Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323135393530.roa
File: 326131313a323963303a32333a3a2f34382d3438203d3e20323135393530.roa (raw, json)
Hash identifier: C8PBZjznQGGC/6jM9htrIWYHPkXyI05xBpzDuvdoSgw=
Subject key identifier: 5D:65:CB:B6:FE:E7:9C:B6:C5:FD:82:2B:85:BD:20:EE:24:58:F7:62
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 0141D33F85AB1A2F8630EA16D1CCFE9AA73B9A86
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323135393530.roa
Signing time: Thu 24 Oct 2024 14:01:33 +0000
ROA not before: Thu 24 Oct 2024 13:56:33 +0000
ROA not after: Thu 23 Oct 2025 14:01:33 +0000
asID: 215950
IP address blocks: 2a11:29c0:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:41:d3:3f:85:ab:1a:2f:86:30:ea:16:d1:cc:fe:9a:a7:3b:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Oct 24 13:56:33 2024 GMT
Not After : Oct 23 14:01:33 2025 GMT
Subject: CN=5D65CBB6FEE79CB6C5FD822B85BD20EE2458F762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:56:f0:60:a2:80:93:19:f6:96:c2:1c:e4:
05:3d:1e:d5:5e:6c:ed:f5:a8:14:c0:d9:b5:3a:ca:
5c:38:1b:f8:08:f8:1a:8b:a1:05:99:17:00:25:02:
5c:15:d8:16:f6:90:19:54:11:7d:8b:c4:42:75:bf:
54:17:1a:d5:08:fd:f7:28:65:a5:16:c0:a7:65:1b:
60:b7:e4:36:07:e3:00:85:a6:ef:a0:87:2f:38:7d:
6d:05:59:28:67:30:cc:42:49:54:73:c6:40:cf:e0:
e9:d7:d2:27:89:c6:eb:1a:e2:da:be:38:52:83:1a:
ed:ba:44:11:8c:e3:b0:d8:c6:97:06:cb:76:4b:6b:
85:33:1b:66:74:a0:63:2a:8f:bb:78:82:43:df:11:
99:61:30:ed:c3:d0:e7:eb:0f:34:e8:df:d2:93:58:
be:80:bb:e5:32:78:29:86:54:37:b3:6c:0a:41:da:
fc:14:69:09:29:8c:0a:63:15:9d:68:6b:ae:d8:94:
24:62:03:25:23:19:d1:24:5f:13:33:19:b4:5f:0b:
7e:d8:d5:0e:17:2c:04:35:d3:d0:a5:53:4e:66:d1:
68:08:3c:92:91:cd:98:3e:82:5f:7e:40:8b:92:50:
c4:09:bc:53:b5:ed:d4:3f:73:60:1c:dd:9e:f9:6f:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:CB:B6:FE:E7:9C:B6:C5:FD:82:2B:85:BD:20:EE:24:58:F7:62
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32333a3a2f34382d3438203d3e20323135393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:23::/48
Signature Algorithm: sha256WithRSAEncryption
6b:79:3b:66:b0:f6:73:34:fc:ed:ac:2a:67:8e:ee:39:60:9d:
25:dd:af:b7:ef:99:28:a4:b2:af:51:02:3b:1f:97:be:03:52:
a0:56:69:13:9d:54:2f:67:a2:c2:92:08:eb:57:c9:33:63:99:
83:9d:ff:f3:07:ff:0d:63:af:54:ef:0e:c0:a6:56:12:1d:6a:
41:9f:ab:71:e5:ae:40:3f:40:a7:a4:fc:13:f2:00:1a:b7:4a:
67:50:28:7f:da:8c:b5:e0:60:20:19:0f:e5:4e:67:14:49:86:
05:42:9f:b2:37:24:c1:54:db:0a:d0:54:85:f3:ad:e0:7d:8d:
1e:91:91:ae:25:09:bf:56:5a:56:7b:f1:2a:3d:ec:e3:53:8e:
5c:41:15:6e:61:a3:54:c7:51:eb:0e:18:fb:d1:b1:ee:2c:16:
70:2e:5f:e4:db:0e:be:94:63:b3:dc:a3:04:8e:3a:9d:eb:5b:
2c:b4:50:64:97:49:da:bb:9a:c5:a1:30:b0:72:07:84:6d:91:
fc:dc:3c:18:12:98:01:4c:38:62:84:be:d3:62:73:16:1e:c2:
8c:fe:19:a0:53:8e:de:84:80:87:aa:bb:83:e2:46:04:06:a5:
32:f5:fa:67:2b:30:07:4f:c6:7e:ab:5d:a4:71:f2:c4:b8:71:
80:37:b3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:56:51 2024 by rpki-client on console-ams.rpki-client.org