Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6664303a3a2f34342d3438203d3e203533363637.roa
File: 326131343a373538313a6664303a3a2f34342d3438203d3e203533363637.roa (raw, json)
Hash identifier: jxf7HNdn9fAwaayAiphgjG3DRdqddHo5foaaxBofw/s=
Subject key identifier: 5D:12:EB:3F:0C:FD:B2:B8:EC:F1:5C:26:76:D2:52:2F:D1:9E:D8:94
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 01E2FDDC6D6BA7AB87E6C82FC8A0186A4B67B470
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6664303a3a2f34342d3438203d3e203533363637.roa
Signing time: Wed 18 Sep 2024 10:15:23 +0000
ROA not before: Wed 18 Sep 2024 10:10:23 +0000
ROA not after: Wed 17 Sep 2025 10:15:23 +0000
asID: 53667
IP address blocks: 2a14:7581:fd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e2:fd:dc:6d:6b:a7:ab:87:e6:c8:2f:c8:a0:18:6a:4b:67:b4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 18 10:10:23 2024 GMT
Not After : Sep 17 10:15:23 2025 GMT
Subject: CN=5D12EB3F0CFDB2B8ECF15C2676D2522FD19ED894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:c4:f0:fd:7a:74:13:67:ad:ba:fd:92:cc:
45:52:7c:be:42:62:56:d2:67:9f:54:03:25:14:6b:
76:0f:60:78:d4:4e:76:d7:92:4e:87:6b:2a:eb:be:
ec:70:ff:57:1d:f1:e7:6c:e0:7b:2b:48:0d:9c:24:
88:fd:55:97:b7:fc:18:08:7f:73:da:a0:8e:09:8e:
ea:ba:e5:50:b4:45:2c:15:6f:99:c8:72:4f:da:2a:
a5:ab:af:48:2e:37:c1:3f:3c:9f:74:38:a2:8e:bb:
84:f8:2f:43:be:56:c0:f5:e3:c6:05:25:bf:c3:33:
aa:e8:b2:64:a4:63:c4:d3:26:2b:1e:75:20:51:49:
44:2c:96:58:97:cb:5d:a6:96:13:01:f7:cd:02:d8:
38:90:65:6a:74:e5:5d:7f:67:9e:f1:d9:ed:21:ca:
71:02:c5:24:8e:c0:0e:3e:2f:ab:fe:0d:6a:05:99:
e8:00:e0:d0:de:c5:0a:17:88:42:41:f1:02:a3:9a:
a8:7d:35:dc:d5:98:d8:0a:1a:88:3f:59:bb:01:99:
c4:0a:b7:ac:e8:a0:3e:6f:88:15:56:ad:55:f1:46:
3e:cb:90:e6:19:e1:eb:d0:63:2e:b4:53:c6:de:7e:
73:fa:2b:80:dc:e7:11:43:d1:6a:23:ee:00:53:93:
de:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:12:EB:3F:0C:FD:B2:B8:EC:F1:5C:26:76:D2:52:2F:D1:9E:D8:94
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6664303a3a2f34342d3438203d3e203533363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fd0::/44
Signature Algorithm: sha256WithRSAEncryption
80:f0:37:07:1d:31:33:aa:52:9d:a4:2d:f6:d9:d2:e6:c0:9f:
6c:ef:5a:5e:86:7c:e0:2d:81:b4:15:dd:ae:37:e6:31:1e:44:
66:a6:f3:19:53:dd:a2:ee:14:6b:f8:cc:2d:ab:b6:f3:ab:a3:
a6:ce:46:a1:ba:47:48:ae:2c:d9:fd:40:97:a0:c2:ef:39:e1:
d6:12:5d:db:40:f9:93:30:12:9a:d5:3e:21:e4:2a:87:12:af:
23:99:12:8d:37:5f:98:22:ff:f9:43:d0:29:05:20:9b:e4:1e:
f5:30:d5:11:00:23:4d:02:d0:9e:4c:a6:61:36:6e:62:42:09:
99:68:ea:87:a4:6f:c0:3e:83:8b:3f:45:53:ef:2c:4a:22:8d:
b2:53:f6:78:52:98:a1:84:d1:7f:84:16:41:93:d3:78:c4:db:
b3:ce:ae:7e:ec:68:4e:70:83:e9:8e:c9:fb:f2:3e:8f:81:22:
7e:2b:ab:14:cc:c0:69:f5:76:d8:62:2b:e7:fd:22:6f:fa:b1:
82:57:fd:4a:88:b1:8d:f9:66:19:1e:96:3d:d2:1e:c4:d8:2c:
85:4c:7f:e0:a2:6d:86:9c:a5:34:4a:42:bc:d9:df:b9:fe:2b:
fe:05:a7:2f:3a:12:f3:4f:71:d0:50:b2:39:65:53:b8:be:a5:
5d:ef:87:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUAeL93G1rp6uH5sgvyKAYaktntHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDA5MTgxMDEwMjNaFw0yNTA5MTcxMDE1MjNaMDMxMTAvBgNV
BAMTKDVEMTJFQjNGMENGREIyQjhFQ0YxNUMyNjc2RDI1MjJGRDE5RUQ4OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDcTw/Xp0E2etuv2SzEVSfL5C
YlbSZ59UAyUUa3YPYHjUTnbXkk6Hayrrvuxw/1cd8eds4HsrSA2cJIj9VZe3/BgI
f3PaoI4Jjuq65VC0RSwVb5nIck/aKqWrr0guN8E/PJ90OKKOu4T4L0O+VsD148YF
Jb/DM6rosmSkY8TTJisedSBRSUQslliXy12mlhMB980C2DiQZWp05V1/Z57x2e0h
ynECxSSOwA4+L6v+DWoFmegA4NDexQoXiEJB8QKjmqh9NdzVmNgKGog/WbsBmcQK
t6zooD5viBVWrVXxRj7LkOYZ4evQYy60U8befnP6K4Dc5xFD0Woj7gBTk96xAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUXRLrPwz9srjs8VwmdtJSL9Ge2JQwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMx
M2E2NjY0MzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNTMzMzYzNjM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEKhR1gQ/QMA0GCSqGSIb3DQEBCwUAA4IBAQCA8DcHHTEzqlKdpC322dLm
wJ9s71pehnzgLYG0Fd2uN+YxHkRmpvMZU92i7hRr+Mwtq7bzq6OmzkahukdIrizZ
/UCXoMLvOeHWEl3bQPmTMBKa1T4h5CqHEq8jmRKNN1+YIv/5Q9ApBSCb5B71MNUR
ACNNAtCeTKZhNm5iQgmZaOqHpG/APoOLP0VT7yxKIo2yU/Z4UpihhNF/hBZBk9N4
xNuzzq5+7GhOcIPpjsn78j6PgSJ+K6sUzMBp9XbYYivn/SJv+rGCV/1KiLGN+WYZ
HpY90h7E2CyFTH/gom2GnKU0SkK82d+5/iv+BacvOhLzT3HQULI5ZVO4vqVd74eZ
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org