Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396630303a3a2f34342d3438203d3e20323134323538.roa
File: 326131343a373538313a396630303a3a2f34342d3438203d3e20323134323538.roa (raw, json)
Hash identifier: luPLBf4Ojgo0esb1/3qLN9bxCQG08xDAudgw+tM4SJU=
Subject key identifier: 1D:21:99:0C:82:DC:72:A6:19:36:BE:8E:8D:11:F8:2B:EE:8B:B2:19
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3B08377B5A7145988446F4353261F403C7551A10
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396630303a3a2f34342d3438203d3e20323134323538.roa
Signing time: Mon 23 Sep 2024 12:17:46 +0000
ROA not before: Mon 23 Sep 2024 12:12:46 +0000
ROA not after: Mon 22 Sep 2025 12:17:46 +0000
asID: 214258
IP address blocks: 2a14:7581:9f00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 13:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:08:37:7b:5a:71:45:98:84:46:f4:35:32:61:f4:03:c7:55:1a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 23 12:12:46 2024 GMT
Not After : Sep 22 12:17:46 2025 GMT
Subject: CN=1D21990C82DC72A61936BE8E8D11F82BEE8BB219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:0d:82:ac:1f:8d:f7:ff:99:8a:a8:d2:3d:
04:48:0b:d7:5a:48:2e:bf:c1:de:18:de:8d:4d:4e:
e9:65:88:fb:25:40:ee:59:59:f9:89:5c:9b:39:28:
f3:af:aa:55:ed:a4:a0:48:39:c4:a4:cb:ec:1e:55:
4f:04:22:87:ca:b1:63:f0:2a:a8:b4:59:5b:21:ed:
e1:39:b4:78:a2:39:b8:ec:d6:91:a8:1d:40:33:a5:
21:9f:ff:6e:54:15:cd:59:23:4d:e0:3f:bf:05:7c:
58:73:79:bb:8b:0a:81:ca:df:90:9f:49:2f:3a:18:
70:5a:a2:5e:79:69:34:98:d1:96:18:3b:1e:52:ad:
2a:b3:22:76:62:85:40:88:38:a2:5c:a4:26:24:83:
30:99:d4:bf:9a:f5:47:08:82:21:ea:5c:a2:a2:5d:
75:e1:ac:55:34:48:38:1d:c3:19:c0:a6:1a:e1:c1:
14:ae:a9:d8:bf:2e:14:2e:30:0f:ab:43:90:7d:f9:
3d:64:90:6d:a4:61:77:25:61:79:48:f3:b9:c8:06:
9c:f9:66:1b:e6:86:e3:7b:f3:32:02:5c:af:71:ba:
27:4d:28:cb:ee:a9:a9:87:f5:94:cf:37:a8:66:73:
55:2c:a5:b6:07:4e:19:b1:8d:2a:06:28:a8:37:04:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:99:0C:82:DC:72:A6:19:36:BE:8E:8D:11:F8:2B:EE:8B:B2:19
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396630303a3a2f34342d3438203d3e20323134323538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f00::/44
Signature Algorithm: sha256WithRSAEncryption
94:10:74:4b:cf:2a:fd:9a:71:af:63:a0:5f:b1:c0:5c:f1:00:
80:14:92:78:c4:a1:f5:76:67:07:8f:1c:b0:3c:c3:46:78:d7:
3f:55:83:f5:38:d7:a7:bb:92:4e:4d:7d:4c:ca:3d:8b:77:83:
4d:5e:c7:59:96:98:6a:e4:a7:cf:e5:f1:f6:c5:16:5c:00:47:
21:30:5b:10:0a:79:41:a6:df:55:a0:aa:aa:c9:01:57:91:46:
c3:58:57:5a:2c:bf:3a:fc:e0:15:38:61:03:71:ac:c1:91:8c:
fa:b8:de:e4:22:06:6c:38:71:2b:50:ee:31:78:ea:8f:96:ff:
0a:b8:9b:0e:1a:7f:36:a0:9b:81:09:9a:b6:5b:3c:77:3f:d7:
ab:b8:14:9f:12:a7:cd:b3:c6:ca:b3:59:5b:ac:64:39:86:28:
dc:09:13:ae:59:2e:3e:ce:12:59:6e:21:8e:69:d4:05:49:ef:
c9:65:30:02:17:c3:c9:54:39:d4:8f:c0:e8:76:bd:69:79:67:
51:a6:6b:cf:39:b7:fe:96:58:e7:93:73:c4:22:4a:3d:0c:93:
74:8b:f9:73:77:c6:57:07:49:43:75:c0:4f:9d:a9:94:74:31:
38:88:eb:49:6b:d6:e0:5e:27:b2:1a:d6:2b:48:91:77:93:24:
bf:0e:e9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:58:19 2024 by rpki-client on console-ams.rpki-client.org