Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa
File: 326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa (raw, json)
Hash identifier: 9J34sSn0m2UthMAqJmbg9SJH3Y6CATPhkL8SNz50uh8=
Subject key identifier: E0:B4:61:D0:B7:87:C6:E5:7C:31:68:6C:29:07:1D:6B:27:76:75:74
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 0953D74E3F8B2CF191636A4A6715FFD7154BBFFD
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa
Signing time: Wed 18 Sep 2024 19:47:53 +0000
ROA not before: Wed 18 Sep 2024 19:42:53 +0000
ROA not after: Wed 17 Sep 2025 19:47:53 +0000
asID: 214166
IP address blocks: 2a11:29c0:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:53:d7:4e:3f:8b:2c:f1:91:63:6a:4a:67:15:ff:d7:15:4b:bf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Sep 18 19:42:53 2024 GMT
Not After : Sep 17 19:47:53 2025 GMT
Subject: CN=E0B461D0B787C6E57C31686C29071D6B27767574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:ed:35:58:a6:43:71:3e:4b:81:d7:56:16:
d9:0f:3d:8f:70:19:dd:11:03:27:69:a8:a7:ee:bd:
8a:d8:af:df:2a:bc:72:04:1f:95:a2:b7:fd:cb:a4:
2d:7d:f4:11:85:85:d1:c1:8d:6e:43:6c:61:fa:83:
8f:dc:44:5a:f2:eb:ef:5a:62:07:bc:69:a0:06:ae:
0a:c5:dc:23:c3:f9:fe:c9:42:d2:cf:f0:30:41:29:
a2:82:29:81:f0:48:1a:42:90:50:73:d3:f5:b4:ed:
6d:5f:81:5e:eb:cc:28:3f:ae:68:3e:e3:77:12:90:
c1:11:b0:0e:f8:f6:53:dc:0a:cd:b2:8a:e4:a3:80:
e2:b8:b0:50:83:98:f0:5d:ba:26:98:69:25:d5:10:
b3:ed:dd:0a:d1:10:9a:1c:0b:5a:b1:b5:dd:6b:bb:
34:72:d1:ed:4d:d1:a3:59:9d:f2:50:39:41:90:b0:
a4:56:ed:1f:d1:05:4e:04:b6:da:37:30:06:c9:d9:
a3:c0:0f:43:9b:1a:03:cb:cf:17:22:a1:e6:21:54:
73:ec:ca:72:9b:ac:0e:09:33:ae:f4:e5:a0:0c:7b:
9b:5c:5c:4e:72:1b:7b:ab:a3:cb:f9:b1:fc:26:d9:
ba:89:06:b1:cc:27:55:b4:10:17:2d:e7:88:40:e6:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B4:61:D0:B7:87:C6:E5:7C:31:68:6C:29:07:1D:6B:27:76:75:74
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a35303a3a2f34382d3438203d3e20323134313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:50::/48
Signature Algorithm: sha256WithRSAEncryption
05:0d:0f:d0:3f:47:4c:15:57:a3:16:2a:a9:0c:f3:2c:a3:b1:
03:d4:c8:43:39:bb:ea:17:e0:65:b2:a3:17:39:30:fc:0d:df:
72:9b:b2:6f:97:49:22:63:14:eb:51:7d:a6:33:28:5c:94:f0:
62:ba:db:12:ac:44:72:3c:53:c6:35:eb:6f:97:23:ad:f1:44:
bb:fa:77:b0:02:00:92:22:b0:98:c6:b8:c6:98:b4:d3:97:3b:
b1:e6:ad:90:10:d1:e0:e6:dc:46:ed:10:22:c4:78:16:24:67:
0b:3f:98:d9:08:f5:08:55:18:79:e4:73:d6:01:0b:5b:06:b7:
56:b1:e0:75:6e:c9:5e:43:d7:0c:78:de:f8:8c:b2:fe:cb:27:
2c:54:13:96:bc:8f:46:51:78:28:68:95:6e:8a:0d:30:cf:2e:
c4:82:92:06:1e:47:a3:d2:b9:52:83:24:a3:23:71:a5:f8:1e:
fa:24:a9:47:3a:f7:9a:a8:3f:8b:23:85:e3:9c:95:f4:5e:b8:
7a:21:0d:b8:26:c9:5a:72:f8:58:be:98:0d:a2:41:ee:f9:0b:
dc:10:09:0e:a1:3a:4a:23:40:43:72:49:e0:43:88:10:bc:1c:
9d:45:bc:4f:83:22:44:ee:a2:bf:ce:e2:65:89:e3:eb:6c:d7:
84:51:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:13 2024 by rpki-client on console-fra.rpki-client.org