Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6662303a3a2f34342d3438203d3e203533363637.roa
File: 326131343a373538313a6662303a3a2f34342d3438203d3e203533363637.roa (raw, json)
Hash identifier: oVsdPbk4fT+Pi8RLq/PchOHgfOTBZ1+xuOjrzhLLcu0=
Subject key identifier: 84:B2:2F:A1:A9:A1:30:84:22:3A:18:EA:9D:66:C5:00:B9:D6:0F:79
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 53F6D0A2410CE3E41FCFC445FF18A9D483D462C2
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6662303a3a2f34342d3438203d3e203533363637.roa
Signing time: Tue 03 Sep 2024 17:19:49 +0000
ROA not before: Tue 03 Sep 2024 17:14:49 +0000
ROA not after: Tue 02 Sep 2025 17:19:49 +0000
asID: 53667
IP address blocks: 2a14:7581:fb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f6:d0:a2:41:0c:e3:e4:1f:cf:c4:45:ff:18:a9:d4:83:d4:62:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 3 17:14:49 2024 GMT
Not After : Sep 2 17:19:49 2025 GMT
Subject: CN=84B22FA1A9A13084223A18EA9D66C500B9D60F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:18:49:76:2a:4e:ba:d8:47:60:82:6a:e2:
a1:f2:a8:44:10:c6:98:01:55:ae:61:9f:fd:e4:ae:
89:0d:93:4c:9d:83:2a:91:7a:c7:c2:46:cd:a2:c8:
c9:9c:11:31:b5:6e:44:8c:69:2e:13:2b:c7:69:13:
66:09:25:59:93:47:e9:20:20:2f:7a:c5:10:09:f0:
2b:83:b4:18:f2:e0:a3:c4:09:b5:71:98:97:7e:bf:
74:6e:f4:95:32:bd:04:16:5e:04:ec:85:6c:bd:76:
ea:46:32:f8:03:e9:d7:62:b1:07:e1:ab:2a:ab:81:
25:07:43:c2:e4:a0:b1:5d:c0:e5:81:48:ff:f5:9a:
61:88:77:86:e4:48:cf:73:1a:14:f8:00:57:5d:1f:
ba:70:36:7f:6d:4a:81:94:bd:7c:18:19:b0:5c:3b:
eb:12:67:db:bb:28:14:67:c7:32:f1:68:24:4a:cd:
9c:d4:c3:3d:85:be:e1:fa:e5:79:32:84:15:d6:b8:
5d:10:c5:31:73:da:47:67:2f:18:a2:0c:fe:ba:29:
5a:07:6e:2a:07:4e:35:4c:ac:9e:e4:07:c6:dd:cc:
65:f3:7e:ae:fd:52:6f:6d:98:8f:5a:f1:d7:fa:29:
be:96:f7:70:64:f5:08:cb:03:0f:0b:ff:d1:21:51:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B2:2F:A1:A9:A1:30:84:22:3A:18:EA:9D:66:C5:00:B9:D6:0F:79
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6662303a3a2f34342d3438203d3e203533363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fb0::/44
Signature Algorithm: sha256WithRSAEncryption
90:23:3f:db:21:22:e1:64:75:9a:ae:be:c5:56:01:99:f6:8c:
58:c3:2b:c4:2e:93:08:44:ef:4b:05:6e:2a:a8:ad:72:32:ed:
f7:61:3d:c7:1c:08:6f:8e:eb:8d:7c:34:52:4c:b0:ac:aa:63:
b3:27:c7:36:c6:63:c7:2c:d8:15:38:11:6d:f3:a8:69:84:cc:
06:5d:54:23:47:99:0c:d8:fd:9d:85:97:7d:e5:59:ca:e0:20:
e4:fe:c4:89:11:d8:fe:5d:a3:fa:fe:a7:9e:dc:1c:57:92:94:
f3:ad:f2:31:08:52:7d:48:0a:46:d2:7c:30:2c:cc:21:2b:64:
09:78:d5:e9:98:ce:78:8a:49:9a:09:11:ba:96:10:65:2c:ee:
09:52:de:a4:5a:00:05:4a:9b:fb:e3:31:ab:fa:77:b3:ae:74:
1c:0a:4f:98:73:96:11:a6:08:b0:bc:c7:56:96:04:8d:ed:72:
6e:73:36:36:ef:e9:4b:2c:27:ab:a2:58:c3:cd:7d:2a:c0:9d:
1c:3a:64:23:f7:9d:52:80:99:75:4b:1d:e2:bd:5d:41:fa:f1:
6f:2e:76:fb:83:a2:94:90:e8:69:98:f5:15:6c:a7:64:93:1f:
90:fb:aa:89:bc:13:76:ef:c9:2a:fb:2b:41:06:9f:4c:eb:84:
f8:7f:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org