Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666633a3a2f34382d3438203d3e20323134373334.roa
File: 326131343a373538313a6666633a3a2f34382d3438203d3e20323134373334.roa (raw, json)
Hash identifier: 4gCvoZXLHGSCimwRYtDqD7yGaBU+TW+PeredNSkZk4I=
Subject key identifier: 8F:DC:48:83:A2:CC:28:C7:5F:49:74:98:85:3F:F8:55:35:C4:0E:62
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1A07F5DF1EBB358173C2D4EEAAB3F1A9B69E033C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666633a3a2f34382d3438203d3e20323134373334.roa
Signing time: Fri 14 Jun 2024 14:14:52 +0000
ROA not before: Fri 14 Jun 2024 14:09:52 +0000
ROA not after: Fri 13 Jun 2025 14:14:52 +0000
asID: 214734
IP address blocks: 2a14:7581:ffc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:07:f5:df:1e:bb:35:81:73:c2:d4:ee:aa:b3:f1:a9:b6:9e:03:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 14 14:09:52 2024 GMT
Not After : Jun 13 14:14:52 2025 GMT
Subject: CN=8FDC4883A2CC28C75F497498853FF85535C40E62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:f2:83:06:d4:58:c9:a7:c6:6e:a6:c7:a7:
05:50:d8:66:a4:45:25:0f:a0:d3:dc:5e:b2:25:25:
a3:aa:7d:79:f8:49:8b:ee:7f:fb:4d:5c:54:fd:31:
3c:ef:f3:37:e9:a2:c9:6f:92:5b:75:bd:46:27:f3:
6a:4f:c8:98:7e:2a:95:98:01:c7:18:cd:98:17:65:
d2:d2:ed:9e:8e:26:02:7d:12:18:42:c8:d4:55:77:
b3:33:8e:5d:9b:75:c7:33:be:5b:f7:88:ad:e5:94:
2a:49:f8:d0:10:cb:55:63:c9:c4:96:1d:90:a3:38:
fd:0b:ea:76:43:8f:85:e4:e2:13:d8:2e:9a:7e:8a:
2c:af:9a:30:a3:86:eb:67:c0:2b:12:42:c9:c1:3e:
a5:2a:ff:a5:0f:96:a2:d0:3b:04:65:5a:88:34:30:
11:35:37:17:fd:3f:ee:ae:f5:93:9e:92:f7:4c:ba:
52:fe:13:cc:03:93:e4:d9:2f:77:17:22:5a:7f:64:
c9:82:2b:41:67:05:14:b5:85:55:c2:39:9b:27:4b:
99:48:ea:55:61:5e:5b:f2:86:1f:37:2c:a6:16:b2:
d1:25:63:18:60:39:db:99:19:bf:e1:67:b1:33:99:
a8:8a:36:cf:07:c7:35:85:83:fc:19:c1:fa:34:ce:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DC:48:83:A2:CC:28:C7:5F:49:74:98:85:3F:F8:55:35:C4:0E:62
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666633a3a2f34382d3438203d3e20323134373334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:ffc::/48
Signature Algorithm: sha256WithRSAEncryption
4c:19:d5:b5:60:c8:26:cb:35:0c:80:9c:d3:fc:96:aa:dd:9a:
47:ef:a0:67:a9:fc:45:f6:a7:2b:b3:54:fc:4c:9c:68:4f:62:
36:14:fe:be:be:5a:9e:c7:21:dd:8b:55:46:4a:2e:8e:6a:e2:
c3:87:4c:90:f4:97:3f:6b:ce:dd:71:07:22:00:a7:9b:fb:66:
63:40:39:5e:ae:8b:09:08:e2:44:0f:a3:a0:fa:9f:35:37:03:
ba:bb:e8:e0:74:ac:c6:67:50:08:e6:98:b8:d4:be:e4:c4:45:
4f:cf:b2:9d:5b:fb:e5:25:ba:c0:67:2a:30:bb:4d:7f:0d:3a:
d0:d9:01:04:72:a3:1e:c6:76:f3:2b:78:7a:b4:47:ef:85:4d:
35:b7:5b:91:d4:89:8f:0b:20:1e:2e:21:0e:a8:07:e5:f1:7b:
a6:08:12:a2:c5:fc:3c:85:49:f3:6f:cf:fb:c3:1c:25:17:38:
3a:53:b7:26:a2:f3:99:67:94:ea:b1:31:c7:e0:db:f3:0e:5b:
f8:4e:e7:0b:18:6a:c0:71:41:bd:41:d4:ae:55:60:ce:b0:ed:
dd:1f:35:ab:c2:6b:16:fb:17:67:99:cd:e7:c6:3b:61:fe:64:
7b:56:4a:2d:67:5b:c9:2a:ea:b4:6f:4c:00:44:90:8f:67:f9:
05:36:40:fc
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUGgf13x67NYFzwtTuqrPxqbaeAzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDA2MTQxNDA5NTJaFw0yNTA2MTMxNDE0NTJaMDMxMTAvBgNV
BAMTKDhGREM0ODgzQTJDQzI4Qzc1RjQ5NzQ5ODg1M0ZGODU1MzVDNDBFNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7fKDBtRYyafGbqbHpwVQ2Gak
RSUPoNPcXrIlJaOqfXn4SYvuf/tNXFT9MTzv8zfposlvklt1vUYn82pPyJh+KpWY
AccYzZgXZdLS7Z6OJgJ9EhhCyNRVd7Mzjl2bdcczvlv3iK3llCpJ+NAQy1VjycSW
HZCjOP0L6nZDj4Xk4hPYLpp+iiyvmjCjhutnwCsSQsnBPqUq/6UPlqLQOwRlWog0
MBE1Nxf9P+6u9ZOekvdMulL+E8wDk+TZL3cXIlp/ZMmCK0FnBRS1hVXCOZsnS5lI
6lVhXlvyhh83LKYWstElYxhgOduZGb/hZ7EzmaiKNs8HxzWFg/wZwfo0zhIRAgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUj9xIg6LMKMdfSXSYhT/4VTXEDmIwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODMx
M2E2NjY2NjMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMxMzQzNzMzMzQucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFHWBD/wwDQYJKoZIhvcNAQELBQADggEBAEwZ1bVgyCbLNQyAnNP8
lqrdmkfvoGep/EX2pyuzVPxMnGhPYjYU/r6+Wp7HId2LVUZKLo5q4sOHTJD0lz9r
zt1xByIAp5v7ZmNAOV6uiwkI4kQPo6D6nzU3A7q76OB0rMZnUAjmmLjUvuTERU/P
sp1b++UlusBnKjC7TX8NOtDZAQRyox7GdvMreHq0R++FTTW3W5HUiY8LIB4uIQ6o
B+Xxe6YIEqLF/DyFSfNvz/vDHCUXODpTtyai85lnlOqxMcfg2/MOW/hO5wsYasBx
Qb1B1K5VYM6w7d0fNavCaxb7F2eZzefGO2H+ZHtWSi1nW8kq6rRvTABEkI9n+QU2
QPw=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org