Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a3a2f34302d3438203d3e20323136303532.roa
File: 326131343a373538313a3a2f34302d3438203d3e20323136303532.roa (raw, json)
Hash identifier: /b72TYUlH2cDRkhnZJWsUVD+RfLMvL6DrSznpvYhffA=
Subject key identifier: 87:23:C2:B1:A8:9C:94:88:7C:B5:2C:B2:9B:1D:BC:1E:B7:69:10:46
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 3B74284B79EB2430D08FFD0737C8D392EE0C14E0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a3a2f34302d3438203d3e20323136303532.roa
Signing time: Fri 29 Mar 2024 14:41:11 +0000
ROA not before: Fri 29 Mar 2024 14:36:11 +0000
ROA not after: Fri 28 Mar 2025 14:41:11 +0000
asID: 216052
IP address blocks: 2a14:7581::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:74:28:4b:79:eb:24:30:d0:8f:fd:07:37:c8:d3:92:ee:0c:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Mar 29 14:36:11 2024 GMT
Not After : Mar 28 14:41:11 2025 GMT
Subject: CN=8723C2B1A89C94887CB52CB29B1DBC1EB7691046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:e5:bd:29:08:c8:b4:2a:92:6b:6d:55:bc:
c5:f2:6b:c8:bb:21:c9:ca:cc:c3:6f:43:b7:96:54:
19:da:3c:ca:0d:43:a0:e0:1f:a6:33:d8:87:21:7a:
47:95:e8:f5:39:54:23:a4:1c:a4:59:5d:bd:85:af:
96:03:f6:b5:6e:94:2c:5c:ce:3d:37:eb:52:cd:0d:
23:c9:ad:c8:82:45:0b:3a:f7:56:bb:30:bd:32:3d:
49:3d:18:76:cc:d0:fa:0c:8b:2d:40:cd:05:67:f4:
3d:e1:53:6b:60:04:77:e9:9c:d8:2c:bf:61:55:7b:
02:cf:65:36:c0:05:67:9e:e3:ba:af:3b:33:d4:c8:
44:ac:b5:90:28:44:c0:9b:2f:9d:27:7b:44:e9:49:
ea:0a:f3:bd:0c:f9:2d:65:a0:f9:d7:ed:cc:8f:f1:
70:18:b2:41:d1:d0:53:29:05:eb:77:44:90:b3:b8:
fb:58:52:31:16:fd:af:d1:7f:cd:e6:9a:34:f4:de:
a9:f2:21:b2:fa:68:cf:96:f7:72:b8:51:87:5d:c9:
6a:bc:77:7c:15:c7:ca:ba:01:6c:dc:1e:ac:b9:57:
cc:5b:89:71:ad:0e:6a:68:5f:d9:12:98:0f:4e:e7:
29:e3:9c:e5:8f:6e:79:08:68:79:20:bc:27:08:f8:
cb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:23:C2:B1:A8:9C:94:88:7C:B5:2C:B2:9B:1D:BC:1E:B7:69:10:46
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a3a2f34302d3438203d3e20323136303532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581::/40
Signature Algorithm: sha256WithRSAEncryption
07:9b:24:73:9d:e0:03:53:e4:30:98:04:3f:5c:3e:38:16:90:
72:ca:1d:b2:e7:6e:82:e1:92:70:11:f6:b6:85:92:0d:11:d9:
e3:41:1b:5e:0b:15:2c:96:f6:d2:d1:ef:9c:84:32:21:00:c9:
8a:e5:1f:a0:fe:df:af:cf:f1:16:2c:5a:1f:b0:25:28:0f:0c:
74:f1:e9:3b:27:33:e2:39:74:fc:2d:51:43:3b:52:3b:23:12:
6e:89:40:d2:a5:ef:3d:89:fe:34:88:63:a6:73:ea:32:46:a8:
75:95:41:bb:a8:e9:11:71:78:46:17:ec:00:2f:29:5d:50:d6:
30:e0:a6:cb:e3:ef:3d:37:32:e0:d7:3f:24:b1:2f:d5:7c:ab:
30:2e:f2:a6:44:d3:8b:34:4b:2e:c6:49:84:8f:87:fb:3c:17:
c4:28:31:40:44:24:a4:e9:7b:9e:f7:d9:44:58:c7:3a:39:14:
31:ef:7b:e9:d7:43:b5:32:6c:7d:2f:18:ad:2d:3e:c1:5c:1a:
98:fb:a4:43:e7:06:4e:9a:33:d1:04:a9:86:1c:b8:19:08:0d:
a7:db:d3:bf:12:1f:7f:56:5f:e5:cf:06:dc:d3:3e:d5:0a:e2:
78:69:37:2a:38:ee:83:6e:e9:73:fd:3d:60:35:8b:82:67:ba:
61:bf:d9:e9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUO3QoS3nrJDDQj/0HN8jTku4MFOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDAzMjkxNDM2MTFaFw0yNTAzMjgxNDQxMTFaMDMxMTAvBgNV
BAMTKDg3MjNDMkIxQTg5Qzk0ODg3Q0I1MkNCMjlCMURCQzFFQjc2OTEwNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2OW9KQjItCqSa21VvMXya8i7
IcnKzMNvQ7eWVBnaPMoNQ6DgH6Yz2IchekeV6PU5VCOkHKRZXb2Fr5YD9rVulCxc
zj0361LNDSPJrciCRQs691a7ML0yPUk9GHbM0PoMiy1AzQVn9D3hU2tgBHfpnNgs
v2FVewLPZTbABWee47qvOzPUyESstZAoRMCbL50ne0TpSeoK870M+S1loPnX7cyP
8XAYskHR0FMpBet3RJCzuPtYUjEW/a/Rf83mmjT03qnyIbL6aM+W93K4UYddyWq8
d3wVx8q6AWzcHqy5V8xbiXGtDmpoX9kSmA9O5ynjnOWPbnkIaHkgvCcI+MvbAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUhyPCsaiclIh8tSyymx28HrdpEEYwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMx
M2EzYTJmMzQzMDJkMzQzODIwM2QzZTIwMzIzMTM2MzAzNTMyLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYA
KhR1gQAwDQYJKoZIhvcNAQELBQADggEBAAebJHOd4ANT5DCYBD9cPjgWkHLKHbLn
boLhknAR9raFkg0R2eNBG14LFSyW9tLR75yEMiEAyYrlH6D+36/P8RYsWh+wJSgP
DHTx6TsnM+I5dPwtUUM7UjsjEm6JQNKl7z2J/jSIY6Zz6jJGqHWVQbuo6RFxeEYX
7AAvKV1Q1jDgpsvj7z03MuDXPySxL9V8qzAu8qZE04s0Sy7GSYSPh/s8F8QoMUBE
JKTpe5732URYxzo5FDHve+nXQ7UybH0vGK0tPsFcGpj7pEPnBk6aM9EEqYYcuBkI
Dafb078SH39WX+XPBtzTPtUK4nhpNyo47oNu6XP9PWA1i4JnumG/2ek=
-----END CERTIFICATE-----
Generated at Fri Jun 7 03:29:00 2024 by rpki-client on console-fra.rpki-client.org