Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa
File: 326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa (raw, json)
Hash identifier: IQCauKJPhn1LJQ6P+HJVNlka81TWCY9rvqy2cQoLGb0=
Subject key identifier: 89:BE:DB:E1:07:FD:7C:69:62:63:84:C2:42:7E:53:8F:6F:06:35:2F
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 1930D6B03ECB3930745D5E27D787B4154EF0F675
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa
Signing time: Tue 28 Jan 2025 22:37:58 +0000
ROA not before: Tue 28 Jan 2025 22:32:58 +0000
ROA not after: Tue 27 Jan 2026 22:37:58 +0000
asID: 215638
IP address blocks: 2a11:29c0:4e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:30:d6:b0:3e:cb:39:30:74:5d:5e:27:d7:87:b4:15:4e:f0:f6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Jan 28 22:32:58 2025 GMT
Not After : Jan 27 22:37:58 2026 GMT
Subject: CN=89BEDBE107FD7C69626384C2427E538F6F06352F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:a4:a1:42:39:fa:03:26:84:db:58:ae:43:
12:50:86:b9:12:b7:d3:43:e8:5a:03:4b:9b:70:89:
b2:47:2e:54:89:db:f5:a6:21:c0:4b:2d:cb:4d:3a:
2d:b4:bb:23:f1:37:1d:85:e1:37:1d:23:73:a3:80:
c7:d0:86:80:10:a1:50:47:76:81:ac:c8:b7:68:77:
ea:5a:15:a1:7a:97:bc:69:7b:b4:9d:66:fa:13:08:
a8:62:6b:24:f3:f2:7c:cc:e7:e4:5b:2c:76:f4:c1:
65:d8:9d:a8:96:90:17:c1:b1:e6:c2:40:a2:b1:11:
5d:09:de:61:e8:0f:61:d9:7b:25:e8:f8:38:35:ce:
3b:b4:e4:22:9c:0b:74:5a:f2:cd:01:5c:80:fd:54:
89:78:53:b1:86:5f:32:91:71:0a:16:dc:9f:7d:6b:
10:e2:c5:f9:e1:2d:3d:78:f9:24:6e:0c:c3:88:45:
b8:8c:a1:97:ed:d8:c1:01:34:02:e0:d8:ec:5f:fc:
0a:f0:31:46:2e:35:f7:d2:ec:0f:58:29:38:0b:5f:
7e:a9:28:6f:34:7a:23:11:73:7e:a3:5d:b8:b9:3f:
e2:f5:9a:10:a4:dd:bf:0d:b8:56:4c:74:9c:1a:87:
1a:8d:c7:fa:9b:7a:68:d5:09:38:a9:e1:22:ae:57:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BE:DB:E1:07:FD:7C:69:62:63:84:C2:42:7E:53:8F:6F:06:35:2F
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a346530303a3a2f34302d3438203d3e20323135363338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4e00::/40
Signature Algorithm: sha256WithRSAEncryption
90:52:a1:f3:5d:4d:c2:b2:83:e0:2d:3b:06:23:b6:7c:35:45:
28:bc:09:2d:0a:3d:53:51:de:6f:4e:2d:1c:71:e9:43:df:5e:
a9:f5:97:9b:da:79:7c:fc:31:c6:c8:55:7a:e6:a4:74:81:c2:
61:7e:d3:52:1f:4c:26:10:47:de:46:b3:04:90:22:25:5f:15:
6d:16:e1:85:f9:64:83:9a:8a:97:f4:c8:9c:aa:95:c5:fd:6b:
a0:ae:6e:64:24:05:b0:29:33:08:ca:20:ac:22:82:7f:68:0f:
cd:fc:59:85:6a:03:82:09:90:5b:e2:7d:6e:ca:02:fd:11:e6:
24:a1:bb:55:e2:54:09:36:c7:78:e1:2f:1f:cd:8e:92:6c:d1:
7f:dc:29:fb:cc:85:f1:e8:b3:2b:54:c5:a7:eb:1a:e4:f8:2a:
f7:b5:be:89:cd:04:fb:3b:d5:34:15:28:73:63:2f:39:39:29:
df:f1:41:de:4b:dc:3f:d6:97:f8:74:7e:64:1a:07:7f:4a:09:
b8:35:05:3f:6c:15:93:a6:92:4d:39:49:d1:87:95:70:90:16:
c2:c8:c9:1f:e7:84:62:34:b3:ee:f5:5e:2e:7a:e8:90:b3:a5:
8e:4f:4b:61:45:bc:fc:8b:43:d1:7b:b3:2d:0e:92:d9:84:59:
a6:60:3b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:25 2025 by rpki-client