Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a666530303a3a2f34302d3438203d3e20323134363630.roa
File: 326131343a373538303a666530303a3a2f34302d3438203d3e20323134363630.roa (raw, json)
Hash identifier: Y85qVW0hZcl3G7N0ydxklwnI4RpGpFoSequy/dThGcE=
Subject key identifier: 3C:7C:D0:DA:D1:7A:E6:9F:2A:B7:DF:46:E2:77:EF:FE:2D:9A:B7:11
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1E26ACA5CE4A834729C86C09C41667DFF9ABA3AC
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a666530303a3a2f34302d3438203d3e20323134363630.roa
Signing time: Fri 08 Nov 2024 16:23:58 +0000
ROA not before: Fri 08 Nov 2024 16:18:58 +0000
ROA not after: Fri 07 Nov 2025 16:23:58 +0000
asID: 214660
IP address blocks: 2a14:7580:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:26:ac:a5:ce:4a:83:47:29:c8:6c:09:c4:16:67:df:f9:ab:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 8 16:18:58 2024 GMT
Not After : Nov 7 16:23:58 2025 GMT
Subject: CN=3C7CD0DAD17AE69F2AB7DF46E277EFFE2D9AB711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:ac:1e:1c:0c:35:06:1a:02:93:40:a1:1e:
66:53:45:6a:3d:17:f0:a1:ff:62:12:87:a5:6c:7d:
23:82:8c:75:af:35:56:b3:ad:b9:c5:6e:50:06:81:
ee:c7:8e:bf:ed:22:88:e0:e9:5c:e7:72:ba:4b:01:
65:23:ab:55:c1:0e:72:86:b3:02:81:19:34:55:a5:
41:0b:72:2f:2c:84:c9:fc:df:32:b0:14:9e:69:30:
c9:0d:a3:cf:15:98:e9:a1:93:1f:d6:30:e3:a4:f0:
07:78:e1:b3:f3:22:b6:a0:de:22:ba:67:19:48:6d:
c8:39:69:aa:78:b5:46:ea:b9:dd:a7:12:31:48:47:
bc:3f:90:28:2b:9b:02:f7:1c:1b:31:58:23:af:67:
82:df:a1:d4:34:e8:59:31:7d:ca:63:f2:cd:a4:b5:
36:d7:79:4f:c3:7f:42:4c:2d:bf:94:ae:63:0b:26:
95:54:56:09:67:40:83:63:d7:c8:1c:29:47:f9:99:
0f:15:bc:09:79:0c:de:d8:e7:c8:e4:54:b6:ff:fe:
30:a1:ec:a8:f2:a4:c3:b6:7a:fe:c4:09:cf:06:05:
e2:0e:6f:ee:ce:06:fb:a6:24:f0:b1:be:cb:68:c3:
fc:b9:83:91:5c:60:9e:0a:ad:af:b5:61:16:24:2b:
14:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:D0:DA:D1:7A:E6:9F:2A:B7:DF:46:E2:77:EF:FE:2D:9A:B7:11
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538303a666530303a3a2f34302d3438203d3e20323134363630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
29:e3:38:32:49:e8:55:4b:97:a1:b1:e5:4c:1f:36:47:b2:c6:
44:b7:6c:f9:40:01:7d:bf:e6:a5:43:6c:80:ac:ab:2a:0f:90:
ba:65:3a:14:9e:7c:8d:7d:d0:7d:f3:b0:54:40:7b:6c:f4:21:
de:e9:35:c8:65:f0:76:4a:bb:ff:bb:ef:48:6c:0c:7a:18:36:
45:bb:03:59:bf:6e:7b:1a:7a:b1:f7:31:a5:82:af:ad:f6:16:
e7:9d:82:ef:ea:4d:3c:3f:94:7b:76:68:82:9b:0b:be:fd:1f:
c8:bf:69:37:32:84:ca:7c:98:44:e2:fb:fe:21:11:bc:25:42:
ba:bd:49:a2:9a:bd:eb:70:d5:d6:e9:3e:da:89:7e:28:cb:c9:
12:b8:26:98:c9:f9:5e:61:df:6b:d6:3f:ac:06:ac:ed:73:b3:
b7:b4:52:3f:51:7c:d6:c4:97:07:0b:c5:bc:aa:fc:15:fe:9e:
60:63:74:71:9b:b0:28:7c:44:8b:84:d0:84:1c:87:f0:5e:60:
91:bc:2e:9f:e8:e3:14:f5:32:79:8c:e6:3f:9a:18:50:c5:88:
dd:03:e5:34:16:e9:24:34:c7:8b:6c:cf:6b:ad:2b:b0:ee:18:
47:00:4b:b2:c5:3f:1b:17:87:0c:0c:ad:7d:74:78:be:ff:e0:
5d:b5:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org