Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663530303a3a2f34302d3438203d3e20323135303530.roa
File: 326131343a373538303a663530303a3a2f34302d3438203d3e20323135303530.roa (raw, json)
Hash identifier: Rqh+yQyXadFAmlHr5sT2O8Bj09yLZ/FP3hnri1ip2aI=
Subject key identifier: 2E:AB:EB:AA:09:77:0C:8E:6A:58:F7:5F:2B:3E:07:CC:42:1F:DC:24
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 15B5EE80B58E717165B6784314C64F92A387F449
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663530303a3a2f34302d3438203d3e20323135303530.roa
Signing time: Sun 20 Oct 2024 01:04:41 +0000
ROA not before: Sun 20 Oct 2024 00:59:41 +0000
ROA not after: Sun 19 Oct 2025 01:04:41 +0000
asID: 215050
IP address blocks: 2a14:7580:f500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b5:ee:80:b5:8e:71:71:65:b6:78:43:14:c6:4f:92:a3:87:f4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 20 00:59:41 2024 GMT
Not After : Oct 19 01:04:41 2025 GMT
Subject: CN=2EABEBAA09770C8E6A58F75F2B3E07CC421FDC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:bc:5e:78:cd:d9:ca:33:15:ce:80:3d:e1:
2b:f9:6e:6f:7e:8c:45:0c:ed:02:42:a0:40:f0:43:
2f:35:a4:19:3c:fd:95:62:48:90:dd:b1:ed:0a:d4:
b0:a5:fa:fd:0a:2d:2a:29:d2:8e:79:02:7f:a4:f7:
45:70:cb:f1:1d:92:47:37:86:bb:88:31:24:34:e2:
df:1f:b1:ed:0a:d6:bd:1c:db:07:16:cd:49:51:29:
0f:b8:2d:28:bb:6c:b2:c2:6c:ad:7a:e6:2c:34:d0:
d7:72:e6:38:c8:b9:0f:9a:c2:be:cc:51:c8:36:08:
be:ca:71:1f:b5:09:83:d5:3a:62:77:7e:3d:6b:72:
b8:2d:b7:64:21:9e:cd:0d:dc:cf:3a:e9:91:b4:3c:
44:da:c4:13:59:ef:27:12:69:06:6b:09:df:4a:28:
a7:9b:29:a5:9f:ca:a9:86:2c:1d:08:c7:e8:24:11:
65:7b:ce:55:7b:91:11:6c:6a:bd:97:35:39:27:1c:
e8:61:42:83:7b:bf:48:d6:c8:e9:92:54:61:35:ee:
af:41:33:99:af:26:55:91:03:da:06:7f:f6:1d:16:
f8:9b:4b:e1:6d:36:79:51:d8:09:51:ea:5a:d8:3f:
6a:5c:f0:ab:4f:6f:03:57:39:cb:d9:4f:4b:5b:2d:
6b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:EB:AA:09:77:0C:8E:6A:58:F7:5F:2B:3E:07:CC:42:1F:DC:24
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663530303a3a2f34302d3438203d3e20323135303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f500::/40
Signature Algorithm: sha256WithRSAEncryption
7f:5d:f7:8a:f5:ad:44:9f:da:9f:57:31:61:4e:07:32:86:85:
45:80:f4:ff:60:f2:57:c8:a6:37:9b:7c:57:75:98:59:bd:00:
9d:8f:e6:74:a5:50:ce:31:7a:fb:5a:43:1a:2c:83:b7:d2:c7:
f1:d4:49:62:f8:04:cd:1a:dc:b1:63:d6:64:fc:f2:7b:2d:62:
f4:51:a7:2f:34:97:72:1f:ec:29:48:d6:1c:0c:11:cf:5b:01:
d8:26:2e:b7:82:b9:33:99:d0:a4:0a:a2:91:79:4e:f3:0b:bb:
b4:2a:d9:08:60:b0:88:f4:53:16:4a:e8:e2:fe:09:b1:97:89:
79:03:9a:97:95:3c:1c:13:cf:a9:68:49:32:d6:95:5b:5a:62:
c3:52:03:f4:4d:a7:dd:b2:52:32:f4:8d:b5:2f:6e:9c:32:70:
f5:77:00:f9:5e:76:3f:87:25:fa:af:db:49:53:a9:ef:22:82:
2f:0f:34:fe:0d:d5:1b:53:e8:be:9d:27:4a:b6:95:05:50:d1:
64:b6:29:f5:3b:9e:b8:96:79:c2:9e:a3:99:b1:6c:29:bb:65:
5f:ed:40:15:80:1e:39:62:82:e2:c8:e9:a0:11:b9:a2:fc:b2:
34:47:c6:02:24:d1:71:01:ac:76:bc:f5:40:32:14:d3:e8:d5:
d3:9c:cf:d2
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUFbXugLWOcXFltnhDFMZPkqOH9EkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDEwMjAwMDU5NDFaFw0yNTEwMTkwMTA0NDFaMDMxMTAvBgNV
BAMTKDJFQUJFQkFBMDk3NzBDOEU2QTU4Rjc1RjJCM0UwN0NDNDIxRkRDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJrxeeM3ZyjMVzoA94Sv5bm9+
jEUM7QJCoEDwQy81pBk8/ZViSJDdse0K1LCl+v0KLSop0o55An+k90Vwy/Edkkc3
hruIMSQ04t8fse0K1r0c2wcWzUlRKQ+4LSi7bLLCbK165iw00Ndy5jjIuQ+awr7M
Ucg2CL7KcR+1CYPVOmJ3fj1rcrgtt2Qhns0N3M866ZG0PETaxBNZ7ycSaQZrCd9K
KKebKaWfyqmGLB0Ix+gkEWV7zlV7kRFsar2XNTknHOhhQoN7v0jWyOmSVGE17q9B
M5mvJlWRA9oGf/YdFvibS+FtNnlR2AlR6lrYP2pc8KtPbwNXOcvZT0tbLWu1AgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQULqvrqgl3DI5qWPdfKz4HzEIf3CQwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwgbcGCCsGAQUFBwELBIGqMIGnMIGkBggrBgEFBQcwC4aBl3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMw
M2E2NjM1MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNTMwMzUzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
DgQCAAIwCAMGACoUdYD1MA0GCSqGSIb3DQEBCwUAA4IBAQB/XfeK9a1En9qfVzFh
TgcyhoVFgPT/YPJXyKY3m3xXdZhZvQCdj+Z0pVDOMXr7WkMaLIO30sfx1Eli+ATN
GtyxY9Zk/PJ7LWL0UacvNJdyH+wpSNYcDBHPWwHYJi63grkzmdCkCqKReU7zC7u0
KtkIYLCI9FMWSuji/gmxl4l5A5qXlTwcE8+paEky1pVbWmLDUgP0TafdslIy9I21
L26cMnD1dwD5XnY/hyX6r9tJU6nvIoIvDzT+DdUbU+i+nSdKtpUFUNFktin1O564
lnnCnqOZsWwpu2Vf7UAVgB45YoLiyOmgEbmi/LI0R8YCJNFxAax2vPVAMhTT6NXT
nM/S
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org