Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa
File: 326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa (raw, json)
Hash identifier: QJ7SUpl3HL0aarERcq4EJIQnT0kCUXHFfMjBS5o+4Vg=
Subject key identifier: 9F:D2:19:CF:9F:9A:D4:E1:CD:8D:CE:02:B1:B9:8A:D0:A0:4E:D2:18
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 12B264D3860C7210D420621026BEFB394F696F02
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa
Signing time: Wed 19 Feb 2025 16:19:12 +0000
ROA not before: Wed 19 Feb 2025 16:14:12 +0000
ROA not after: Wed 18 Feb 2026 16:19:12 +0000
asID: 213126
IP address blocks: 2a11:29c0:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b2:64:d3:86:0c:72:10:d4:20:62:10:26:be:fb:39:4f:69:6f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Feb 19 16:14:12 2025 GMT
Not After : Feb 18 16:19:12 2026 GMT
Subject: CN=9FD219CF9F9AD4E1CD8DCE02B1B98AD0A04ED218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:b4:eb:94:27:20:11:55:a3:19:44:d9:fb:
4e:0d:b9:3c:81:dd:30:05:2e:18:54:65:d0:66:0e:
35:ea:c5:50:f2:38:a4:26:c4:6a:71:86:a6:96:af:
b7:76:06:c2:ea:a5:3d:f2:a1:7f:72:97:1d:23:2e:
d7:fd:1a:15:fc:87:70:65:cb:34:ba:90:82:ba:f5:
24:0d:57:0c:86:c6:c5:fc:36:12:37:ac:f6:7d:6a:
24:52:ba:b7:06:69:62:1c:9d:b3:95:a3:66:8a:78:
2d:bc:15:5c:c7:f9:bb:d2:60:73:c0:3f:a0:b2:9f:
f6:be:8e:f7:d1:7a:e7:0c:1d:eb:cb:35:ab:6a:93:
cf:37:00:82:71:45:98:85:18:0a:88:72:2f:40:4f:
a0:b6:cf:d8:9d:e6:be:46:93:c4:05:be:44:81:03:
41:b9:16:66:b4:aa:96:13:93:6f:7e:67:ee:56:e5:
e0:ea:5a:4b:63:dd:85:60:f4:40:59:74:32:6d:ff:
9e:57:c0:bd:1b:e6:99:93:d1:72:82:13:1e:16:9e:
ae:62:0c:8f:a6:56:d0:70:24:9d:c4:99:30:36:29:
ab:79:c4:b0:23:a7:d7:cd:b7:90:e4:28:4c:98:e0:
ee:ad:88:78:d4:72:26:91:00:80:0d:9d:95:ea:1c:
af:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D2:19:CF:9F:9A:D4:E1:CD:8D:CE:02:B1:B9:8A:D0:A0:4E:D2:18
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323133313236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:23::/48
Signature Algorithm: sha256WithRSAEncryption
1f:ac:e7:2a:b5:2f:2d:88:d6:40:b2:f8:01:c0:76:e1:0d:21:
b3:37:b3:0a:2b:fd:99:02:a9:70:32:c6:80:9e:87:fb:be:52:
d4:c3:79:3b:e0:8e:6e:46:0b:56:1c:35:d5:e4:5b:72:81:c9:
03:5d:4e:1b:c4:68:ca:cc:2c:a5:aa:a6:bb:cb:4b:23:89:ee:
76:1d:19:c4:45:f5:cb:fc:92:c2:e0:0f:29:8f:69:51:a4:40:
fe:e7:e2:2e:ae:3a:65:86:3b:5d:5e:c2:02:4c:13:29:98:cb:
49:91:c3:d5:32:77:51:96:14:52:9f:7c:cd:32:85:d9:ba:78:
fa:13:b2:f1:f6:39:77:33:62:f7:3c:dd:d2:f9:12:10:79:1c:
b0:69:82:e7:d3:bf:a3:f4:87:c6:6a:b1:f0:4b:f2:4c:2b:06:
5f:b5:72:57:fc:a3:26:06:6a:69:dc:df:3f:38:b0:53:1b:d9:
62:5c:b8:ac:87:e3:5c:93:ce:3b:d6:5e:f6:bc:7c:e1:7e:93:
78:2f:6e:bf:f4:04:b8:4f:84:b4:65:09:85:13:a8:bd:5c:ec:
93:cd:49:e3:b7:0e:a0:64:1c:76:b9:3e:de:cd:20:f4:98:51:
cc:3e:8d:65:62:c6:77:f1:1c:4e:e3:02:b5:e4:2e:12:65:e8:
f0:96:2f:7b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUErJk04YMchDUIGIQJr77OU9pbwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTk2ZDg1OTk2ZTkzNTRkMTAwNWU0NGM3ODFkMzhhZGNm
MTA4Mjg3MzAeFw0yNTAyMTkxNjE0MTJaFw0yNjAyMTgxNjE5MTJaMDMxMTAvBgNV
BAMTKDlGRDIxOUNGOUY5QUQ0RTFDRDhEQ0UwMkIxQjk4QUQwQTA0RUQyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjLTrlCcgEVWjGUTZ+04NuTyB
3TAFLhhUZdBmDjXqxVDyOKQmxGpxhqaWr7d2BsLqpT3yoX9ylx0jLtf9GhX8h3Bl
yzS6kIK69SQNVwyGxsX8NhI3rPZ9aiRSurcGaWIcnbOVo2aKeC28FVzH+bvSYHPA
P6Cyn/a+jvfReucMHevLNatqk883AIJxRZiFGAqIci9AT6C2z9id5r5Gk8QFvkSB
A0G5Fma0qpYTk29+Z+5W5eDqWktj3YVg9EBZdDJt/55XwL0b5pmT0XKCEx4Wnq5i
DI+mVtBwJJ3EmTA2Kat5xLAjp9fNt5DkKEyY4O6tiHjUciaRAIANnZXqHK8hAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUn9IZz5+a1OHNjc4CsbmK0KBO0hgwHwYDVR0j
BBgwFoAU6W2FmW6TVNEAXkTHgdOK3PEIKHMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm
YmY1LzAvRTk2RDg1OTk2RTkzNTREMTAwNUU0NEM3ODFEMzhBRENGMTA4Mjg3My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZXMkZtVzZUVk5FQVhrVEhnZE9LM1BF
SUtITS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODExMTViYzYt
MTBmNi00YWYzLWJhMDktOGI2ODdhNTZmYmY1LzAvMzI2MTMxMzEzYTMyMzk2MzMw
M2EzMjMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTMzMzEzMjM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAKhEpwAAjMA0GCSqGSIb3DQEBCwUAA4IBAQAfrOcqtS8tiNZAsvgBwHbh
DSGzN7MKK/2ZAqlwMsaAnof7vlLUw3k74I5uRgtWHDXV5FtygckDXU4bxGjKzCyl
qqa7y0sjie52HRnERfXL/JLC4A8pj2lRpED+5+IurjplhjtdXsICTBMpmMtJkcPV
MndRlhRSn3zNMoXZunj6E7Lx9jl3M2L3PN3S+RIQeRywaYLn07+j9IfGarHwS/JM
KwZftXJX/KMmBmpp3N8/OLBTG9liXLish+Nck8471l72vHzhfpN4L26/9AS4T4S0
ZQmFE6i9XOyTzUnjtw6gZBx2uT7ezSD0mFHMPo1lYsZ38RxO4wK15C4SZejwli97
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:08 2025 by rpki-client