Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663230303a3a2f34302d3438203d3e20323035323435.roa
File: 326131343a373538303a663230303a3a2f34302d3438203d3e20323035323435.roa (raw, json)
Hash identifier: MvM13F9nU4pq1iPYm7wMASFQvOowv8aO5jwSHGQSlgE=
Subject key identifier: BD:5B:2D:5B:28:AF:19:DE:C9:53:74:87:0A:D1:D9:46:44:CA:A6:86
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6B9BFA1FE23508C897AFD9DE4E6056E2BC8ABF2F
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663230303a3a2f34302d3438203d3e20323035323435.roa
Signing time: Tue 08 Oct 2024 06:43:47 +0000
ROA not before: Tue 08 Oct 2024 06:38:47 +0000
ROA not after: Tue 07 Oct 2025 06:43:47 +0000
asID: 205245
IP address blocks: 2a14:7580:f200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9b:fa:1f:e2:35:08:c8:97:af:d9:de:4e:60:56:e2:bc:8a:bf:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 8 06:38:47 2024 GMT
Not After : Oct 7 06:43:47 2025 GMT
Subject: CN=BD5B2D5B28AF19DEC95374870AD1D94644CAA686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:de:29:8b:ca:0c:74:41:45:19:51:a3:6e:
9d:22:fe:b1:db:39:be:77:08:c2:70:7e:25:e3:e0:
74:a8:cc:ad:68:49:a7:35:09:c2:35:13:ca:2c:a8:
6a:de:5e:cb:87:9e:49:0d:0f:13:5a:6a:9e:cd:55:
32:65:59:88:bf:74:f4:ef:f2:1c:d6:91:42:93:04:
53:17:54:32:8d:d0:db:8c:eb:d1:43:1a:f7:ac:b1:
c4:a5:97:c1:d0:96:6a:25:44:2c:61:58:e2:30:d7:
26:e9:f1:9e:da:72:af:b3:83:55:d4:03:fd:c3:92:
4f:e7:4b:90:72:cf:3c:ca:31:ef:64:72:dd:d3:0b:
1d:8a:e0:44:a5:cc:12:7f:da:a6:50:ce:a1:12:63:
1a:8f:79:e1:77:a3:00:3e:ed:9d:84:25:fb:c9:bb:
ba:3b:0a:f5:dd:f3:6f:d4:41:b6:f3:e5:4c:9a:98:
1f:9f:0c:c3:14:d3:53:fd:44:b4:72:bf:1f:7f:e6:
ee:55:de:a0:f8:1d:59:36:09:76:3a:1f:34:1f:93:
3e:ef:c0:12:01:60:53:7d:52:ee:62:e0:ee:6c:bf:
d4:cd:54:9e:64:80:ca:43:35:6b:5e:82:72:77:4b:
e6:6a:44:04:c4:53:a3:fa:e0:6c:3d:9e:83:1f:39:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:2D:5B:28:AF:19:DE:C9:53:74:87:0A:D1:D9:46:44:CA:A6:86
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663230303a3a2f34302d3438203d3e20323035323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f200::/40
Signature Algorithm: sha256WithRSAEncryption
5d:e3:3a:86:c5:9b:f6:03:9f:7e:72:42:47:25:b1:15:0a:e6:
11:0e:6d:4d:ae:b3:42:bb:9a:8f:24:2c:c6:fc:a1:60:81:ff:
1d:16:fd:7b:f7:ba:3a:0c:8a:79:21:25:1d:03:90:b7:cc:84:
bd:3d:73:fc:89:8b:ab:53:27:05:46:9c:84:46:0e:d0:4f:ff:
7b:36:cc:fd:c3:4a:04:86:74:7b:1e:8a:94:e2:5f:03:29:db:
57:42:38:09:ba:6d:3c:62:cb:bf:59:b0:39:d6:45:d6:5b:df:
28:19:c0:28:b8:da:36:2c:fa:69:72:35:77:02:a4:6a:c7:1e:
0a:26:db:e1:db:45:c3:3f:b0:46:3d:0f:36:9b:d8:78:59:19:
90:b6:81:26:7d:83:e9:17:b1:70:e3:3c:d7:3b:92:cf:cf:68:
71:73:14:65:9d:f1:c6:15:1a:bd:3e:a8:41:59:27:20:db:cd:
83:1a:f9:55:0d:04:57:1e:b9:e9:31:d2:1f:73:80:40:16:39:
d2:8b:0b:c4:01:96:35:ba:17:ac:56:cb:e8:a3:6e:c8:39:b3:
c6:18:95:05:6d:fc:cb:50:20:73:80:a1:65:2c:31:e1:1b:dd:
72:5d:bf:89:68:3e:df:8e:34:5f:8a:f0:cd:b3:24:c4:e5:ce:
38:41:55:ea
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUa5v6H+I1CMiXr9neTmBW4ryKvy8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDEwMDgwNjM4NDdaFw0yNTEwMDcwNjQzNDdaMDMxMTAvBgNV
BAMTKEJENUIyRDVCMjhBRjE5REVDOTUzNzQ4NzBBRDFEOTQ2NDRDQUE2ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4d4pi8oMdEFFGVGjbp0i/rHb
Ob53CMJwfiXj4HSozK1oSac1CcI1E8osqGreXsuHnkkNDxNaap7NVTJlWYi/dPTv
8hzWkUKTBFMXVDKN0NuM69FDGvesscSll8HQlmolRCxhWOIw1ybp8Z7acq+zg1XU
A/3Dkk/nS5ByzzzKMe9kct3TCx2K4ESlzBJ/2qZQzqESYxqPeeF3owA+7Z2EJfvJ
u7o7CvXd82/UQbbz5UyamB+fDMMU01P9RLRyvx9/5u5V3qD4HVk2CXY6HzQfkz7v
wBIBYFN9Uu5i4O5sv9TNVJ5kgMpDNWtegnJ3S+ZqRATEU6P64Gw9noMfOVDPAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUvVstWyivGd7JU3SHCtHZRkTKpoYwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMw
M2E2NjMyMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzAzNTMyMzQzNS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoUdYDyMA0GCSqGSIb3DQEBCwUAA4IBAQBd4zqGxZv2A59+ckJH
JbEVCuYRDm1NrrNCu5qPJCzG/KFggf8dFv1797o6DIp5ISUdA5C3zIS9PXP8iYur
UycFRpyERg7QT/97Nsz9w0oEhnR7HoqU4l8DKdtXQjgJum08Ysu/WbA51kXWW98o
GcAouNo2LPppcjV3AqRqxx4KJtvh20XDP7BGPQ82m9h4WRmQtoEmfYPpF7Fw4zzX
O5LPz2hxcxRlnfHGFRq9PqhBWScg282DGvlVDQRXHrnpMdIfc4BAFjnSiwvEAZY1
uhesVsvoo27IObPGGJUFbfzLUCBzgKFlLDHhG91yXb+JaD7fjjRfivDNsyTE5c44
QVXq
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org