Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa
File: 326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier: WB7UOWeGDAbNrwBGx6LHWwXgtP8O9AMGtOutni+re9k=
Subject key identifier: 63:E3:70:35:EF:DC:21:3B:C5:62:11:75:BD:CB:F9:A3:22:47:B1:69
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 2688593C1858E5710EC9A7AEDF04F5EAFD620C45
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa
Signing time: Tue 23 Jul 2024 04:40:45 +0000
ROA not before: Tue 23 Jul 2024 04:35:45 +0000
ROA not after: Tue 22 Jul 2025 04:40:45 +0000
asID: 215751
IP address blocks: 2a0b:4e04:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:88:59:3c:18:58:e5:71:0e:c9:a7:ae:df:04:f5:ea:fd:62:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Jul 23 04:35:45 2024 GMT
Not After : Jul 22 04:40:45 2025 GMT
Subject: CN=63E37035EFDC213BC5621175BDCBF9A32247B169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:61:e7:99:79:68:1f:39:21:30:e4:78:da:
41:9d:c1:82:03:47:c0:11:25:0c:ef:5e:99:7f:37:
b5:64:3f:b1:7b:a9:62:ed:e5:b9:0c:93:84:aa:fe:
bc:9d:22:23:50:31:e9:4e:5e:8d:31:79:1a:c0:01:
49:1b:21:35:e5:ef:b7:9f:b9:13:9a:54:7f:35:66:
45:4c:73:e7:9b:ba:70:02:2f:99:20:32:4f:0f:e4:
c7:12:ae:88:b0:92:ba:81:08:be:59:06:80:ee:8b:
0d:2e:7b:1e:a8:4d:14:3f:2d:b5:01:19:fa:d5:56:
c2:ae:55:3c:23:e8:c4:aa:6c:f4:36:0e:1e:5f:d3:
15:d0:fa:6e:20:46:cd:4f:56:07:2a:9e:d6:d3:51:
34:60:08:7f:b1:31:4c:c6:34:df:9e:72:de:ff:40:
ed:7d:6d:5d:c3:c9:2b:4b:37:97:f6:bc:d4:b0:0d:
1d:8c:3f:5c:b4:7d:f0:cb:f1:b8:f8:99:26:0a:63:
16:3e:19:29:5d:26:8f:27:c9:fd:ea:fd:79:0c:63:
06:48:14:8c:91:77:a5:e8:cd:b3:1b:1b:33:b4:14:
a3:52:b9:1c:bb:e3:91:30:54:9b:2d:63:42:2d:02:
ad:69:4d:4e:64:54:e8:76:6c:ed:69:3c:9d:9b:98:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:70:35:EF:DC:21:3B:C5:62:11:75:BD:CB:F9:A3:22:47:B1:69
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a623030623a3a2f34382d3438203d3e20323135373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
40:87:fb:75:7f:05:99:f9:47:c6:ee:4c:40:29:a7:ac:02:f6:
34:90:e9:d6:c2:9a:c3:66:13:93:b1:bb:2c:cf:9d:8a:10:02:
1b:42:5b:93:81:01:f3:05:e4:92:0d:e7:49:5d:a7:08:63:1c:
54:87:5e:32:7e:11:fe:1b:2c:30:da:c8:a5:11:c9:13:fd:85:
42:52:11:09:9c:51:a3:18:91:84:d9:d9:61:b3:7e:84:a2:71:
b8:c6:5d:1e:47:1a:f2:07:b7:cb:7e:84:d9:5f:f5:54:f6:03:
44:bf:96:bb:4f:d9:0c:cc:53:bc:ab:91:ad:83:6a:e8:42:be:
15:e1:d2:1e:26:f4:70:c6:bf:c7:f4:c1:90:30:ed:59:f9:35:
38:58:52:11:9f:8d:b1:1e:0c:e8:21:31:4e:b7:a3:41:3a:e9:
79:53:19:94:ac:9e:27:d2:7a:77:0e:e1:bd:b7:b0:e4:19:4e:
11:57:3c:5a:8c:b5:3c:91:63:26:eb:7a:68:ff:a5:f2:9e:c6:
59:e7:1c:fb:51:37:98:71:de:09:ae:a1:9e:e8:66:7e:88:f2:
36:b3:81:f5:36:02:4a:91:36:77:d3:e8:59:68:fc:91:c5:6f:
b1:c1:87:36:d3:18:ee:62:47:6c:d6:32:9f:b4:68:d9:7c:f7:
4a:c8:4b:62
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUJohZPBhY5XEOyaeu3wT16v1iDEUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJlNTA4ZmJhODk2MGY0ODA3MWIxMTlhY2NiZjU3YmRi
ZjNhODA1NzAeFw0yNDA3MjMwNDM1NDVaFw0yNTA3MjIwNDQwNDVaMDMxMTAvBgNV
BAMTKDYzRTM3MDM1RUZEQzIxM0JDNTYyMTE3NUJEQ0JGOUEzMjI0N0IxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBGHnmXloHzkhMOR42kGdwYID
R8ARJQzvXpl/N7VkP7F7qWLt5bkMk4Sq/rydIiNQMelOXo0xeRrAAUkbITXl77ef
uROaVH81ZkVMc+ebunACL5kgMk8P5McSroiwkrqBCL5ZBoDuiw0uex6oTRQ/LbUB
GfrVVsKuVTwj6MSqbPQ2Dh5f0xXQ+m4gRs1PVgcqntbTUTRgCH+xMUzGNN+ect7/
QO19bV3DyStLN5f2vNSwDR2MP1y0ffDL8bj4mSYKYxY+GSldJo8nyf3q/XkMYwZI
FIyRd6XozbMbGzO0FKNSuRy745EwVJstY0ItAq1pTU5kVOh2bO1pPJ2bmOqpAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUY+NwNe/cITvFYhF1vcv5oyJHsWkwHwYDVR0j
BBgwFoAUQuUI+6iWD0gHGxGazL9Xvb86gFcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgx
NWJiLzAvNDJFNTA4RkJBODk2MEY0ODA3MUIxMTlBQ0NCRjU3QkRCRjNBODA1Ny5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1VUktNmlXRDBnSEd4R2F6TDlYdmI4
NmdGYy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzNiOGVjMDEt
OGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzAvMzI2MTMwNjIzYTM0NjUzMDM0
M2E2MjMwMzA2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM3MzUzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoLTgSwCzANBgkqhkiG9w0BAQsFAAOCAQEAQIf7dX8FmflHxu5M
QCmnrAL2NJDp1sKaw2YTk7G7LM+dihACG0Jbk4EB8wXkkg3nSV2nCGMcVIdeMn4R
/hssMNrIpRHJE/2FQlIRCZxRoxiRhNnZYbN+hKJxuMZdHkca8ge3y36E2V/1VPYD
RL+Wu0/ZDMxTvKuRrYNq6EK+FeHSHib0cMa/x/TBkDDtWfk1OFhSEZ+NsR4M6CEx
TrejQTrpeVMZlKyeJ9J6dw7hvbew5BlOEVc8Woy1PJFjJut6aP+l8p7GWecc+1E3
mHHeCa6hnuhmfojyNrOB9TYCSpE2d9PoWWj8kcVvscGHNtMY7mJHbNYyn7Ro2Xz3
SshLYg==
-----END CERTIFICATE-----
Generated at Wed Sep 18 07:44:06 2024 by rpki-client on console-fra.rpki-client.org