Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa
File: 326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier: WkFTq6lcv25qZPkE7HiNlXS/5HhVPUklhewHCK7iBFs=
Subject key identifier: 11:03:86:17:4D:09:DC:4D:45:D3:EC:C0:34:68:A6:F2:F4:2A:1A:0F
Certificate issuer: /CN=42e508fba8960f48071b119accbf57bdbf3a8057
Certificate serial: 1A602E780A451943F6ED0DF1E7E44B0ABC5AD0CC
Authority key identifier: 42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa
Signing time: Tue 23 Jul 2024 02:27:18 +0000
ROA not before: Tue 23 Jul 2024 02:22:18 +0000
ROA not after: Tue 22 Jul 2025 02:27:18 +0000
asID: 215751
IP address blocks: 2a0b:4e04:f00d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:60:2e:78:0a:45:19:43:f6:ed:0d:f1:e7:e4:4b:0a:bc:5a:d0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e508fba8960f48071b119accbf57bdbf3a8057
Validity
Not Before: Jul 23 02:22:18 2024 GMT
Not After : Jul 22 02:27:18 2025 GMT
Subject: CN=110386174D09DC4D45D3ECC03468A6F2F42A1A0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:90:a1:13:17:ca:01:4e:15:62:93:98:f0:
ad:9b:41:19:6b:b5:1d:dc:2d:0a:bc:64:de:05:2e:
a3:3a:a4:9d:48:88:0b:8a:71:48:1e:c0:a9:a3:16:
d8:b7:1b:d1:d1:05:10:fe:07:a7:bc:ee:d2:4d:a1:
17:28:8f:b6:bb:ca:92:38:54:49:7e:1a:9d:4c:51:
f4:bf:07:25:51:92:26:d0:00:45:54:7a:c5:0d:85:
17:cb:eb:03:26:95:68:77:f5:c6:c5:f4:56:76:e0:
ee:5c:e3:e2:06:de:8f:4d:03:69:8b:26:ca:ea:78:
30:69:98:bd:3e:1d:26:84:00:cc:e5:f2:5c:6c:08:
f4:5e:97:46:57:db:c1:81:87:61:0a:d5:cc:4a:bc:
dd:5e:17:8c:ff:a6:b2:3a:8f:08:46:68:23:39:e8:
e9:bf:e9:7a:4b:37:84:ce:3e:08:cc:ca:d8:e7:f9:
cf:5a:63:10:16:b4:cb:6d:30:83:69:19:30:0b:0d:
69:ac:d5:df:c3:62:d8:aa:8e:1f:df:53:01:8c:d3:
e9:4d:26:ff:6f:30:34:6c:6e:4f:ed:a1:d9:ea:82:
48:24:13:05:59:09:da:21:f0:51:33:0a:52:6c:ee:
92:69:b7:1f:da:02:7c:5a:f5:c1:12:fb:62:14:93:
79:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:86:17:4D:09:DC:4D:45:D3:EC:C0:34:68:A6:F2:F4:2A:1A:0F
X509v3 Authority Key Identifier:
keyid:42:E5:08:FB:A8:96:0F:48:07:1B:11:9A:CC:BF:57:BD:BF:3A:80:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/326130623a346530343a663030643a3a2f34382d3438203d3e20323135373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:f00d::/48
Signature Algorithm: sha256WithRSAEncryption
6a:b4:0a:da:d0:71:ac:1f:0f:a3:8d:42:0d:0a:b9:ce:52:60:
0b:73:e0:69:10:63:73:25:27:eb:ac:68:c6:2c:e4:6e:34:6a:
23:23:87:1c:f0:72:7b:0f:4a:91:0f:bb:8e:5e:dd:32:9c:e3:
a3:3e:11:e2:70:22:b9:fe:63:2f:a7:8e:82:55:99:ab:65:e4:
e4:f6:35:f2:29:1b:28:dc:2f:a7:cc:66:76:a1:9e:9d:8e:63:
ed:3e:55:7a:50:f0:94:19:e3:bf:1a:47:06:f2:12:18:53:e3:
41:c4:b1:da:b2:66:58:93:3f:36:6c:3b:28:21:16:67:39:18:
2d:0d:47:b6:0a:97:cc:45:c1:07:3c:25:f2:7f:5a:fe:7d:4b:
fd:94:ca:a1:05:56:ff:b1:50:90:f4:c1:46:59:4c:17:85:71:
6c:cc:93:f5:52:2a:ec:6f:41:82:5f:83:39:6d:53:ee:88:82:
91:8a:ec:81:6d:3b:08:0f:39:1f:6b:94:6f:6e:dc:a8:ff:62:
95:6f:34:70:17:da:ee:25:4b:9b:e5:7a:2a:4a:94:21:38:cf:
19:ac:ce:6b:7c:b5:ea:e3:90:86:b6:7c:05:d8:e1:9d:ab:64:
43:23:5e:71:01:6a:b9:6b:9c:66:c4:80:c4:44:95:3a:c5:4d:
b4:b6:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 08:50:49 2024 by rpki-client on console-ams.rpki-client.org