Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663830303a3a2f34302d3438203d3e20323135303530.roa
File: 326131343a373538303a663830303a3a2f34302d3438203d3e20323135303530.roa (raw, json)
Hash identifier: pl34YtzpkIp3qyKxb9x1Q+iH7rrUNcbAztiFuNhqiOo=
Subject key identifier: 2F:C9:98:52:FF:FC:56:80:15:1E:7E:63:F5:B3:37:1D:70:CC:38:71
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 7FC15CEBACE61CED22D7D2CFD3CC0F75697BFF3C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663830303a3a2f34302d3438203d3e20323135303530.roa
Signing time: Sun 20 Oct 2024 01:05:29 +0000
ROA not before: Sun 20 Oct 2024 01:00:29 +0000
ROA not after: Sun 19 Oct 2025 01:05:29 +0000
asID: 215050
IP address blocks: 2a14:7580:f800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:c1:5c:eb:ac:e6:1c:ed:22:d7:d2:cf:d3:cc:0f:75:69:7b:ff:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Oct 20 01:00:29 2024 GMT
Not After : Oct 19 01:05:29 2025 GMT
Subject: CN=2FC99852FFFC5680151E7E63F5B3371D70CC3871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:7f:b4:09:38:f8:1f:41:8f:9f:1c:82:8c:
ec:7e:1f:be:8e:b2:e4:61:3c:f0:0d:79:39:ff:75:
07:b5:82:77:06:dd:60:10:21:c4:e5:f0:37:90:f7:
08:f7:86:15:20:c3:3e:5a:e4:cc:2c:e8:79:0f:90:
10:79:32:5e:e1:71:58:07:7c:3f:9a:ba:c3:88:1f:
f4:ec:b7:86:9c:c9:7a:19:8f:af:82:a2:6c:dc:2f:
4f:f7:83:7b:c4:73:a4:dc:f5:36:46:2d:86:62:3f:
05:25:e0:9b:89:6b:06:7b:32:8c:aa:4b:51:90:41:
48:4c:ab:3f:fa:c1:2e:c4:55:4b:43:5c:10:10:d2:
22:76:71:2d:0f:38:11:65:5b:38:2b:46:7c:60:4b:
c6:f9:00:87:c7:21:21:ab:4e:53:57:e3:e2:9d:89:
79:8c:54:66:96:6e:00:40:7e:67:0c:0b:2d:f1:12:
2f:9f:f1:dd:77:97:27:be:b1:91:79:ca:7a:1a:df:
16:f0:be:6a:09:d1:5a:4b:50:02:07:b9:b2:1b:8e:
7a:47:50:1e:ec:ea:02:d2:5c:92:0c:ea:cb:d8:7a:
9b:fd:bc:0c:6d:ab:fe:8f:34:1a:73:49:a8:7a:52:
2d:fe:d6:fd:61:58:3a:fb:bf:f3:05:e8:df:03:5f:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C9:98:52:FF:FC:56:80:15:1E:7E:63:F5:B3:37:1D:70:CC:38:71
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a663830303a3a2f34302d3438203d3e20323135303530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:f800::/40
Signature Algorithm: sha256WithRSAEncryption
36:70:ee:74:ea:cd:aa:11:ee:09:85:7d:6d:06:97:e1:c3:c8:
24:b2:9c:ad:a9:cd:66:6e:7c:26:04:94:cd:48:9d:ee:3c:8f:
1a:fc:7b:16:56:31:02:c7:47:69:d9:fd:98:b1:72:b1:a8:18:
b6:2b:37:9c:4f:a3:77:92:a4:fe:a8:70:1a:0f:3c:0e:b5:a1:
52:02:f8:1c:39:6d:ea:8c:5b:89:9c:f9:fe:4a:fa:c2:95:06:
f3:05:a0:d8:c2:7a:a6:46:38:e0:53:b5:4d:3e:13:48:d8:d5:
91:06:c3:f8:e2:9a:ed:73:1e:cd:4a:87:83:cd:ef:82:d3:db:
2d:c3:0a:d2:ac:76:44:4e:11:ca:27:f1:06:f3:bf:f2:92:e5:
63:54:e8:36:67:bf:ed:e3:86:4a:9a:e2:46:a2:a8:e6:7c:ae:
ce:7f:0a:bf:72:c3:5b:33:31:c4:cc:cb:d5:fc:4b:f9:e0:26:
58:48:9e:84:86:b2:5e:8a:c1:34:4f:18:ec:79:b3:39:83:20:
90:b9:3f:07:e2:a7:b2:1d:36:65:ce:68:f8:4d:73:7b:1d:8d:
a8:3a:b5:38:f8:6b:ff:3b:97:b0:fc:54:12:60:21:78:80:e2:
b9:f1:b6:e6:9e:92:d2:55:44:f9:60:be:2f:63:25:b0:db:cc:
d6:7f:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org