Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
File: 326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa (raw, json)
Hash identifier: gm+KEBgSUOer76Y4ju9p7fv/kO3ZkfNJ5b0she0/vFs=
Subject key identifier: A7:6D:95:3C:46:C5:0E:F6:7E:3D:7D:63:CF:D7:88:D0:2B:6F:D2:9F
Certificate issuer: /CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Certificate serial: 4A5F6089D334A0F7B5658ADCC1CFBBC415358455
Authority key identifier: 11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
Signing time: Wed 08 Nov 2023 14:49:47 +0000
ROA not before: Wed 08 Nov 2023 14:44:47 +0000
ROA not after: Wed 06 Nov 2024 14:49:47 +0000
asID: 210563
IP address blocks: 2a11:f2c0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:5f:60:89:d3:34:a0:f7:b5:65:8a:dc:c1:cf:bb:c4:15:35:84:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ad49c47e2d0e40cfc9b36a2bd2c514e2a6267b
Validity
Not Before: Nov 8 14:44:47 2023 GMT
Not After : Nov 6 14:49:47 2024 GMT
Subject: CN=A76D953C46C50EF67E3D7D63CFD788D02B6FD29F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:5d:36:73:10:d2:3f:0b:46:a5:90:ac:8a:
4b:34:5d:81:c4:3c:ea:a2:26:60:86:79:8e:55:b7:
fa:a1:46:fd:79:b1:2c:db:33:b7:ad:a8:31:3f:df:
0e:d6:e2:fc:98:30:40:23:12:2a:f7:80:3a:74:cb:
d7:f9:e1:c8:ba:f2:eb:df:15:e4:18:57:75:fa:aa:
fa:c7:0d:ae:0c:2a:49:f1:6f:40:f1:09:12:d2:a4:
0c:6c:ef:19:ab:28:0f:a4:16:52:99:75:bf:1d:b5:
41:1f:40:0f:ba:9f:ea:88:60:10:3e:5d:af:80:81:
e3:2d:65:2f:f5:e3:29:c1:dd:32:5d:d3:ec:8c:fb:
46:49:ff:25:e4:49:a6:1f:b2:26:07:29:21:26:d4:
21:03:dd:c5:2b:ff:c4:2b:82:2c:01:e5:01:01:14:
70:5e:e3:36:c2:05:65:56:1c:ef:38:8d:ff:8f:57:
09:34:1a:91:5b:dd:37:04:2f:5a:4d:f9:7f:a5:d7:
4c:81:5a:f4:00:1a:ee:ca:c5:2e:24:ac:71:7b:fd:
78:5c:4a:2b:2d:62:9b:dc:f2:d9:6a:64:20:96:05:
93:4a:f5:45:c3:31:00:0c:46:09:b6:31:94:08:1e:
cc:ba:df:ca:59:8f:35:cd:55:87:10:5f:f3:7b:f7:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6D:95:3C:46:C5:0E:F6:7E:3D:7D:63:CF:D7:88:D0:2B:6F:D2:9F
X509v3 Authority Key Identifier:
keyid:11:AD:49:C4:7E:2D:0E:40:CF:C9:B3:6A:2B:D2:C5:14:E2:A6:26:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/11AD49C47E2D0E40CFC9B36A2BD2C514E2A6267B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea1JxH4tDkDPybNqK9LFFOKmJns.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/7/326131313a663263303a666666663a3a2f34382d3438203d3e20323130353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f2c0:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
b6:80:0d:26:f3:b8:2f:9e:db:b1:67:1a:ab:68:3e:0c:1d:05:
e7:23:c5:51:fa:f5:7b:fa:b9:b5:64:33:57:b6:cc:7a:ef:55:
bd:3d:36:c0:b1:b3:e4:46:05:21:90:2d:2f:b1:3c:c1:f3:da:
32:0f:fe:aa:42:c0:8b:0a:a2:11:b7:ef:e6:8e:3d:30:fa:85:
5c:66:a2:77:f1:b8:ce:61:b8:b9:f6:df:fe:fb:3e:58:5b:a8:
5f:d7:5b:c1:58:47:ad:d2:d5:6f:ba:59:af:ed:3e:1f:d6:ba:
3e:25:fd:6b:ae:e8:77:c5:3d:05:9c:11:a5:a7:a4:ff:e0:96:
51:3b:9c:a9:15:ca:bd:1a:69:c2:0a:73:8f:ae:a4:e8:27:e4:
f5:89:b1:c4:c3:5e:7a:13:ef:e0:e1:68:6e:9c:89:08:d6:f0:
1f:8a:ca:1f:88:70:c6:bc:5e:8a:94:0b:ee:99:1a:ed:f5:90:
4c:d2:a4:3f:8e:4f:ba:65:5f:42:eb:1b:50:01:58:9a:45:51:
73:54:ff:ae:0f:56:5a:2b:05:19:52:ec:46:6f:f7:15:07:7b:
7b:70:e9:d7:82:f8:f2:8f:87:3b:bb:c2:86:fe:79:49:bf:b6:
93:f5:65:52:00:a4:d2:c2:9b:d3:45:d9:4e:7b:c5:ab:93:ce:
d7:5e:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:11:17 2024 by rpki-client on console-ams.rpki-client.org