Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323039323433.roa
File: 326131313a323963303a32633a3a2f34382d3438203d3e20323039323433.roa (raw, json)
Hash identifier: yBcScSJSq7PlmKvMZAEHfpGhQs/wNO+d7lN52myXb7c=
Subject key identifier: 25:03:49:EF:63:F6:23:E9:FE:C6:73:39:93:4F:83:7D:47:C1:F7:E5
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 77ADB6A0F1152CBD0BDC9E81B2CA477163EC4A40
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323039323433.roa
Signing time: Fri 17 Nov 2023 19:30:42 +0000
ROA not before: Fri 17 Nov 2023 19:25:42 +0000
ROA not after: Fri 15 Nov 2024 19:30:42 +0000
asID: 209243
IP address blocks: 2a11:29c0:2c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Jun 2024 14:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ad:b6:a0:f1:15:2c:bd:0b:dc:9e:81:b2:ca:47:71:63:ec:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Nov 17 19:25:42 2023 GMT
Not After : Nov 15 19:30:42 2024 GMT
Subject: CN=250349EF63F623E9FEC67339934F837D47C1F7E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:a2:b7:87:b8:1d:5a:9b:a0:16:a6:a0:c2:
e9:14:03:69:ae:95:80:4d:0e:1f:1b:8c:1c:21:bb:
e4:b1:fe:89:28:82:e0:1a:e4:c5:eb:26:5c:e6:37:
4a:57:1c:eb:0b:d1:d8:18:a4:22:dc:82:65:a9:09:
ff:a4:2a:f8:bf:4a:8a:2d:c9:1e:cc:f3:e8:91:89:
7e:a7:c6:44:87:b2:98:ba:e9:53:c3:bd:37:77:87:
a0:91:50:4a:c6:03:ee:07:92:ba:03:89:7a:a0:71:
38:da:03:b7:37:15:b2:25:0a:d0:85:11:2a:e2:32:
99:aa:34:0b:b5:af:7e:bb:5e:83:fd:7f:17:8e:e7:
b9:4a:f2:5b:ca:c4:48:ae:80:cd:db:42:4d:0a:33:
ac:e5:59:bd:e3:fa:ae:c0:1c:d8:6c:e4:76:c3:a3:
4f:0a:69:78:14:0f:0c:06:8c:8f:a4:f3:4b:08:38:
e4:0d:59:04:6b:69:91:43:91:d2:89:97:fb:b9:48:
85:4c:05:66:9f:11:b3:be:73:95:fc:66:44:d3:2f:
87:5e:9b:a1:ad:06:bc:ae:15:24:1a:e5:a6:e0:42:
d4:da:f6:cc:48:08:de:a8:c4:48:b5:43:c6:28:63:
47:88:02:ee:67:91:76:e3:43:c5:28:3f:a2:9c:c9:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:49:EF:63:F6:23:E9:FE:C6:73:39:93:4F:83:7D:47:C1:F7:E5
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32633a3a2f34382d3438203d3e20323039323433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2c::/48
Signature Algorithm: sha256WithRSAEncryption
9e:62:7e:19:4c:28:a1:c2:e6:10:74:54:1a:ad:68:7d:11:35:
a2:48:a7:05:d2:e4:25:f1:49:56:ca:72:4a:57:a7:1e:de:fc:
8f:e7:a8:ff:67:d0:10:c3:d6:7f:cc:0f:ef:b3:d5:16:33:80:
40:7c:00:20:9b:fd:99:59:1d:c7:ec:28:34:cf:d6:ee:a4:72:
91:cc:1e:8c:42:90:94:73:af:f4:3a:8c:a1:77:0d:88:f9:34:
e5:d5:ae:87:1f:55:a3:92:96:64:e5:b9:36:7b:35:91:99:4d:
7b:ce:fe:e5:1d:67:a5:81:b8:90:16:dc:20:87:a3:9c:ee:c2:
50:b5:46:c4:22:6e:09:fd:dd:d2:f2:cd:18:21:0f:01:9a:09:
01:e7:8a:6a:a2:62:1d:9a:81:56:b6:17:6a:e1:2e:ad:a1:e3:
12:dc:32:b8:d0:5c:6a:bb:2b:d4:52:45:3c:36:19:46:78:6d:
33:35:2a:31:e7:fc:ce:85:ff:f6:51:c8:15:d4:d2:f2:b5:0a:
ce:90:8e:c4:31:b1:cc:a0:94:90:23:1a:02:36:35:ae:16:25:
22:5b:d0:84:e1:1d:d3:ca:59:9e:8a:8f:92:7f:61:0d:73:a9:
ad:fe:06:7f:f5:6c:1c:c5:20:13:bb:86:90:3c:c6:7b:06:a9:
ad:96:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 19:52:12 2024 by rpki-client on console-fra.rpki-client.org