Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa
File: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (raw, json)
Hash identifier: fLaAwnqYDPfLIwEQsju1YXeYt4w8YalxWBgoLKaz/YE=
Subject key identifier: 42:E0:5A:2C:48:EB:CE:B4:31:81:A5:61:AC:2E:0A:AA:80:CD:C9:F2
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 54093BDDB27C4AF4DFE536B7AAAF9443AB471DC2
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa
Signing time: Wed 07 Feb 2024 12:58:10 +0000
ROA not before: Wed 07 Feb 2024 12:53:10 +0000
ROA not after: Wed 05 Feb 2025 12:58:10 +0000
asID: 212245
IP address blocks: 2a11:f2c0:fff6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:09:3b:dd:b2:7c:4a:f4:df:e5:36:b7:aa:af:94:43:ab:47:1d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Feb 7 12:53:10 2024 GMT
Not After : Feb 5 12:58:10 2025 GMT
Subject: CN=42E05A2C48EBCEB43181A561AC2E0AAA80CDC9F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:8e:ef:63:e6:f0:50:c0:f6:16:f4:1a:15:
84:7c:bb:1d:97:ec:3e:7c:bb:a9:16:34:46:65:1a:
31:b9:36:60:bc:55:dd:13:b5:fc:ad:95:00:6e:71:
05:e3:de:b9:ca:e4:67:d9:db:16:e9:4b:3e:02:90:
f1:7a:c5:61:59:6d:b7:b1:42:dd:63:21:3f:eb:44:
f0:e7:92:db:8f:a2:08:07:9b:84:5c:14:ab:ec:78:
8c:17:77:dd:dc:a6:4d:9e:ab:ea:0c:10:b9:a2:cc:
c7:92:df:18:1e:3a:a0:23:11:87:2e:42:7f:34:28:
46:a4:89:23:2e:a0:8a:57:20:05:84:c9:1e:27:4a:
bb:ea:84:3f:9f:64:a8:bb:39:b6:5a:a6:32:65:08:
3d:0d:8f:c5:9e:2d:1e:d9:1e:63:b0:04:38:11:7c:
04:5a:6e:3e:ed:57:8f:62:2f:b9:37:4a:c1:77:88:
26:23:c6:f5:65:01:28:e5:70:0c:32:c9:b0:57:0a:
9a:0f:b3:6f:3a:a9:30:7c:e6:00:1a:32:8c:aa:b7:
4c:37:cc:0e:33:7f:75:97:14:1b:a8:ea:73:40:8c:
c2:72:4e:e6:02:8c:d8:0d:1a:96:c8:53:9e:3f:fe:
d0:a4:ca:8a:20:bb:38:a5:78:0d:d9:8b:8c:b9:d5:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:5A:2C:48:EB:CE:B4:31:81:A5:61:AC:2E:0A:AA:80:CD:C9:F2
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:fff6::/48
Signature Algorithm: sha256WithRSAEncryption
81:54:e2:59:82:b9:0e:66:d8:fd:80:ca:a4:89:a7:8b:87:0f:
2d:b6:84:4b:58:b6:d9:8a:5a:92:03:7e:05:b2:4a:0f:04:ca:
b8:b7:a3:0f:cc:71:42:85:ca:1b:0e:5e:7b:84:be:37:e2:f6:
30:a3:14:bc:36:f3:0e:c4:ba:e9:5c:1d:09:56:2a:fe:7d:a2:
09:f9:34:41:f6:76:d6:0b:69:f0:0e:ba:58:48:32:51:a3:a8:
a1:fc:3b:0b:5c:d3:5e:12:0e:11:76:ff:99:a5:63:22:be:09:
c5:19:db:c6:46:3e:7b:11:fe:c9:b3:ae:15:d7:e0:dd:08:17:
ef:91:38:d6:1e:44:63:2f:3f:a1:93:71:67:41:70:af:44:66:
94:43:77:ec:fc:8e:55:a9:49:42:03:f6:f9:fa:85:62:1e:51:
aa:7d:d3:fb:f8:88:0a:d0:f5:f8:c1:c6:37:22:8b:7c:e8:f8:
81:8a:2b:23:e1:32:f2:f5:c7:c1:c6:57:48:8a:ce:b1:c7:69:
42:85:1d:94:16:e9:47:a5:d1:64:9d:47:d7:80:50:c8:8e:49:
04:dd:b6:1b:24:9f:08:5a:40:8d:94:2b:f8:9a:37:27:49:69:
7d:c7:4b:2a:e8:cc:b5:c4:7e:0c:16:b3:c9:f1:f4:28:71:c4:
70:29:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:54:33 2024 by rpki-client on console-fra.rpki-client.org