Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6635303a3a2f34342d3438203d3e20323037333338.roa
File: 326131343a373538313a6635303a3a2f34342d3438203d3e20323037333338.roa (raw, json)
Hash identifier: mriSnKevy685K6+P9ND0mAOjYaZ+iTHQZELOtM7YlQw=
Subject key identifier: 5A:73:58:9D:85:CE:56:50:2C:3F:13:C7:B9:21:DC:AD:9C:AD:B8:46
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 494157DA28FC3726B962BC424CEE741D70367DB0
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6635303a3a2f34342d3438203d3e20323037333338.roa
Signing time: Thu 11 Jul 2024 09:58:10 +0000
ROA not before: Thu 11 Jul 2024 09:53:10 +0000
ROA not after: Thu 10 Jul 2025 09:58:10 +0000
asID: 207338
IP address blocks: 2a14:7581:f50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:41:57:da:28:fc:37:26:b9:62:bc:42:4c:ee:74:1d:70:36:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 11 09:53:10 2024 GMT
Not After : Jul 10 09:58:10 2025 GMT
Subject: CN=5A73589D85CE56502C3F13C7B921DCAD9CADB846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:5b:2a:52:27:ea:18:7c:bd:3a:dd:05:16:
12:ba:dd:a8:bd:bf:1d:0f:87:a6:68:e1:34:cf:29:
25:36:c6:b1:37:cf:8a:c9:36:a9:1e:2a:ac:04:7e:
48:f9:47:36:ab:4e:19:d3:49:8c:5b:6e:01:f9:62:
c1:2c:00:13:a0:bc:dc:4a:ef:a0:ea:70:e0:be:b8:
b4:01:3c:70:b0:35:41:4f:4e:74:d9:03:2f:dc:9c:
18:55:3a:3d:95:73:a7:27:d7:ad:2d:8e:7e:e5:24:
6b:44:36:c8:a2:28:71:07:1d:b5:ed:dc:c5:2a:3f:
b1:1b:21:1c:fc:cc:8f:7e:f2:be:9c:db:1c:ed:a2:
df:89:50:37:a2:4e:df:7a:ab:1e:db:35:47:c3:61:
48:97:f5:b3:e3:b9:47:71:80:e4:8c:9a:21:52:03:
02:89:85:56:0b:07:22:cd:0f:57:98:de:9a:b5:f1:
ba:f8:55:f5:e4:f5:28:91:08:e2:4b:79:56:f9:e3:
f4:32:87:58:81:fa:bf:0a:72:d6:29:72:9f:0e:fa:
45:b6:bb:80:66:5c:04:45:79:55:22:11:50:b0:44:
7b:95:d2:77:b1:50:d4:ad:30:60:8c:37:91:42:a3:
6a:75:3f:11:fe:9a:9f:02:9b:69:71:83:be:ef:ce:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:58:9D:85:CE:56:50:2C:3F:13:C7:B9:21:DC:AD:9C:AD:B8:46
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6635303a3a2f34342d3438203d3e20323037333338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:f50::/44
Signature Algorithm: sha256WithRSAEncryption
00:15:23:e4:34:10:ec:43:eb:47:9f:b6:10:98:eb:8f:23:cc:
e0:2f:09:98:89:73:91:bd:40:1d:5d:4b:ca:5d:70:4a:6b:e3:
4f:95:09:eb:a1:ba:9e:15:78:87:09:76:f7:70:31:a1:43:0c:
ac:19:2b:80:6a:8a:32:e6:8d:aa:1f:7f:a6:62:89:fa:40:1f:
ba:75:2a:e2:79:7e:4a:94:41:4b:cb:53:41:65:49:e8:23:07:
04:9a:86:06:97:b9:3a:fe:53:b4:f0:3a:72:e4:b8:30:b2:d2:
ff:b6:9f:fa:ac:49:c3:bf:76:9a:0e:a9:c4:5a:48:56:48:d7:
86:65:03:55:99:1b:ec:94:aa:f3:34:d2:f9:55:c3:94:ab:8e:
60:8f:62:3a:20:0e:3e:7b:a5:7c:7a:80:b2:17:e1:14:d7:1e:
c1:e6:58:43:2b:8b:38:a3:48:98:fa:e2:c2:b8:6a:af:ab:da:
1d:f1:7a:63:e1:92:82:68:d4:34:e4:19:b3:91:ca:3d:a8:7e:
af:e1:ce:ef:ac:14:51:ce:6a:f5:b6:05:c0:91:96:ad:bf:84:
e5:c9:88:3e:fe:5c:04:c9:32:5d:6e:1b:86:58:12:f4:30:98:
20:ff:2b:b2:05:b4:28:74:22:92:27:bb:6a:f1:dc:9c:8b:63:
ae:ea:25:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org