Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
File: 326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa (raw, json)
Hash identifier: 5x2LMrvBrDvZjtrifpaZT0T0epIV+pO3PAuVLKDuEZE=
Subject key identifier: 53:EE:DD:4F:FA:DB:CA:99:0B:92:AD:40:CD:26:A8:C6:1D:C4:4F:00
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 33A713C76C44C0817CB987C94A06EA68DC23DF92
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
Signing time: Wed 08 Nov 2023 14:49:58 +0000
ROA not before: Wed 08 Nov 2023 14:44:58 +0000
ROA not after: Wed 06 Nov 2024 14:49:58 +0000
asID: 208051
IP address blocks: 2a11:f2c0:ffe0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a7:13:c7:6c:44:c0:81:7c:b9:87:c9:4a:06:ea:68:dc:23:df:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Nov 8 14:44:58 2023 GMT
Not After : Nov 6 14:49:58 2024 GMT
Subject: CN=53EEDD4FFADBCA990B92AD40CD26A8C61DC44F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:20:96:73:55:96:41:d3:19:b0:cc:0c:e0:f8:
d3:9c:69:40:7e:b5:4a:4a:db:20:d8:c4:e8:ab:75:
95:87:b3:ef:21:08:1d:42:7f:0a:de:e8:90:a4:e4:
8e:4f:b6:4c:d8:2f:c8:67:9a:c5:35:46:e6:bd:b7:
6b:ed:86:84:db:8c:1b:de:b8:cd:8e:0a:c8:fd:f1:
bb:d4:03:33:4f:c3:48:35:11:b9:70:4b:ee:a7:3d:
9e:cb:09:f4:1f:2c:30:a6:1e:8c:8c:0d:48:0c:db:
bb:a4:e4:58:b9:c4:93:9b:e0:50:b2:59:f2:90:bf:
58:7f:85:61:4f:da:fe:44:ae:72:d4:b7:6e:ab:9c:
f6:d4:78:53:f8:7e:f4:6c:1f:1a:3d:65:c5:af:6b:
55:6e:d4:33:53:61:47:98:03:dc:cf:6f:4b:b5:00:
cb:1a:62:f8:df:44:e4:68:c7:e5:da:6b:51:a9:50:
03:45:b3:1b:bd:c2:2a:24:46:96:83:42:01:b3:ed:
3a:a0:d1:77:cf:24:b6:e4:60:d2:88:37:57:e6:91:
29:3f:8f:67:28:9e:f2:4a:de:de:2d:f8:bd:e1:04:
64:db:72:87:b6:5b:2a:40:fd:cb:48:83:e3:d5:c2:
2f:03:f2:a6:8e:d9:8b:c0:55:64:e3:93:b4:43:4f:
7a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:DD:4F:FA:DB:CA:99:0B:92:AD:40:CD:26:A8:C6:1D:C4:4F:00
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666665303a3a2f34342d3438203d3e20323038303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
0b:eb:fa:a3:94:ab:8d:5b:37:74:d4:38:6e:1c:8e:b5:a8:48:
76:64:56:f1:28:4c:9e:e5:31:7b:cd:b1:22:02:c5:49:f9:da:
dc:95:e1:66:d4:92:3f:22:20:9e:fd:ad:16:4a:c1:b9:b4:c9:
fb:0d:c8:2d:0f:3b:db:26:ff:3e:82:c7:bf:21:94:a0:4a:0a:
eb:2a:51:f8:86:32:1e:b7:17:e8:ad:87:5d:19:b3:c2:e7:d4:
e9:2d:e7:58:25:59:c0:8d:a4:ec:b9:84:2e:0c:7e:02:4c:ad:
b0:0c:64:15:71:da:15:87:55:73:2a:cb:ef:bd:86:2c:4d:9a:
76:fb:e9:94:2a:08:fc:25:76:13:a2:cb:0f:4e:99:97:73:d1:
25:76:b2:45:e1:ba:fb:77:22:f3:03:26:14:bd:62:88:0f:ce:
8f:aa:7f:d9:82:bd:0e:4e:cd:59:02:5c:ae:ba:46:2e:a9:af:
81:be:af:67:f4:f6:3e:71:07:eb:92:2f:dc:a7:d1:db:97:9a:
67:82:b2:7d:04:4c:6d:38:2e:12:fe:bf:ec:6f:03:85:66:6b:
c2:11:8a:09:80:41:ec:08:2a:1b:40:1e:ee:71:9f:77:bf:fb:
53:4b:7d:4e:3f:ae:af:81:a0:26:d8:e0:92:09:7f:0d:b9:3e:
a8:fd:1e:f3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUM6cTx2xEwIF8uYfJSgbqaNwj35IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFhZDQ5YzQ3ZTJkMGU0MGNmYzliMzZhMmJkMmM1MTRl
MmE2MjY3YjAeFw0yMzExMDgxNDQ0NThaFw0yNDExMDYxNDQ5NThaMDMxMTAvBgNV
BAMTKDUzRUVERDRGRkFEQkNBOTkwQjkyQUQ0MENEMjZBOEM2MURDNDRGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsIJZzVZZB0xmwzAzg+NOcaUB+
tUpK2yDYxOirdZWHs+8hCB1Cfwre6JCk5I5PtkzYL8hnmsU1Rua9t2vthoTbjBve
uM2OCsj98bvUAzNPw0g1EblwS+6nPZ7LCfQfLDCmHoyMDUgM27uk5Fi5xJOb4FCy
WfKQv1h/hWFP2v5ErnLUt26rnPbUeFP4fvRsHxo9ZcWva1Vu1DNTYUeYA9zPb0u1
AMsaYvjfRORox+Xaa1GpUANFsxu9wiokRpaDQgGz7Tqg0XfPJLbkYNKIN1fmkSk/
j2convJK3t4t+L3hBGTbcoe2WypA/ctIg+PVwi8D8qaO2YvAVWTjk7RDT3o/AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUU+7dT/rbypkLkq1AzSaoxh3ETwAwHwYDVR0j
BBgwFoAUEa1JxH4tDkDPybNqK9LFFOKmJnswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzcvMTFBRDQ5QzQ3RTJEMEU0MENGQzlCMzZBMkJEMkM1MTRFMkE2MjY3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VhMUp4SDR0RGtEUHliTnFLOUxGRk9L
bUpucy5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2I1NzVlYTct
Nzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNlY2VlLzcvMzI2MTMxMzEzYTY2MzI2MzMw
M2E2NjY2NjUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMyMzAzODMwMzUzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHBCoR8sD/4DANBgkqhkiG9w0BAQsFAAOCAQEAC+v6o5SrjVs3dNQ4
bhyOtahIdmRW8ShMnuUxe82xIgLFSfna3JXhZtSSPyIgnv2tFkrBubTJ+w3ILQ87
2yb/PoLHvyGUoEoK6ypR+IYyHrcX6K2HXRmzwufU6S3nWCVZwI2k7LmELgx+Akyt
sAxkFXHaFYdVcyrL772GLE2advvplCoI/CV2E6LLD06Zl3PRJXayReG6+3ci8wMm
FL1iiA/Oj6p/2YK9Dk7NWQJcrrpGLqmvgb6vZ/T2PnEH65Iv3KfR25eaZ4KyfQRM
bTguEv6/7G8DhWZrwhGKCYBB7AgqG0Ae7nGfd7/7U0t9Tj+ur4GgJtjgkgl/Dbk+
qP0e8w==
-----END CERTIFICATE-----
Generated at Sat May 4 01:54:33 2024 by rpki-client on console-fra.rpki-client.org