Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa
File: 326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa (raw, json)
Hash identifier: zpjtEmeEmHujhlFLcENpxaGFfQ7SkaTrDnM2UMxgwSs=
Subject key identifier: 43:21:EC:60:72:97:59:86:09:91:44:3A:A6:10:53:6A:A3:95:09:35
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 3B7099C9A0F1A7F1407B9498AFA6B3E7A8BFFAB7
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa
Signing time: Wed 14 Feb 2024 14:35:57 +0000
ROA not before: Wed 14 Feb 2024 14:30:57 +0000
ROA not after: Wed 12 Feb 2025 14:35:57 +0000
asID: 215499
IP address blocks: 2a11:f2c0:ffce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:70:99:c9:a0:f1:a7:f1:40:7b:94:98:af:a6:b3:e7:a8:bf:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Feb 14 14:30:57 2024 GMT
Not After : Feb 12 14:35:57 2025 GMT
Subject: CN=4321EC60729759860991443AA610536AA3950935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:fa:0f:f7:4e:35:d0:3f:07:d3:9e:fc:35:f5:
49:7a:4e:e3:76:d0:95:1a:fa:0c:a7:31:d2:41:8e:
17:8d:a3:93:f1:7b:5a:23:15:f4:44:da:8c:c2:b9:
a0:29:4e:55:8a:4b:62:99:41:b2:63:7f:59:14:a1:
be:eb:42:d7:ec:bd:b3:b0:5a:78:21:2a:fb:37:50:
2c:8c:d0:af:a4:23:d4:dd:65:c3:fe:73:2b:65:af:
9e:91:22:cf:da:6e:50:5d:2d:86:26:59:ca:65:c9:
f3:4b:c5:35:ea:64:50:6d:8c:a1:aa:61:a9:38:9c:
72:c0:88:b4:6a:76:5c:c8:a1:d7:c8:e5:8f:1e:b6:
8f:26:7a:65:ff:d4:96:b3:47:8c:4b:96:4c:bb:c7:
16:57:a4:1d:49:5b:54:32:f7:20:af:ef:3f:dd:03:
01:f5:e7:49:26:dd:a1:6a:fd:61:da:90:d9:c0:73:
75:63:af:9a:ba:99:c9:e9:0c:3d:95:49:21:2d:9e:
17:72:c7:1f:59:4a:d3:62:f6:b1:43:d8:89:d3:fe:
38:bc:f5:f9:8b:91:96:1f:b7:09:ca:af:52:0c:90:
1f:f2:d9:5e:7c:f5:ee:9d:a8:de:22:13:50:cc:bd:
30:4d:97:ce:5b:9c:4d:10:d0:4c:ef:16:cb:0f:c8:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:21:EC:60:72:97:59:86:09:91:44:3A:A6:10:53:6A:A3:95:09:35
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666663653a3a2f34382d3438203d3e20323135343939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffce::/48
Signature Algorithm: sha256WithRSAEncryption
13:b4:4c:e2:b2:b1:01:1e:42:f6:f5:8b:62:5b:bb:af:96:b1:
3c:44:9f:7b:54:b8:dc:02:ff:35:ea:7a:9c:be:18:50:d8:5c:
c1:4b:c7:00:aa:d6:cd:7e:58:04:e4:90:82:0d:04:a7:ca:97:
45:80:35:64:7c:fd:66:da:41:f9:49:c4:32:29:18:c0:47:82:
eb:0e:3e:51:4f:40:10:e5:d1:7e:55:7c:5b:1c:e9:09:52:fc:
22:59:60:30:cf:ae:54:0f:17:d9:3d:9c:40:c7:a1:8f:9d:0a:
da:9c:8d:fc:16:51:8a:be:20:80:2d:94:31:4b:26:71:1d:53:
a3:bb:eb:b8:1e:18:53:f8:3a:22:ca:be:53:00:20:62:e5:8c:
01:77:ef:b1:1d:78:34:d1:f8:d1:64:dc:bb:10:bc:00:77:fb:
79:ed:e3:8c:be:02:cd:dc:ba:c9:e8:0c:ce:30:bc:ba:c0:91:
4e:31:8a:e6:a6:e6:fc:cd:ef:4e:54:72:69:da:54:dc:04:94:
61:56:28:f8:ca:5e:a5:21:f4:82:11:96:ae:8c:ca:28:f6:44:
6c:14:90:88:0b:32:f7:e3:d6:7c:07:44:66:36:d4:48:0f:0e:
9e:be:af:d2:01:fe:e5:d1:48:f8:e3:3c:79:c0:1b:af:d7:1b:
c2:c0:a8:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUO3CZyaDxp/FAe5SYr6az56i/+rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFhZDQ5YzQ3ZTJkMGU0MGNmYzliMzZhMmJkMmM1MTRl
MmE2MjY3YjAeFw0yNDAyMTQxNDMwNTdaFw0yNTAyMTIxNDM1NTdaMDMxMTAvBgNV
BAMTKDQzMjFFQzYwNzI5NzU5ODYwOTkxNDQzQUE2MTA1MzZBQTM5NTA5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3+g/3TjXQPwfTnvw19Ul6TuN2
0JUa+gynMdJBjheNo5Pxe1ojFfRE2ozCuaApTlWKS2KZQbJjf1kUob7rQtfsvbOw
WnghKvs3UCyM0K+kI9TdZcP+cytlr56RIs/ablBdLYYmWcplyfNLxTXqZFBtjKGq
Yak4nHLAiLRqdlzIodfI5Y8eto8memX/1JazR4xLlky7xxZXpB1JW1Qy9yCv7z/d
AwH150km3aFq/WHakNnAc3Vjr5q6mcnpDD2VSSEtnhdyxx9ZStNi9rFD2InT/ji8
9fmLkZYftwnKr1IMkB/y2V589e6dqN4iE1DMvTBNl85bnE0Q0EzvFssPyB8TAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUQyHsYHKXWYYJkUQ6phBTaqOVCTUwHwYDVR0j
BBgwFoAUEa1JxH4tDkDPybNqK9LFFOKmJnswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzcvMTFBRDQ5QzQ3RTJEMEU0MENGQzlCMzZBMkJEMkM1MTRFMkE2MjY3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VhMUp4SDR0RGtEUHliTnFLOUxGRk9L
bUpucy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2I1NzVlYTct
Nzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNlY2VlLzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjM2NTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzEzNTM0MzkzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACoR8sD/zjANBgkqhkiG9w0BAQsFAAOCAQEAE7RM4rKxAR5C9vWL
Ylu7r5axPESfe1S43AL/Nep6nL4YUNhcwUvHAKrWzX5YBOSQgg0Ep8qXRYA1ZHz9
ZtpB+UnEMikYwEeC6w4+UU9AEOXRflV8WxzpCVL8IllgMM+uVA8X2T2cQMehj50K
2pyN/BZRir4ggC2UMUsmcR1To7vruB4YU/g6Isq+UwAgYuWMAXfvsR14NNH40WTc
uxC8AHf7ee3jjL4Czdy6yegMzjC8usCRTjGK5qbm/M3vTlRyadpU3ASUYVYo+Mpe
pSH0ghGWrozKKPZEbBSQiAsy9+PWfAdEZjbUSA8Onr6v0gH+5dFI+OM8ecAbr9cb
wsCo7A==
-----END CERTIFICATE-----
Generated at Sat May 4 01:11:17 2024 by rpki-client on console-ams.rpki-client.org