Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396430303a3a2f34302d3438203d3e203630363134.roa
File: 326131343a373538313a396430303a3a2f34302d3438203d3e203630363134.roa (raw, json)
Hash identifier: TNTi4+h+m2VOZHTP80A5hH30UQcEUtwgsRHXwE4Poss=
Subject key identifier: D5:79:2B:47:06:FA:A5:0D:CA:AC:1E:92:B2:DC:A8:FC:1D:0F:56:9F
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 5F9886EAEB3A24B34EE4A20422F3FD5A65059D0D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396430303a3a2f34302d3438203d3e203630363134.roa
Signing time: Sat 21 Sep 2024 00:41:50 +0000
ROA not before: Sat 21 Sep 2024 00:36:50 +0000
ROA not after: Sat 20 Sep 2025 00:41:50 +0000
asID: 60614
IP address blocks: 2a14:7581:9d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:98:86:ea:eb:3a:24:b3:4e:e4:a2:04:22:f3:fd:5a:65:05:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 21 00:36:50 2024 GMT
Not After : Sep 20 00:41:50 2025 GMT
Subject: CN=D5792B4706FAA50DCAAC1E92B2DCA8FC1D0F569F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:ac:24:44:e6:db:c4:fa:51:44:92:93:bf:
5e:6e:f0:12:ee:9f:9f:57:3b:52:db:69:01:7e:73:
b1:21:9b:6e:50:46:35:61:7d:07:c6:53:1d:6f:f2:
e5:c2:de:fa:18:55:04:90:c1:2a:09:1e:8a:e4:aa:
f8:a3:ca:80:81:e9:d6:97:36:89:d5:ea:ce:68:f5:
69:ef:83:c6:21:4d:c6:81:d1:63:2c:69:99:14:46:
22:3e:b5:d9:9b:dc:5e:4e:9c:a2:2d:c8:14:24:ce:
ef:5d:a1:73:2a:23:c1:77:a5:c1:19:da:30:f9:23:
e7:3e:4b:0c:f3:bc:2c:41:ee:55:64:9d:b0:dc:a3:
f0:47:01:e9:69:ed:25:a9:03:1a:26:95:5c:01:4f:
ad:bd:b5:e8:b6:64:37:78:0f:36:4e:cd:c5:08:c0:
84:d5:fc:ea:35:e8:a3:bc:db:f7:65:47:ff:7d:02:
22:06:af:6f:ff:22:25:aa:05:48:9d:fb:2a:40:64:
68:7e:20:86:c6:5e:8b:46:6a:ec:3e:7a:14:58:0c:
b0:64:1d:fd:cd:ee:34:03:74:f8:4e:b4:53:6c:4a:
c3:2c:c6:3e:0d:3a:fa:fd:d8:3f:d3:76:76:d3:0a:
dd:23:fc:24:44:b4:9d:a2:79:0b:c2:79:49:29:b5:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:79:2B:47:06:FA:A5:0D:CA:AC:1E:92:B2:DC:A8:FC:1D:0F:56:9F
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396430303a3a2f34302d3438203d3e203630363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9d00::/40
Signature Algorithm: sha256WithRSAEncryption
8c:2d:50:c3:85:72:56:c7:3d:92:ac:1c:5a:43:7a:19:71:78:
20:3e:ef:5f:87:cb:63:32:ec:27:cc:b5:50:99:c0:59:d7:93:
07:7b:71:78:1f:00:e4:fb:8d:c1:9d:1f:db:60:e2:c8:a7:b5:
2e:d7:59:34:7e:8b:16:c2:b6:87:7f:53:10:fc:5d:c6:67:01:
14:83:2e:39:fd:36:25:3c:8b:1e:d4:c8:30:1e:8b:b1:a8:7a:
34:56:7b:56:4b:25:a7:1c:fc:1b:d1:0a:8e:66:f4:6f:71:9e:
97:3c:f1:cd:85:f1:d2:d6:e2:1a:e5:12:66:f4:e4:bd:59:57:
10:ba:80:49:6f:4b:24:44:c9:28:63:27:b6:49:18:f8:61:c7:
6d:0b:7a:d2:e2:1b:89:78:52:fa:64:94:68:4e:9b:5f:6e:0e:
b1:41:cc:6f:9a:f6:82:e3:44:ea:45:aa:5c:92:11:b7:88:15:
bd:48:a5:c0:19:15:17:1f:28:d5:89:95:af:5f:1b:49:b9:37:
4d:1a:5c:f6:93:d2:63:77:00:33:1b:a7:ba:47:76:28:fb:7c:
2c:24:10:b1:5b:3d:4f:eb:2f:77:8c:0c:e6:50:ef:df:ce:ce:
55:d2:20:df:97:72:76:ed:b2:1c:f7:0a:f9:3b:e7:ac:8d:e5:
1e:af:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org