Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa
File: 326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier: I9qWgwFJQ/jNgvy2DL5wzaoDqY36P4MLQJbgQQaudr8=
Subject key identifier: 40:1E:0F:9E:73:1E:C5:5C:9D:EB:DB:2E:9B:FD:97:10:EC:82:8C:B2
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 5FE784609A309325626A2AD775B5836FA58A18DF
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa
Signing time: Tue 23 Jul 2024 02:27:18 +0000
ROA not before: Tue 23 Jul 2024 02:22:18 +0000
ROA not after: Tue 22 Jul 2025 02:27:18 +0000
asID: 215751
IP address blocks: 2a0b:4e04:3333::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e7:84:60:9a:30:93:25:62:6a:2a:d7:75:b5:83:6f:a5:8a:18:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Jul 23 02:22:18 2024 GMT
Not After : Jul 22 02:27:18 2025 GMT
Subject: CN=401E0F9E731EC55C9DEBDB2E9BFD9710EC828CB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:73:2e:3a:83:02:ee:4e:6f:39:db:c2:14:
16:64:c5:ba:10:af:ae:61:f6:04:61:50:1b:2b:c2:
5b:11:08:55:20:a7:5a:87:84:92:2e:ab:ce:59:e9:
de:bc:43:09:6d:f7:ad:4b:5c:d3:bd:fa:be:f0:d0:
a8:8c:8f:b2:5e:bd:21:5d:41:bd:76:71:c8:a4:0b:
f8:ea:72:b3:40:cb:c1:54:ff:a6:fd:21:c7:d5:7c:
48:6c:1b:32:c4:9b:7b:46:84:cd:2d:80:bc:9f:95:
57:c4:e7:d3:c4:4e:4e:a9:bd:31:e5:3d:91:6e:bb:
04:c7:e3:db:44:ef:c6:ff:4f:e4:9e:24:bf:2c:b2:
fb:31:f2:51:0e:b1:1b:41:58:78:c8:18:8d:ed:e6:
a1:37:25:4c:38:34:24:8c:b0:c1:6c:80:aa:89:4a:
43:ca:42:fb:db:9e:f9:ab:03:91:c1:0b:10:ff:a2:
fb:c6:1f:5e:a6:89:6c:51:3c:14:2b:26:6a:d1:a0:
a6:04:cc:8d:7a:1d:7b:f0:8c:3e:1e:f0:8c:ca:f1:
87:a7:e9:67:cd:4b:3a:92:8b:b5:2d:97:1f:b4:26:
83:20:8f:23:2c:c7:44:e5:1f:ee:c7:3a:5d:96:3e:
6f:a0:6f:b6:1f:85:48:ea:66:10:7e:07:c3:56:65:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:0F:9E:73:1E:C5:5C:9D:EB:DB:2E:9B:FD:97:10:EC:82:8C:B2
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a333333333a3a2f34382d3438203d3e20323135373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:3333::/48
Signature Algorithm: sha256WithRSAEncryption
6b:6b:8e:83:14:98:18:d6:1b:c2:33:d2:f5:50:6b:81:70:ed:
48:60:3f:79:16:e5:b9:58:bb:c4:5d:b0:64:3d:96:af:d2:86:
f0:fe:55:5b:d5:12:db:3a:44:0d:a2:df:88:4e:8d:ce:99:19:
12:6e:ee:ca:f5:6d:35:ea:c7:e8:2b:85:f3:20:d5:86:22:02:
88:91:20:6d:a6:1e:26:67:52:84:f5:50:c8:8c:96:53:c5:27:
52:93:e5:ea:a9:ae:48:02:66:dd:7d:c2:c7:c8:c6:76:df:95:
96:18:ab:3b:03:96:be:d4:ce:93:f0:69:eb:de:4b:ea:3f:8d:
f6:60:7b:d3:78:31:ba:0e:8e:bc:cc:ac:c1:3f:2e:50:32:86:
4e:b8:e5:e9:b3:79:56:f6:bf:71:47:03:9d:7a:99:25:61:70:
84:db:be:cf:d3:06:ad:43:d3:17:9f:a0:45:af:01:9b:e9:c2:
cf:fa:a5:db:dc:f0:15:5a:fc:aa:5d:9c:15:8c:a5:c2:a3:a2:
9b:47:ff:59:3b:40:29:cd:81:a9:af:bc:ba:2e:21:47:62:04:
5d:85:77:3f:bf:ef:c5:44:ce:ec:90:2b:22:77:5f:be:cb:75:
24:c5:b1:d4:dc:f0:84:94:66:a4:cd:09:49:0a:3e:8e:70:a0:
7f:1c:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 08:50:49 2024 by rpki-client on console-ams.rpki-client.org