Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa
File: 326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa (raw, json)
Hash identifier: Wfs5OCxL3MOGATgqidmKdu1U5Kb65oi5LLc8uOtHWNs=
Subject key identifier: 9A:B1:49:27:16:B0:8B:A7:9B:52:07:DD:C7:AA:1A:FF:93:59:7A:C0
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 75C8B866691B35678A8B17CE5838ED306A52BEFF
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa
Signing time: Mon 16 Sep 2024 17:13:16 +0000
ROA not before: Mon 16 Sep 2024 17:08:16 +0000
ROA not after: Mon 15 Sep 2025 17:13:16 +0000
asID: 215987
IP address blocks: 2a11:29c0:4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c8:b8:66:69:1b:35:67:8a:8b:17:ce:58:38:ed:30:6a:52:be:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 16 17:08:16 2024 GMT
Not After : Sep 15 17:13:16 2025 GMT
Subject: CN=9AB1492716B08BA79B5207DDC7AA1AFF93597AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:87:74:e2:b2:94:f9:84:c4:d3:11:92:18:
40:b7:27:0e:3b:52:5c:b3:e9:27:c0:ae:06:b9:90:
f1:92:52:2d:31:10:9c:5f:ba:32:18:84:21:60:1a:
72:aa:f6:db:7c:36:0e:69:88:3f:2a:57:f4:dd:66:
0e:52:50:c2:f7:0f:6c:f5:2c:e4:04:64:72:2d:09:
1b:64:22:f3:73:a4:6b:7e:c6:79:a3:f2:37:77:d4:
1d:bc:be:bd:40:a2:5d:d8:55:8d:db:af:d5:5b:50:
ca:5f:c9:80:a4:52:df:e1:22:95:7d:83:d2:5b:d7:
a0:32:96:20:40:d1:e9:a0:92:c4:78:e8:6f:a2:ad:
41:b1:82:0f:94:e3:a6:fe:a9:5b:c5:10:35:5a:24:
29:ad:e1:73:be:be:df:59:ec:f1:05:fa:be:5c:5b:
66:d9:04:30:76:7e:ce:b3:25:a5:74:2d:c1:d2:88:
22:64:76:ce:85:fc:10:05:64:d1:4f:5e:e2:a2:42:
aa:6c:2e:06:5e:20:a9:30:71:87:89:6d:44:a7:2f:
a2:4f:23:61:a5:f4:ba:a1:5c:d8:cc:6a:92:19:23:
47:f5:a2:09:dc:15:08:e1:2a:5b:77:55:f3:7f:f1:
28:2c:8f:01:61:2a:08:47:8d:37:55:46:e6:a6:ab:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B1:49:27:16:B0:8B:A7:9B:52:07:DD:C7:AA:1A:FF:93:59:7A:C0
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34613a3a2f34382d3438203d3e20323135393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4a::/48
Signature Algorithm: sha256WithRSAEncryption
8c:76:fb:a3:01:fe:44:30:55:c3:5f:af:75:06:36:e4:dd:96:
1d:e4:0f:52:a5:d3:7a:c8:0c:5d:b2:06:e9:06:cc:9f:08:a9:
8a:4c:30:e1:57:e3:3c:d4:8a:a5:74:a4:c6:9f:0f:fe:c1:c1:
44:46:fe:e7:a4:a1:ac:05:6e:59:ee:b9:04:9e:65:e6:2f:55:
0d:d5:b7:df:b3:29:26:39:92:b2:b3:bf:77:3c:9f:a9:2b:47:
84:ad:e8:c5:cf:94:2e:91:d6:14:03:d8:b7:3a:7e:40:ac:ee:
3b:10:bd:67:d2:8f:3d:a8:38:41:11:61:80:58:7f:50:da:fa:
10:13:14:f4:be:80:6e:4e:a8:5e:79:51:64:56:7f:60:34:92:
43:49:91:eb:31:0c:2f:47:de:76:45:d4:49:f0:17:c4:04:d1:
51:ca:e6:2e:c9:51:56:17:e1:1a:27:e2:0a:d0:aa:89:7b:e0:
d4:c5:e0:a9:f3:9a:59:e6:6c:18:91:87:03:a1:b8:4f:9f:29:
db:e0:8d:d0:d9:04:78:26:b9:8b:b7:d7:db:18:6c:f2:c0:d2:
28:4b:0b:e1:38:0b:ad:25:58:14:a2:e3:81:2b:22:7c:d5:e6:
01:fd:74:ab:78:52:59:da:b5:6d:4d:6b:82:29:3c:9e:2c:a9:
1e:01:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:56:51 2024 by rpki-client on console-ams.rpki-client.org