Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666333a3a2f34382d3438203d3e20323134343838.roa
File: 326131343a373538313a6666333a3a2f34382d3438203d3e20323134343838.roa (raw, json)
Hash identifier: NSpUuloHu6t4Df6YVzkkQsdrJ4RPQidbjWyLiUkHY0A=
Subject key identifier: 64:62:A7:F6:DB:42:19:89:FE:6B:F2:49:E4:33:63:C6:68:4A:89:A2
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 6F48C5BBD0F9BB5F4C9F3C4477DC695A8E1E861D
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666333a3a2f34382d3438203d3e20323134343838.roa
Signing time: Mon 22 Jul 2024 13:56:37 +0000
ROA not before: Mon 22 Jul 2024 13:51:37 +0000
ROA not after: Mon 21 Jul 2025 13:56:37 +0000
asID: 214488
IP address blocks: 2a14:7581:ff3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:48:c5:bb:d0:f9:bb:5f:4c:9f:3c:44:77:dc:69:5a:8e:1e:86:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 22 13:51:37 2024 GMT
Not After : Jul 21 13:56:37 2025 GMT
Subject: CN=6462A7F6DB421989FE6BF249E43363C6684A89A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:f1:d7:94:86:5d:27:b8:c8:05:bc:79:f2:
09:3b:2f:a1:5e:7d:82:f7:b1:28:eb:2d:7f:8f:d3:
a2:c4:75:0a:64:00:c5:a1:37:5e:28:7e:de:c3:f9:
67:82:81:38:99:bb:11:a4:6b:9f:4e:cb:43:91:5e:
78:79:30:1f:66:b5:80:ce:f5:81:01:4f:12:cd:d5:
94:25:79:08:e8:11:fb:f0:07:64:fa:3d:04:71:5d:
d2:fc:62:55:97:28:25:ef:60:a6:64:c5:8c:f5:d6:
d5:1f:49:91:50:af:7c:f4:fc:5b:ea:66:0f:66:a8:
d5:bb:8c:dd:e4:0b:d8:f6:bb:67:88:66:be:aa:5e:
47:42:24:9b:b8:24:92:e8:b0:b6:61:98:e0:8d:97:
f7:8c:92:3a:d5:cb:5b:62:c7:65:49:13:cb:60:03:
73:24:da:19:ef:5b:d1:ea:16:70:06:5f:cf:db:d2:
3b:7a:ac:03:62:23:40:6a:a1:ec:c3:90:46:fe:24:
39:66:af:fd:7d:1f:94:ed:b9:6b:87:fc:8e:04:6e:
36:99:61:ab:5b:32:2c:54:1e:2a:96:c9:86:64:44:
80:7d:b2:f3:c3:7c:09:07:41:82:47:31:e8:4c:a5:
ca:72:81:cd:74:18:ff:71:b1:a0:6d:95:d5:f3:07:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:62:A7:F6:DB:42:19:89:FE:6B:F2:49:E4:33:63:C6:68:4A:89:A2
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666333a3a2f34382d3438203d3e20323134343838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff3::/48
Signature Algorithm: sha256WithRSAEncryption
2c:a1:50:9a:2a:7e:09:4b:5e:d9:df:f1:16:06:f1:e4:6b:e4:
b8:37:00:dc:90:ad:40:db:df:3d:5a:5a:4a:20:0a:ef:5a:24:
40:fb:9e:51:47:2d:6f:25:c4:bf:d1:4a:59:40:16:cd:ce:43:
a1:9d:db:a7:90:63:a8:61:80:86:5f:cd:ef:d7:e3:4d:28:d6:
36:2e:31:39:0c:7f:0c:0c:27:a3:3c:e1:b8:8c:2c:2d:9c:1c:
7b:52:24:f0:14:11:36:8a:d9:8a:8b:24:70:9f:95:4e:94:11:
9d:30:50:df:aa:38:ed:ac:94:94:69:27:70:e4:11:85:73:9a:
ba:e5:d6:61:f1:24:1f:43:d0:6b:38:12:d0:7d:1a:15:48:3d:
34:90:6c:b8:14:a0:46:cc:46:f1:40:7f:91:3f:54:8b:a2:ec:
3e:cc:f2:57:df:a4:49:9e:eb:38:4b:ae:ae:c1:9e:0e:75:2d:
ec:61:a9:c9:9c:23:36:77:f8:32:17:af:49:3c:bd:bf:5b:44:
9d:45:2e:8f:3f:2f:e7:8f:32:7e:17:38:5d:89:6d:1c:0a:60:
f9:fe:1e:5d:d0:1a:a5:63:95:59:67:8b:b7:aa:84:67:dd:17:
97:c9:24:79:71:03:bb:d1:99:56:84:ba:8e:7b:c5:0a:d7:90:
ce:fb:13:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:56:51 2024 by rpki-client on console-ams.rpki-client.org