Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666393a3a2f34382d3438203d3e20323134383235.roa
File: 326131343a373538313a6666393a3a2f34382d3438203d3e20323134383235.roa (raw, json)
Hash identifier: 8h+u1qgG3N+1Igz47RM6MlRbk6pZqTRhB6+PH8cZj1M=
Subject key identifier: 91:22:26:5C:B9:FC:28:E4:67:26:DF:A9:61:CD:A3:29:FC:4F:D4:D9
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 52937027C54829FBCF0175B401B490C568184E03
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666393a3a2f34382d3438203d3e20323134383235.roa
Signing time: Tue 28 May 2024 00:03:16 +0000
ROA not before: Mon 27 May 2024 23:58:16 +0000
ROA not after: Tue 27 May 2025 00:03:16 +0000
asID: 214825
IP address blocks: 2a14:7581:ff9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:93:70:27:c5:48:29:fb:cf:01:75:b4:01:b4:90:c5:68:18:4e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: May 27 23:58:16 2024 GMT
Not After : May 27 00:03:16 2025 GMT
Subject: CN=9122265CB9FC28E46726DFA961CDA329FC4FD4D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:d4:64:ae:8b:2b:e2:2d:a3:e9:d0:80:f8:
e6:f3:5e:4a:b6:53:8b:7b:4d:53:7a:35:8d:2b:b0:
ff:5a:d2:8c:d4:48:8d:ad:e5:6d:cb:e2:04:94:08:
7e:5a:4c:21:13:d2:b4:f5:69:52:33:e8:6b:e7:c7:
0b:ef:d8:3b:1b:ab:fd:9f:07:11:1c:cc:e2:ab:1b:
68:1a:05:4b:c5:c6:e7:b1:5d:51:50:3b:68:d5:3d:
32:81:5c:4e:dd:de:d8:dd:92:55:ff:d4:e2:79:ce:
0e:5c:7d:e4:91:49:83:4b:8c:7a:fd:84:6a:59:ed:
2f:19:ee:09:28:b9:33:f8:3c:0f:b7:77:cf:46:60:
94:4d:9c:51:55:b2:4b:d2:90:55:42:63:17:5f:64:
d4:a4:0a:21:7b:b4:95:9f:21:06:14:32:6f:dc:83:
f1:2c:23:94:7c:0c:a8:67:0f:35:f4:95:fb:31:26:
4d:19:e8:68:22:09:2a:6d:f8:1c:0c:a7:01:65:32:
b5:49:fa:93:06:87:d5:3b:02:fe:d1:12:a6:d6:03:
84:62:bf:7c:b4:85:44:4d:0d:40:f9:e6:00:76:f0:
c3:f4:f0:e3:cb:34:47:33:2b:5c:74:e4:2c:4c:95:
34:a9:8c:5c:ed:0c:a1:22:bb:7a:66:70:4a:26:1d:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:22:26:5C:B9:FC:28:E4:67:26:DF:A9:61:CD:A3:29:FC:4F:D4:D9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666393a3a2f34382d3438203d3e20323134383235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ff9::/48
Signature Algorithm: sha256WithRSAEncryption
92:ac:d9:76:c6:b1:c7:25:5a:75:4a:9c:d7:f7:b1:85:26:e4:
b7:1e:4f:4a:ae:45:30:35:1a:d2:5b:9a:7a:3d:0b:c1:a9:16:
f1:81:a0:b9:7a:d8:d4:48:52:27:67:f9:92:97:ba:64:a8:db:
70:ca:1f:61:0a:47:5d:47:af:10:8f:cc:67:22:29:39:ba:e1:
aa:5c:26:91:87:e8:73:8d:1b:5d:23:9b:88:90:84:95:28:a0:
35:fc:69:c0:4a:88:e4:f0:ec:fe:e0:dd:22:0d:5b:0c:b0:db:
fb:01:09:ef:20:fe:cb:60:e5:c1:c2:e6:82:99:eb:45:29:ac:
f5:6e:79:9e:f7:d1:9d:ec:65:8c:16:a5:fa:a9:1f:22:9b:c7:
d9:33:a2:33:01:dd:65:bc:9d:ba:71:f4:9a:a8:76:86:52:6c:
39:6e:5b:d0:55:90:81:fb:3b:8d:fb:4d:2c:ec:4e:08:31:ed:
03:7e:00:30:27:03:12:c3:3c:b7:46:3d:7d:e9:ed:e5:c8:fc:
e0:7a:87:08:00:b9:f1:16:65:4b:6e:a2:30:c8:da:15:63:4c:
4a:93:44:28:a9:76:bb:a6:29:e4:24:bf:c4:d0:76:16:a6:34:
b9:d5:56:ed:b9:95:1c:da:1d:84:65:1d:70:40:5b:85:25:ff:
50:3a:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org