Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa
File: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (raw, json)
Hash identifier: kj+wMZhCYMt0Z9jhqZmZtaHQjz2obXZ+/J2z1ua51wg=
Subject key identifier: 18:74:00:D7:79:1D:A9:B5:FB:8E:AA:38:C3:B9:2C:F6:F6:FF:C2:20
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 43A08CDA381C998E4F07FCB188C8F43FF58A4766
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa
Signing time: Fri 20 Dec 2024 17:10:39 +0000
ROA not before: Fri 20 Dec 2024 17:05:39 +0000
ROA not after: Fri 19 Dec 2025 17:10:39 +0000
asID: 198342
IP address blocks: 2a14:6f45:c000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a0:8c:da:38:1c:99:8e:4f:07:fc:b1:88:c8:f4:3f:f5:8a:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Dec 20 17:05:39 2024 GMT
Not After : Dec 19 17:10:39 2025 GMT
Subject: CN=187400D7791DA9B5FB8EAA38C3B92CF6F6FFC220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:06:44:a2:b1:20:43:e9:e3:70:df:ed:1b:df:
42:8c:14:cc:dd:5e:fc:1c:dd:06:76:6a:69:62:e8:
1d:d6:a2:81:ac:28:aa:73:62:8e:46:61:2e:09:4d:
73:17:2a:5e:4f:08:28:82:00:1c:14:32:72:54:79:
a6:34:9e:ea:0b:7b:61:8c:b9:75:33:92:d6:42:58:
b5:28:0c:b1:82:cf:a9:c5:02:37:4d:bb:38:7d:fd:
54:fd:17:ed:ca:f9:52:7e:f7:8e:c9:52:1f:e2:09:
02:4c:9a:22:e8:cb:48:55:1e:0e:32:c3:be:60:5f:
f0:94:e3:25:64:5d:4e:e7:e3:74:80:ca:85:b4:e9:
10:f4:d1:03:fb:6c:df:10:35:0d:3f:4b:32:2a:c0:
fc:e6:b8:1f:46:d1:9d:a7:60:1d:88:06:f6:a8:3d:
e6:ee:f7:b8:19:3c:da:1f:61:3e:60:e4:54:3a:ee:
ad:b2:5a:e1:55:ef:fa:aa:86:4d:22:30:6e:ba:94:
05:ae:f9:f0:88:39:ea:09:0f:6d:4b:1f:95:0a:90:
f4:fa:db:b4:7b:a5:b3:e6:96:af:fd:98:5d:c0:22:
bf:18:7b:69:ee:7f:ea:e5:ed:a6:b7:1c:e1:15:ae:
0d:45:f9:57:27:26:68:44:69:3f:0d:44:08:4c:a1:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:74:00:D7:79:1D:A9:B5:FB:8E:AA:38:C3:B9:2C:F6:F6:FF:C2:20
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6f45:c000::/36
Signature Algorithm: sha256WithRSAEncryption
a1:2a:e2:19:ea:ea:3c:4f:79:b9:9c:ac:e8:47:10:68:d8:6d:
f7:d3:66:05:95:57:81:80:b5:8c:b6:ce:9e:6e:43:69:59:9a:
7c:d3:92:92:c5:d0:f9:a6:09:78:c5:06:1d:51:60:6f:3b:ec:
97:00:04:a8:9e:56:45:47:41:86:24:92:43:a1:e0:3d:c8:77:
c6:79:9d:e6:33:44:1e:72:11:fd:b3:03:3f:f1:fd:32:fa:f5:
41:fd:7b:1e:87:a8:9b:b0:28:1b:d3:7b:b2:1e:ef:d7:1d:82:
0b:ad:98:41:ba:da:ea:dc:d7:fe:1e:24:2b:e4:59:df:a0:d1:
78:6a:ef:d5:a1:3a:c9:1d:a9:ae:1d:b4:45:3b:0c:12:67:c2:
c4:ea:d4:43:27:70:6c:b7:b4:ff:db:18:d8:ae:80:b6:75:0a:
38:13:42:3c:bb:46:fb:f2:6d:b9:c2:a9:53:6b:49:3f:7d:5b:
0b:29:2a:68:45:8b:61:35:5a:0a:ab:71:f5:0b:76:53:60:5a:
8a:2a:79:5e:0b:54:db:eb:cc:f9:d3:b7:73:60:af:90:c1:bd:
c4:d3:fa:ae:fd:e6:c2:54:1b:3e:ae:e5:49:95:83:21:e4:65:
59:97:bd:e2:d4:02:11:ef:7d:64:96:31:18:55:ab:8d:50:c1:
b8:04:60:6c
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUQ6CM2jgcmY5PB/yxiMj0P/WKR2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNDEyMjAxNzA1MzlaFw0yNTEyMTkxNzEwMzlaMDMxMTAvBgNV
BAMTKDE4NzQwMEQ3NzkxREE5QjVGQjhFQUEzOEMzQjkyQ0Y2RjZGRkMyMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BkSisSBD6eNw3+0b30KMFMzd
Xvwc3QZ2amli6B3WooGsKKpzYo5GYS4JTXMXKl5PCCiCABwUMnJUeaY0nuoLe2GM
uXUzktZCWLUoDLGCz6nFAjdNuzh9/VT9F+3K+VJ+947JUh/iCQJMmiLoy0hVHg4y
w75gX/CU4yVkXU7n43SAyoW06RD00QP7bN8QNQ0/SzIqwPzmuB9G0Z2nYB2IBvao
Pebu97gZPNofYT5g5FQ67q2yWuFV7/qqhk0iMG66lAWu+fCIOeoJD21LH5UKkPT6
27R7pbPmlq/9mF3AIr8Ye2nuf+rl7aa3HOEVrg1F+VcnJmhEaT8NRAhMoRedAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUGHQA13kdqbX7jqo4w7ks9vb/wiAwHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt
ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM1
M2E2MzMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMxMzkzODMzMzQzMi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGBCoUb0XAMA0GCSqGSIb3DQEBCwUAA4IBAQChKuIZ6uo8T3m5nKzo
RxBo2G3302YFlVeBgLWMts6ebkNpWZp805KSxdD5pgl4xQYdUWBvO+yXAASonlZF
R0GGJJJDoeA9yHfGeZ3mM0QechH9swM/8f0y+vVB/Xseh6ibsCgb03uyHu/XHYIL
rZhButrq3Nf+HiQr5FnfoNF4au/VoTrJHamuHbRFOwwSZ8LE6tRDJ3Bst7T/2xjY
roC2dQo4E0I8u0b78m25wqlTa0k/fVsLKSpoRYthNVoKq3H1C3ZTYFqKKnleC1Tb
68z507dzYK+Qwb3E0/qu/ebCVBs+ruVJlYMh5GVZl73i1AIR731kljEYVauNUMG4
BGBs
-----END CERTIFICATE-----
Generated at Fri Apr 4 05:28:45 2025 by rpki-client