Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa
File: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier: a4ukGYTiYq7jplqRqplTT/ktVwOrPE2NyVeTUn2bSLQ=
Subject key identifier: 04:4D:9E:BD:FE:F3:F8:DE:AC:5D:4D:6A:EC:A9:9E:69:C7:8C:B4:85
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 5E7EAFD5517DA00A76B0752EBB5A16ACDCCE03CB
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa
Signing time: Fri 10 May 2024 11:33:14 +0000
ROA not before: Fri 10 May 2024 11:28:14 +0000
ROA not after: Fri 09 May 2025 11:33:14 +0000
asID: 215069
IP address blocks: 2a11:f2c0:ffd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7e:af:d5:51:7d:a0:0a:76:b0:75:2e:bb:5a:16:ac:dc:ce:03:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: May 10 11:28:14 2024 GMT
Not After : May 9 11:33:14 2025 GMT
Subject: CN=044D9EBDFEF3F8DEAC5D4D6AECA99E69C78CB485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:26:c5:5c:18:d2:3f:0a:35:cd:c3:cc:54:
86:77:41:50:ec:62:3d:26:3d:af:b4:90:6f:e4:b4:
52:b4:1a:60:69:9d:f9:ed:f2:8b:0b:eb:9f:d1:9c:
fc:08:f8:29:43:72:e3:a4:88:56:f7:69:ae:dd:0c:
10:36:9b:22:7a:d3:b9:77:74:ee:d5:9d:f0:67:91:
d7:b6:2f:bf:0f:1b:43:54:40:f4:80:b5:ea:cf:e6:
0a:cb:23:04:2e:f3:9a:72:2d:27:e7:6f:7e:a7:a1:
73:e0:78:c7:10:67:db:2c:f7:4f:20:0e:ab:a0:fe:
df:99:fe:3e:d0:a0:34:fa:5c:fe:5c:84:33:20:03:
12:c2:ed:1b:79:1c:ac:33:7b:18:2e:5d:83:a2:bf:
fc:cf:d8:66:9c:b2:74:41:4c:ee:b7:24:50:44:cc:
1b:43:93:e7:cb:f3:eb:45:bd:7b:f7:26:a6:e7:c4:
a7:5d:0e:32:0a:02:ec:ae:dd:eb:50:59:d1:a4:46:
4d:3d:13:bc:e8:a0:04:b1:4d:c6:a7:d2:2a:13:cc:
e4:63:67:42:a7:9a:3e:ba:1d:59:35:a1:4a:c7:4a:
87:3a:dd:b0:38:d0:f5:f1:73:c2:b9:0f:5e:d5:1f:
1e:3e:2b:f3:20:e2:74:e2:7c:01:fb:d6:2f:2e:76:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4D:9E:BD:FE:F3:F8:DE:AC:5D:4D:6A:EC:A9:9E:69:C7:8C:B4:85
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffd0::/48
Signature Algorithm: sha256WithRSAEncryption
01:65:9e:58:c8:1a:17:83:1b:cd:f2:db:5b:88:ee:90:2a:66:
56:38:c0:f7:e1:a0:64:53:0f:31:4d:e6:a1:03:c5:ab:e7:4b:
e5:0b:d0:4b:2a:21:8c:b8:f8:cd:f6:fd:64:85:4f:0e:b8:ec:
e6:9c:08:c6:fc:0a:6f:b2:23:f9:59:94:5c:eb:0c:1e:0a:a7:
cf:fe:70:44:80:e7:c9:4b:08:ae:6e:46:33:21:dd:ca:da:22:
8f:ad:33:9b:9c:f1:31:7d:d4:7a:0b:ae:6b:fb:5a:7c:0e:0f:
1e:d9:fe:79:9b:13:eb:34:78:a7:a1:be:de:e4:ed:16:dc:85:
9b:17:fd:89:1d:87:3b:8d:3c:22:61:80:c3:7f:77:6a:07:01:
e8:07:60:94:48:0b:55:54:44:57:93:d1:d5:fb:22:12:58:5a:
31:70:0d:e6:e8:9a:35:3f:09:17:2b:1e:8b:54:5b:8e:54:25:
87:cd:0e:70:4c:15:0d:8c:c6:21:a3:e5:90:cc:c3:3f:cb:e5:
da:d4:80:b5:21:f5:67:b8:8a:0c:e1:27:37:28:dd:dc:ca:eb:
63:a2:96:0f:1d:d8:85:b6:1f:7e:dc:50:e4:2c:8b:07:d2:c8:
44:8c:ea:b7:a8:9b:19:e6:41:1e:70:34:9d:11:a0:e2:2a:2f:
03:30:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:29:49 2024 by rpki-client on console-ams.rpki-client.org