30:e5:d4:
25:f9:52:60:58:40:c4:db:f1:71:01:75:ba:38:a0:
5e:ec:02:4f:f3:9f:47:ba:c0:69:0a:c8:8c:0e:99:
6e:13:2e:ea:80:a6:4f:44:1b:1d:fd:47:5d:8d:b0:
93:85:85:70:b3:83:4e:a9:4e:9b:5c:93:7c:a4:1e:
ed:fe:d9:fe:25:73:22:a9:9f:b9:ae:54:2f:65:8f:
aa:15:9b:a7:79:3c:ca:ae:ff:b2:39:b6:32:d9:b9:
78:c6:b6:cc:75:df:0f:99:5f:18:41:c3:5e:da:40:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:FB:98:12:3B:4E:A7:B8:26:5B:66:80:86:52:54:82:87:52:A4
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
0b:06:6c:46:b1:ed:47:b2:3d:47:25:ef:45:2a:d5:cf:f8:09:
db:1d:f2:b4:25:e3:a0:53:60:d2:69:d3:46:f6:a2:b6:8c:f3:
7f:55:3e:31:b7:ed:2b:b0:aa:be:4e:67:64:70:df:09:fd:46:
8e:56:e0:2a:1b:7c:60:35:71:ff:d6:62:1f:b0:b7:1c:4b:a8:
10:86:b3:e4:da:66:7a:f3:c8:fc:ba:6e:1e:82:5d:f4:76:a4:
fd:ab:39:aa:75:d4:30:43:fa:59:9e:73:31:a3:96:e8:ab:7b:
d7:77:41:a8:d0:7c:5f:85:5d:b3:36:ef:b4:cf:73:db:33:bf:
5e:c9:bb:eb:7e:d8:bc:87:c9:cd:f4:a2:a0:6f:51:62:8e:05:
f0:2e:89:6c:4e:42:14:c4:8a:e6:1c:c7:f7:c8:18:7d:30:53:
d2:c9:9c:42:03:5f:9e:f1:3b:9f:12:af:86:16:fb:1e:4c:f1:
25:03:89:5e:c3:ac:5b:da:93:9f:26:0b:12:08:9d:75:69:28:
db:c8:60:35:0f:c9:65:f0:98:f1:13:63:64:a0:75:a0:2d:fe:
38:d1:e5:68:10:c6:6c:b0:48:70:c1:a9:73:a4:66:d2:09:4b:
89:ab:4e:5f:e6:31:b5:27:c4:4c:72:1d:ea:8d:1a:2e:44:de:
5d:41:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 15:59:02 2024 by rpki-client on console-fra.rpki-client.org