Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a373030303a3a2f33362d3438203d3e203236303432.roa
File: 326131343a373538303a373030303a3a2f33362d3438203d3e203236303432.roa (raw, json)
Hash identifier: PPcb9+WbU0KsJN71W4tmWyQZeVZ4m08g2NGgC7OttWk=
Subject key identifier: 15:28:5E:B3:7D:48:F5:FE:D8:77:9E:8B:DC:0A:BB:E1:8B:0F:8C:7E
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4851A7E4702D4F37FAFD1663F1E8AD76A8D27737
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a373030303a3a2f33362d3438203d3e203236303432.roa
Signing time: Fri 15 Nov 2024 15:48:55 +0000
ROA not before: Fri 15 Nov 2024 15:43:55 +0000
ROA not after: Fri 14 Nov 2025 15:48:55 +0000
asID: 26042
IP address blocks: 2a14:7580:7000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:51:a7:e4:70:2d:4f:37:fa:fd:16:63:f1:e8:ad:76:a8:d2:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 15 15:43:55 2024 GMT
Not After : Nov 14 15:48:55 2025 GMT
Subject: CN=15285EB37D48F5FED8779E8BDC0ABBE18B0F8C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:96:6d:e3:22:6e:a6:3d:ba:93:76:3a:1d:
9a:c4:17:f9:74:55:55:ac:9f:38:0a:cb:44:0f:e5:
c8:dd:84:45:88:4b:90:f2:cd:da:5e:4d:d8:f9:54:
2a:41:b1:4a:0f:b4:32:64:00:d0:00:97:58:a0:07:
14:a1:9c:13:5d:98:1e:ee:39:aa:00:15:fb:cc:ac:
bb:74:e9:a2:cb:ee:26:f6:18:34:a7:2c:14:20:74:
0f:0b:20:cf:94:2a:83:9c:ec:98:42:3b:63:4d:3a:
54:b8:85:8c:1d:ad:67:8a:90:4a:c3:00:ea:32:91:
06:74:18:4a:a1:21:a0:3a:93:c5:2b:06:15:c3:1c:
40:e4:2c:3a:b2:71:09:79:3b:35:54:e6:ee:cb:a6:
d8:78:71:92:17:fe:74:b6:89:f5:b9:4d:40:9c:d9:
2d:aa:b8:1a:64:86:f2:c5:37:54:fc:01:b8:53:20:
1c:7f:13:aa:e7:2d:c2:9d:a0:08:6d:f1:81:0f:72:
28:58:67:46:19:d2:46:a9:73:5b:34:0f:6e:93:7f:
2f:ba:b7:5c:63:91:db:88:c1:f0:d8:9a:68:3d:b5:
17:01:b4:9e:8a:ba:c7:cd:4e:b7:25:6c:e2:cf:b0:
c6:c3:c2:7a:0f:36:4e:dc:5c:36:c4:41:b5:84:ca:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:5E:B3:7D:48:F5:FE:D8:77:9E:8B:DC:0A:BB:E1:8B:0F:8C:7E
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a373030303a3a2f33362d3438203d3e203236303432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:7000::/36
Signature Algorithm: sha256WithRSAEncryption
59:4a:88:ac:7c:3e:d9:c6:1c:04:b3:5f:7c:dc:a6:dd:84:f8:
40:97:a7:5c:22:2f:74:ed:04:45:32:74:5c:83:aa:e7:02:4c:
df:1a:16:9d:90:18:bb:59:c2:1a:f6:54:ea:5d:0f:e6:c4:10:
7c:2f:46:ec:db:71:54:13:9a:ad:0b:83:66:b9:5d:5f:ce:50:
c8:05:db:8a:43:fd:ce:9b:c3:81:0c:2b:77:00:9b:d4:28:58:
c1:a6:2d:ef:25:fa:aa:d5:4a:e2:0d:23:49:94:1e:01:1d:fe:
90:50:e2:48:3a:bf:7f:c6:a1:fc:03:07:a0:ac:3c:cb:e9:35:
8c:0f:1b:fd:fd:8a:8b:05:6a:e7:d2:cb:82:8f:90:3f:ce:1c:
94:e7:c7:b8:82:e8:07:35:27:2a:8f:cd:89:2d:a9:ea:c9:47:
79:ff:d2:cd:d3:92:b9:58:c3:91:6c:97:4a:65:19:55:5c:15:
38:15:88:43:10:29:9c:01:ba:2b:40:f1:b4:67:5e:f8:57:16:
83:b8:e5:47:82:cd:a0:df:7e:d1:09:6c:54:ad:2e:74:b7:f4:
15:85:28:71:f9:14:95:7d:64:dc:0e:84:ec:0a:7d:18:b5:64:
54:57:9d:bf:8e:c4:0f:54:34:f4:98:4b:af:87:6a:cd:0c:bc:
85:a7:5a:3f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSFGn5HAtTzf6/RZj8eitdqjSdzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDExMTUxNTQzNTVaFw0yNTExMTQxNTQ4NTVaMDMxMTAvBgNV
BAMTKDE1Mjg1RUIzN0Q0OEY1RkVEODc3OUU4QkRDMEFCQkUxOEIwRjhDN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVZZt4yJupj26k3Y6HZrEF/l0
VVWsnzgKy0QP5cjdhEWIS5DyzdpeTdj5VCpBsUoPtDJkANAAl1igBxShnBNdmB7u
OaoAFfvMrLt06aLL7ib2GDSnLBQgdA8LIM+UKoOc7JhCO2NNOlS4hYwdrWeKkErD
AOoykQZ0GEqhIaA6k8UrBhXDHEDkLDqycQl5OzVU5u7Lpth4cZIX/nS2ifW5TUCc
2S2quBpkhvLFN1T8AbhTIBx/E6rnLcKdoAht8YEPcihYZ0YZ0kapc1s0D26Tfy+6
t1xjkduIwfDYmmg9tRcBtJ6KusfNTrclbOLPsMbDwnoPNk7cXDbEQbWEyg/9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFShes31I9f7Yd56L3Aq74YsPjH4wHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMw
M2EzNzMwMzAzMDNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDMyMzYzMDM0MzIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQqFHWAcDANBgkqhkiG9w0BAQsFAAOCAQEAWUqIrHw+2cYcBLNffNym
3YT4QJenXCIvdO0ERTJ0XIOq5wJM3xoWnZAYu1nCGvZU6l0P5sQQfC9G7NtxVBOa
rQuDZrldX85QyAXbikP9zpvDgQwrdwCb1ChYwaYt7yX6qtVK4g0jSZQeAR3+kFDi
SDq/f8ah/AMHoKw8y+k1jA8b/f2KiwVq59LLgo+QP84clOfHuILoBzUnKo/NiS2p
6slHef/SzdOSuVjDkWyXSmUZVVwVOBWIQxApnAG6K0DxtGde+FcWg7jlR4LNoN9+
0QlsVK0udLf0FYUocfkUlX1k3A6E7Ap9GLVkVFedv47ED1Q09JhLr4dqzQy8hada
Pw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org