Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a393930303a3a2f34302d3438203d3e20323134333434.roa
File: 326131343a373538313a393930303a3a2f34302d3438203d3e20323134333434.roa (raw, json)
Hash identifier: gyKZOBw0WFndzvZi4HjUW9eRcCx6Pa9QThFEJFIPjU0=
Subject key identifier: CB:2E:64:A0:88:7C:DB:D5:C7:03:EE:F2:B4:72:5B:C5:33:80:C4:DD
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 20940F6561D2A71FD3D108FC7EDC45F2BFC54635
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a393930303a3a2f34302d3438203d3e20323134333434.roa
Signing time: Thu 29 Aug 2024 01:29:40 +0000
ROA not before: Thu 29 Aug 2024 01:24:40 +0000
ROA not after: Thu 28 Aug 2025 01:29:40 +0000
asID: 214344
IP address blocks: 2a14:7581:9900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:94:0f:65:61:d2:a7:1f:d3:d1:08:fc:7e:dc:45:f2:bf:c5:46:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 29 01:24:40 2024 GMT
Not After : Aug 28 01:29:40 2025 GMT
Subject: CN=CB2E64A0887CDBD5C703EEF2B4725BC53380C4DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:83:dc:0a:b5:2e:d9:ca:c1:bc:79:05:84:
43:7e:a4:75:60:51:b3:55:67:f9:00:72:44:48:1b:
6a:13:6d:3d:e9:60:f5:b5:c4:d3:14:a4:63:1e:f0:
1a:50:ac:29:5b:04:0d:3b:c3:d3:90:5b:cc:e9:86:
ca:eb:0e:44:b7:fb:c1:84:70:49:1c:54:ca:0b:c7:
8b:d8:a2:02:f0:8a:36:6e:68:be:e4:04:a5:01:26:
6c:68:43:09:65:64:ce:7c:53:86:1c:2f:05:3d:cc:
40:cc:20:f1:a2:99:69:24:2b:32:5c:51:10:49:e2:
34:ce:a6:4a:04:c1:04:df:36:f3:25:bc:5f:ad:f6:
e7:41:00:82:d9:43:19:a8:3c:26:63:a5:e3:88:e7:
fd:45:3c:fc:59:e5:66:b8:26:d3:63:85:5a:f4:55:
97:f7:d1:77:04:b0:55:f1:ca:05:8a:d2:d2:e7:b4:
ce:0f:62:9e:58:0a:cc:91:4f:26:cd:4b:af:14:de:
59:ac:53:51:e9:94:36:17:e3:bc:38:54:35:72:4b:
9e:7b:a7:d2:07:80:70:a9:34:7e:86:5a:d1:83:df:
00:b6:c6:96:e0:9b:71:d1:55:ed:c2:94:24:5a:9d:
a3:d3:f9:9b:b1:93:59:ab:9b:50:37:f4:bd:83:78:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:64:A0:88:7C:DB:D5:C7:03:EE:F2:B4:72:5B:C5:33:80:C4:DD
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a393930303a3a2f34302d3438203d3e20323134333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9900::/40
Signature Algorithm: sha256WithRSAEncryption
48:4d:d8:95:b1:9d:19:16:d1:ae:87:21:64:4b:d7:a8:c6:77:
d7:48:2e:46:dc:a9:c3:e5:e3:f7:04:04:39:9e:6f:cc:26:b1:
50:17:b0:38:b7:ed:ee:42:bd:8c:9a:d4:7b:98:4c:18:6b:9e:
64:38:48:a3:e8:d1:23:77:1f:30:93:ad:9f:bd:5e:e3:6f:82:
de:d4:20:f7:cf:1e:d0:1b:7a:03:97:1c:b0:68:d6:8f:2a:72:
ab:3c:67:c8:74:e9:44:89:ec:10:ab:a6:bd:70:5c:09:bc:5c:
7b:a1:35:21:53:87:e0:ee:c6:66:20:d4:58:17:7e:17:06:bb:
96:96:98:8a:8f:d9:a8:b8:4b:df:14:19:8c:fc:ad:b0:07:ab:
74:3f:ba:fb:94:56:c6:d7:df:ff:09:82:e1:8a:cb:66:45:9a:
c2:a2:d2:52:b7:5a:62:61:38:cd:c7:7c:5f:35:a5:33:4c:76:
b4:47:aa:31:95:bb:89:68:2d:bc:44:1a:5e:b8:bf:0f:67:08:
ae:b7:51:a7:1a:ab:2d:99:9c:35:aa:50:31:bc:00:8b:ec:80:
31:04:14:bf:35:99:69:d5:96:5e:1b:06:9f:6f:d5:a0:0f:21:
56:44:54:0f:2c:0c:e6:24:df:2f:63:8d:f8:20:28:b0:46:41:
2e:21:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org