Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396631303a3a2f34342d3438203d3e203533363637.roa
File: 326131343a373538313a396631303a3a2f34342d3438203d3e203533363637.roa (raw, json)
Hash identifier: k/X2TVgWxHleJ0J5Muzgrrisnb3S4Ec1pDLP5UxHXnQ=
Subject key identifier: BC:5B:BA:D7:D1:D7:D2:72:62:CC:8E:CB:B2:8A:1E:24:55:E3:9A:38
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 331065019DBAAB13AB6D508412AD099A8821ABE2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396631303a3a2f34342d3438203d3e203533363637.roa
Signing time: Wed 25 Sep 2024 03:39:03 +0000
ROA not before: Wed 25 Sep 2024 03:34:03 +0000
ROA not after: Wed 24 Sep 2025 03:39:03 +0000
asID: 53667
IP address blocks: 2a14:7581:9f10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:10:65:01:9d:ba:ab:13:ab:6d:50:84:12:ad:09:9a:88:21:ab:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 25 03:34:03 2024 GMT
Not After : Sep 24 03:39:03 2025 GMT
Subject: CN=BC5BBAD7D1D7D27262CC8ECBB28A1E2455E39A38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:04:df:5f:38:68:a3:02:39:ec:29:0f:d6:
97:ec:68:b7:12:76:50:fe:4d:1e:cb:f6:a0:3d:94:
a4:79:4b:dc:6d:04:00:1c:5d:98:08:05:cf:00:cc:
06:55:70:df:8b:03:66:83:4d:95:7b:cc:ec:2d:3e:
69:77:a5:e3:93:84:09:4b:26:5e:44:f7:2c:12:92:
78:0f:0d:88:7b:6d:b6:76:e8:ce:50:ab:48:e5:df:
7d:48:be:50:5c:ed:5f:79:6a:e4:f5:d2:f2:3e:d2:
ac:a5:42:c2:39:9a:ad:4e:63:02:1b:5a:3e:15:a9:
11:4e:18:47:5b:97:33:be:50:3c:4e:90:46:30:8e:
6c:61:0c:f2:b0:52:8c:6f:0a:72:03:24:89:b5:90:
77:bb:36:fa:a7:da:5a:1e:65:9a:f4:74:7c:f9:6c:
04:35:65:53:df:b5:87:2d:6c:ff:b6:7a:e4:43:81:
42:ca:0d:19:cf:89:ba:0f:80:25:a1:ca:2a:15:66:
08:f2:84:1b:32:b2:65:a0:67:5a:e0:ce:09:77:dd:
45:4f:64:36:10:3e:ff:cb:20:d4:72:10:94:13:6f:
4c:44:9b:67:10:9e:12:70:16:51:ba:f8:20:a2:69:
ee:93:5a:e2:90:f0:fe:e4:5b:76:da:3c:22:d1:c8:
32:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:BA:D7:D1:D7:D2:72:62:CC:8E:CB:B2:8A:1E:24:55:E3:9A:38
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a396631303a3a2f34342d3438203d3e203533363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:9f10::/44
Signature Algorithm: sha256WithRSAEncryption
8a:fb:6f:87:2e:16:05:25:8e:e0:bf:f8:6e:1c:76:34:aa:11:
2f:17:22:5f:0f:89:a1:b8:97:12:c0:53:03:c8:03:50:39:4d:
ad:fe:6a:79:e0:74:db:8c:42:50:05:ce:32:23:bd:3d:31:0e:
49:4b:a8:2c:d3:9b:10:ca:2e:60:aa:0b:5a:fc:5c:7d:1e:b0:
ea:35:f8:a9:19:bf:0b:25:80:eb:4b:6c:98:b6:77:d9:0f:5a:
11:1f:89:4d:31:7d:0c:a9:4b:59:03:fc:43:93:ca:82:b9:d3:
55:7d:d5:ec:2c:91:dd:56:fe:61:1a:ca:54:3c:63:3e:9f:cf:
fc:2c:26:09:50:3a:84:31:47:f7:03:e6:dd:ab:2e:c1:ed:f5:
41:13:57:0b:ba:ed:0e:c8:a7:ca:8c:f2:68:25:81:60:6d:dd:
83:50:05:89:c8:fe:9b:aa:d3:29:47:58:eb:c6:92:f2:60:87:
47:56:12:a2:dc:13:7f:f1:57:72:ff:6e:9f:8c:78:c0:cf:17:
ee:1c:1e:fa:cd:ca:2d:b5:3b:14:cd:3d:e8:4e:49:71:08:ab:
4d:f0:27:1f:a8:d9:8f:89:a5:cf:75:c9:48:63:ef:af:a8:0f:
22:f4:26:aa:c5:3f:6d:2f:4f:68:59:87:7b:62:48:ff:2f:38:
a3:6c:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org