Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
File: 326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa (raw, json)
Hash identifier: 32LpQrQhIDi/9VYnf1euxMJqNOPnOME9Vm7ogVhESgg=
Subject key identifier: 75:DC:4B:32:8E:5A:77:28:D4:BF:6D:A5:99:FF:0A:37:34:21:87:86
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 3EA3C9940AEF51DD48DBC14EB087E7976B4175A5
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
Signing time: Wed 19 Jun 2024 14:01:15 +0000
ROA not before: Wed 19 Jun 2024 13:56:15 +0000
ROA not after: Wed 18 Jun 2025 14:01:15 +0000
asID: 208333
IP address blocks: 2a11:29c0:3df5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a3:c9:94:0a:ef:51:dd:48:db:c1:4e:b0:87:e7:97:6b:41:75:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jun 19 13:56:15 2024 GMT
Not After : Jun 18 14:01:15 2025 GMT
Subject: CN=75DC4B328E5A7728D4BF6DA599FF0A3734218786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:74:88:e3:c8:e3:9d:38:23:ae:ae:47:0f:
d3:d9:c8:0d:35:e9:ce:14:92:24:74:51:3c:aa:a7:
de:b8:6c:e2:5c:48:6f:12:4b:39:d5:55:f1:44:ce:
a7:4b:4b:2b:06:fc:5a:1e:2a:c5:16:f8:c3:68:24:
dc:86:87:cf:69:89:bf:eb:1b:1e:c3:b7:7c:68:ce:
54:86:59:1b:93:53:25:c1:38:6d:6a:3d:84:7e:72:
d3:68:2f:4a:c7:b7:d5:9d:67:fb:bf:0c:a0:63:24:
53:4b:51:0a:ab:4c:70:7e:7a:6b:80:64:e0:64:f0:
7f:20:ea:5c:48:72:09:88:03:d8:0c:20:f6:06:ad:
89:12:a6:ca:12:7d:3e:32:80:00:52:da:5e:54:4d:
e7:ba:64:40:6c:52:42:59:f1:0f:cb:b2:7d:f1:bf:
22:13:9f:40:ba:18:2e:eb:34:5c:d3:6d:1a:40:00:
b8:59:3a:72:17:3a:de:81:93:d9:5f:01:2e:ef:9a:
98:3a:05:00:c0:e4:2a:d1:9e:e1:bb:34:dd:55:83:
63:30:3f:b3:ef:c0:f8:ea:28:ef:8f:a0:60:ff:23:
1c:fe:31:aa:01:9a:31:b0:d4:a2:6f:8e:8f:1d:bd:
50:a9:4b:08:71:70:1a:6e:9c:1a:80:04:75:e7:d9:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DC:4B:32:8E:5A:77:28:D4:BF:6D:A5:99:FF:0A:37:34:21:87:86
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a336466353a3a2f34382d3438203d3e20323038333333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3df5::/48
Signature Algorithm: sha256WithRSAEncryption
52:c6:ab:02:1f:24:18:1c:64:d0:e1:2b:8b:61:5d:f6:d4:a5:
fb:ea:a1:c1:5b:66:7a:b2:71:75:b4:ae:46:63:b2:cc:aa:79:
9e:0b:21:71:6e:36:2e:de:65:44:f6:b9:60:e7:2f:54:52:c3:
f3:9f:4c:93:2b:9f:7a:20:95:90:4a:6d:db:59:76:4f:74:04:
00:f2:a0:8a:ec:db:e7:12:f0:c5:34:24:23:7c:32:36:97:e0:
cc:0e:b1:45:7f:6d:70:8c:fc:ae:ea:ec:91:04:84:8b:ff:fc:
44:20:03:70:34:fc:d5:a0:7c:03:d1:08:14:29:77:43:58:10:
8b:c0:a2:39:2e:73:3e:9b:da:8e:2f:6f:62:37:49:ea:45:91:
d0:0e:ff:47:25:40:22:8d:57:86:da:79:45:80:71:18:d2:ef:
d4:51:1b:69:51:5a:64:5e:ed:1f:70:10:a3:ea:47:34:46:f2:
66:03:73:34:5d:48:1d:fb:ee:99:7e:67:5d:94:98:c5:ed:b7:
42:02:82:74:a7:e3:41:18:e9:b2:46:c3:b7:1a:0b:4f:6f:9a:
94:1f:69:64:d8:58:f7:6e:b1:c6:56:4c:4b:19:b3:e9:f2:8a:
e7:5d:fb:3b:1d:a5:eb:2c:34:26:81:c8:2f:92:ce:2e:00:fa:
e1:79:70:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org