Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a3a2f32392d3239203d3e2030.roa
File: 326131313a663263303a3a2f32392d3239203d3e2030.roa (raw, json)
Hash identifier: uRwdzD5SKMTX6NP524s7xDAu4B3b0hBxoItEfvggtvo=
Subject key identifier: FD:E3:02:7F:DE:DB:6B:C5:1F:B5:6E:BF:AF:53:76:AB:17:5F:3B:65
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 5C40682BA4630F3EF0211F9BB197E22D239D7921
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a3a2f32392d3239203d3e2030.roa
Signing time: Mon 13 Nov 2023 21:10:16 +0000
ROA not before: Mon 13 Nov 2023 21:05:16 +0000
ROA not after: Mon 11 Nov 2024 21:10:16 +0000
asID: 0
IP address blocks: 2a11:f2c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:40:68:2b:a4:63:0f:3e:f0:21:1f:9b:b1:97:e2:2d:23:9d:79:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Nov 13 21:05:16 2023 GMT
Not After : Nov 11 21:10:16 2024 GMT
Subject: CN=FDE3027FDEDB6BC51FB56EBFAF5376AB175F3B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:28:0a:2f:81:be:c3:42:5b:c8:30:f4:83:
86:d7:58:e2:d7:05:2c:3b:c4:37:41:e8:04:b0:79:
96:4a:bf:5f:e6:4e:c7:13:13:6b:3a:11:eb:8e:a3:
a9:29:da:6f:83:a1:bd:c8:1a:6e:33:26:f9:00:28:
c9:79:96:49:f7:93:c2:92:4a:e0:db:54:d0:dc:78:
99:1e:b7:5a:2f:61:fd:fe:0d:51:9e:86:c6:b4:ea:
af:3c:a4:53:a1:72:65:c4:7f:ab:60:77:6c:a3:0a:
3b:43:c6:2f:7f:89:f4:a5:d4:47:ea:8f:4a:47:9d:
25:6d:d6:2a:be:a9:1b:0d:02:fd:54:c9:22:20:79:
e5:83:00:36:84:09:d1:49:84:c5:c0:8c:ca:8a:4e:
84:68:41:e6:03:59:6e:e5:3e:ca:60:3c:11:95:4b:
e1:bb:ef:92:d1:c8:3c:ab:c7:01:c6:39:a6:49:5b:
9e:0f:fa:cd:c5:de:2a:9d:b1:1f:11:97:cf:10:57:
96:ab:53:50:22:c3:cf:b9:ea:23:fe:15:5a:45:da:
b0:85:f6:38:ad:07:64:bd:5f:79:22:88:0e:c9:c3:
dd:0a:b7:64:90:2d:29:22:81:96:64:e0:b5:14:9a:
3e:4b:07:a5:2d:1c:f2:bb:77:c7:68:10:13:88:0b:
0b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:02:7F:DE:DB:6B:C5:1F:B5:6E:BF:AF:53:76:AB:17:5F:3B:65
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a3a2f32392d3239203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0::/29
Signature Algorithm: sha256WithRSAEncryption
89:5f:68:2c:da:b6:ac:91:1d:83:18:dc:75:c9:0f:7a:41:dc:
16:04:c2:b5:a6:cf:0b:e8:7f:f8:1b:92:f5:f8:52:f7:c8:b6:
a6:d9:78:a5:80:24:f5:27:80:00:fd:fb:1a:6d:a7:2b:b3:ac:
58:6b:10:37:68:f3:c5:81:e3:5e:b5:78:00:d9:bf:ba:4f:f1:
05:0b:f9:35:1f:ba:48:4f:05:fc:91:ea:2e:bc:45:4b:96:9a:
72:52:92:32:e3:0a:4b:22:be:e6:9c:1b:cc:20:ab:07:dc:59:
00:57:8e:9a:56:f0:56:c4:27:31:a4:71:08:ce:32:fc:21:c0:
76:65:c2:34:24:a3:95:cc:28:20:5d:8e:21:7e:bb:8d:c7:bf:
1e:0a:be:14:84:ab:76:4f:22:8a:32:8a:70:a6:6d:81:1e:2d:
20:03:06:64:6e:96:6a:da:96:f1:9d:66:d6:ca:6d:be:69:d5:
1a:91:06:40:37:35:b8:45:63:c6:5c:49:a0:55:5d:22:bc:35:
76:f2:41:10:58:d0:52:90:8c:da:4e:16:e1:1d:70:a8:d0:a5:
40:6f:4e:a4:5c:d0:3c:4b:59:80:dd:81:cf:05:fb:1a:c8:06:
f5:58:da:40:99:b9:0b:ae:e4:1e:b3:9c:28:b6:2d:e9:8d:69:
b2:93:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:05:11 2024 by rpki-client on console-fra.rpki-client.org