Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa
File: 326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa (raw, json)
Hash identifier: E0ThFetFKBLX9YJUzSD0B5d9VjyBRlmbuHBYnrdbBjA=
Subject key identifier: 45:70:41:56:54:3C:BC:BD:9E:A8:35:C4:73:56:23:03:D2:D5:66:CB
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 73830B76952C082C7191C7F8A472B1048EEF6394
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa
Signing time: Sun 04 Aug 2024 20:35:49 +0000
ROA not before: Sun 04 Aug 2024 20:30:49 +0000
ROA not after: Sun 03 Aug 2025 20:35:49 +0000
asID: 215987
IP address blocks: 2a11:29c0:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:83:0b:76:95:2c:08:2c:71:91:c7:f8:a4:72:b1:04:8e:ef:63:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Aug 4 20:30:49 2024 GMT
Not After : Aug 3 20:35:49 2025 GMT
Subject: CN=45704156543CBCBD9EA835C473562303D2D566CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:7b:ea:ab:85:f5:ae:c3:79:44:cb:01:84:
13:5d:e5:29:9d:e7:dd:f3:c8:a0:f7:ee:1d:17:8f:
57:9f:5e:f6:98:07:3f:f3:ce:66:3b:1b:e9:74:d9:
92:0a:00:f2:b4:12:10:cd:d7:f7:2d:6a:4a:f4:a1:
06:a9:6a:b5:63:91:ae:1d:33:7a:99:31:92:40:ce:
e6:f8:ed:37:f4:6f:53:83:ba:0a:ef:0c:2c:1b:ef:
6c:42:aa:2c:b7:42:97:20:ff:ed:73:05:e0:f8:73:
1b:59:ff:4c:33:ca:a4:4c:48:f5:b7:f1:a8:56:a9:
01:3e:db:7e:b2:4e:9a:9f:1e:66:09:31:da:0b:02:
73:c6:5d:e6:40:39:f2:1c:ca:bb:4e:6d:fa:57:19:
a2:e2:c8:e8:bb:22:9c:30:83:4e:8f:08:d6:4c:17:
3a:bf:a8:df:aa:7b:7b:81:f8:0d:95:3d:03:b1:44:
7e:86:97:5c:30:62:d1:cd:9f:01:77:40:56:3d:fa:
be:89:70:2e:83:9c:fd:87:19:36:f2:43:10:30:bd:
b9:51:f2:b4:e4:30:b3:56:03:07:b8:09:0f:4b:28:
12:ae:24:d2:fc:8f:d4:8b:2b:58:56:d3:d6:85:b7:
c7:8d:d6:7d:de:a9:ff:6c:cb:2f:7b:e6:bc:df:2b:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:70:41:56:54:3C:BC:BD:9E:A8:35:C4:73:56:23:03:D2:D5:66:CB
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a32653a3a2f34382d3438203d3e20323135393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:2e::/48
Signature Algorithm: sha256WithRSAEncryption
44:f8:6e:3c:0f:be:97:78:2a:51:22:d2:97:fd:82:65:86:d4:
48:dd:f2:a2:41:66:fd:07:3d:89:de:38:05:9a:71:ea:a1:a3:
70:3b:5c:f6:ef:47:d1:17:fd:68:a4:52:cc:22:58:d7:68:cc:
56:dd:ad:f7:d3:08:16:09:05:f4:7d:71:31:0b:28:23:a4:ea:
66:04:a1:57:ef:42:58:26:3c:bf:51:48:24:6a:0f:9f:bf:70:
69:a1:c1:a1:09:c2:ed:44:74:7c:30:0a:e3:ed:4f:3b:0a:0f:
ec:48:0f:e9:42:4d:8c:3e:a8:f5:80:3f:08:db:b7:f4:02:5a:
f1:bc:97:1c:4c:cb:03:08:be:3b:79:ac:76:18:71:b8:e2:40:
13:0b:2e:21:6d:ea:fe:92:70:f5:85:64:7f:d0:73:ac:4d:0f:
ab:1a:be:79:7d:57:45:36:96:56:bb:04:fd:94:a3:60:a9:b4:
33:2a:ae:e5:48:f5:3b:3a:a3:7c:34:70:e7:f2:65:96:13:a1:
a3:14:91:58:59:7e:38:fc:67:42:bc:ac:8d:2e:5e:42:31:4d:
46:54:f3:24:78:29:c4:84:76:60:d8:95:60:c0:38:dc:ac:8a:
36:9a:3f:ca:d5:8e:d1:f7:90:a6:c8:bc:d3:4c:2d:f7:c1:6b:
4e:b9:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:13 2024 by rpki-client on console-fra.rpki-client.org