Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa
File: 326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa (raw, json)
Hash identifier: kBBXGcYNbEW09JIQXjm+9JKtEhqfuSr+M2nIvqPuGGI=
Subject key identifier: 73:E1:E5:3A:8F:27:F0:36:05:74:52:8A:25:13:86:38:E5:B6:0C:3D
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3DA4A350CA6D3FC737E543589568FD4084502F
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa
Signing time: Thu 05 Dec 2024 13:01:36 +0000
ROA not before: Thu 05 Dec 2024 12:56:36 +0000
ROA not after: Thu 04 Dec 2025 13:01:36 +0000
asID: 215953
IP address blocks: 2a11:29c0:34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a4:a3:50:ca:6d:3f:c7:37:e5:43:58:95:68:fd:40:84:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Dec 5 12:56:36 2024 GMT
Not After : Dec 4 13:01:36 2025 GMT
Subject: CN=73E1E53A8F27F0360574528A25138638E5B60C3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:97:77:3f:05:0f:e3:c4:ae:3a:f1:e9:44:
c1:c2:65:9b:47:89:e0:d3:74:38:d1:5a:48:3f:bc:
97:38:b0:ff:c3:dd:38:13:a2:d4:f8:12:b2:94:c9:
02:43:2d:99:c5:f9:db:20:54:d5:52:29:bf:04:65:
97:61:ca:0b:21:84:31:d4:4e:c6:53:68:d5:8b:28:
d2:3d:1d:e8:37:18:9d:ae:b5:a5:e2:49:ac:53:d6:
07:2f:1f:42:3b:89:e5:26:7b:5b:c8:5d:50:db:76:
ce:9d:16:93:04:4b:d6:e6:ce:51:99:7f:9d:7c:d7:
9f:13:df:68:c4:16:75:65:aa:fd:c2:d7:3c:d1:bd:
52:b2:4f:93:ef:bc:c6:3c:3d:05:a6:2e:52:8d:9b:
40:df:ea:85:b4:ae:8c:d2:55:c0:83:25:b7:93:50:
fe:20:3e:68:b2:a1:67:66:b5:2c:fb:77:2e:55:19:
a0:23:ac:ea:9f:24:cf:8f:25:24:d4:c2:8c:8c:a5:
91:37:9e:cf:eb:7b:dc:84:36:64:48:50:ab:0b:fb:
78:21:03:26:6b:bd:2a:20:8c:a3:a0:7a:28:4b:47:
c2:b8:ca:01:4b:b3:1c:f8:95:60:3d:9e:3a:4c:23:
ef:5a:fa:c7:3d:bf:ba:8d:fb:fa:8f:de:68:b4:ed:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E1:E5:3A:8F:27:F0:36:05:74:52:8A:25:13:86:38:E5:B6:0C:3D
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a33343a3a2f34382d3438203d3e20323135393533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:34::/48
Signature Algorithm: sha256WithRSAEncryption
28:4e:a0:6e:2f:92:9a:29:7c:05:bd:50:73:4e:2d:98:11:e9:
2f:65:87:6d:20:b0:7e:00:3e:9b:81:99:b1:a0:1c:d4:fe:4a:
b1:ef:c4:18:02:22:e1:f1:62:b0:0d:85:bc:ca:6e:68:5f:ba:
6d:9c:74:93:05:d2:7f:04:f7:89:0d:b6:a2:05:68:04:2e:8a:
65:7b:13:8b:f9:a1:7d:b3:81:f8:01:51:7a:51:fd:e2:81:76:
97:0d:f8:47:49:e6:75:8c:9e:ac:fc:61:63:bf:32:3e:80:cf:
35:61:26:f7:f9:c8:17:26:b1:e5:b7:2e:46:ae:cc:71:ba:43:
26:08:0c:f7:4d:a0:50:ca:63:53:75:a0:56:a6:2a:10:2f:30:
b6:32:09:96:8d:32:63:2e:b5:ea:14:d3:1f:77:0e:8c:9b:9e:
07:41:e5:ee:67:b4:4c:12:f5:1f:9c:99:b3:bf:bf:11:d7:e5:
63:d4:6a:be:ba:b4:a2:69:30:8d:54:f5:3b:7e:b5:73:d0:6a:
55:36:ca:3e:00:5e:56:af:d4:51:46:8f:28:e3:1d:59:c5:e5:
50:3d:4c:67:11:11:e9:d8:d3:10:fc:6d:34:73:52:64:50:71:
39:85:0e:9e:39:22:f3:6b:6e:b6:12:d7:02:4b:94:3c:d2:13:
4f:ed:24:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:42:52 2025 by rpki-client