Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a313a3a2f34382d3438203d3e203538323032.roa
File: 326131343a373538303a313a3a2f34382d3438203d3e203538323032.roa (raw, json)
Hash identifier: bwXmLRXVfPszYAloOO4tNJncwf/zqjyq/wXWT1UjCIw=
Subject key identifier: 4A:E5:B4:F3:14:14:D1:2F:9C:4F:F2:4C:93:C6:E7:71:AC:7A:92:02
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 55AE86505B7C2588ACDE817869E979248C87AC24
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a313a3a2f34382d3438203d3e203538323032.roa
Signing time: Mon 26 Aug 2024 14:49:44 +0000
ROA not before: Mon 26 Aug 2024 14:44:44 +0000
ROA not after: Mon 25 Aug 2025 14:49:44 +0000
asID: 58202
IP address blocks: 2a14:7580:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ae:86:50:5b:7c:25:88:ac:de:81:78:69:e9:79:24:8c:87:ac:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 26 14:44:44 2024 GMT
Not After : Aug 25 14:49:44 2025 GMT
Subject: CN=4AE5B4F31414D12F9C4FF24C93C6E771AC7A9202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:50:46:23:a5:7b:ec:b2:54:a2:6d:2c:ab:
9b:66:75:7a:9c:10:27:0f:80:66:b3:1f:98:cb:e6:
7e:a1:3a:3f:ee:bb:80:45:0f:98:b1:ed:02:bd:5e:
f9:48:b2:21:cb:01:20:b0:16:6c:77:d3:7c:3e:09:
17:0b:4d:d8:1e:74:d8:aa:c8:37:2f:3e:99:ee:e8:
7e:a4:b1:e8:72:f8:2e:5c:fb:24:15:a3:90:65:87:
e4:bc:f7:cd:68:6b:3a:06:56:ec:e7:4d:23:ef:0c:
7e:a6:7e:c3:9b:bf:79:d9:dc:e1:a9:a7:6e:3c:d5:
d9:b6:f6:b9:6f:5c:ab:6c:b5:49:06:68:62:a9:ff:
43:16:ef:58:3a:2e:83:b8:6e:69:f7:04:bd:11:d6:
b1:13:55:be:88:ed:58:fc:08:b0:1c:de:63:d6:1f:
82:f6:a2:da:aa:21:ab:13:f6:ec:03:6a:77:fc:ea:
3e:12:07:d0:30:23:8f:36:23:8d:0b:1c:ed:53:e0:
e5:52:9d:f1:38:74:73:bb:7a:f4:a2:58:e7:d5:95:
35:92:2a:1a:19:2e:00:f7:34:4b:a0:4f:fa:6e:d0:
79:12:9b:e6:ed:e8:be:df:8b:7f:84:50:21:b5:83:
a2:87:0c:5e:10:a0:46:44:0c:85:eb:df:47:21:b4:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E5:B4:F3:14:14:D1:2F:9C:4F:F2:4C:93:C6:E7:71:AC:7A:92:02
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a313a3a2f34382d3438203d3e203538323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:33:23:48:78:e0:29:db:b2:9f:df:5a:fe:7d:35:8e:6f:d0:
bd:69:3d:96:2f:05:16:c7:0f:c6:12:1e:a5:1e:a6:76:50:cb:
37:59:17:d7:ec:26:49:69:a1:db:95:ff:83:f8:90:34:2a:91:
d7:30:a5:83:9a:8c:6f:2c:5c:bb:aa:be:00:18:10:9f:b4:0b:
ef:cd:56:f6:a7:8c:94:fb:19:0a:7e:da:d3:90:89:4b:7f:f9:
ba:90:52:ff:14:9e:1d:a9:d6:c2:49:45:8f:54:0b:b6:d6:8c:
e7:42:26:f4:22:c0:1d:88:a6:26:8c:de:c6:95:db:7f:1a:ab:
53:c8:f9:91:e1:d3:e8:9e:8a:67:20:ef:39:ef:13:e8:8d:b6:
26:cc:e7:63:02:e3:2c:88:eb:c4:af:83:b3:ed:fa:f5:b0:9b:
4e:c0:07:11:2b:36:05:2a:15:4d:1e:6e:eb:7b:64:37:ed:6f:
7f:fc:c4:55:65:9f:7f:34:8c:15:21:17:a6:4f:2e:b6:9f:fd:
52:ef:a3:fe:51:15:88:0f:58:e7:51:ec:9a:e9:12:3c:20:8d:
fe:29:8f:ff:fa:66:cc:1c:1e:10:21:2c:d9:0a:ae:19:5f:eb:
f2:c5:9f:d7:10:92:2b:77:05:33:1d:52:02:69:14:68:bc:b1:
18:e8:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org