Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666663a3a2f34382d3438203d3e203537343831.roa
File: 326131343a373538313a6666663a3a2f34382d3438203d3e203537343831.roa (raw, json)
Hash identifier: u26WP0EcF3fnWvNwFCF+bi5wXDYr0IQj86JKIz7NO7A=
Subject key identifier: 8B:BC:2E:79:D1:77:37:DA:09:A2:7A:39:38:D9:D8:5D:11:67:9A:9B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 586DBDE671CDBF86FE15D5A20A0777DEB591DA0C
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666663a3a2f34382d3438203d3e203537343831.roa
Signing time: Fri 05 Jul 2024 08:17:31 +0000
ROA not before: Fri 05 Jul 2024 08:12:31 +0000
ROA not after: Fri 04 Jul 2025 08:17:31 +0000
asID: 57481
IP address blocks: 2a14:7581:fff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:6d:bd:e6:71:cd:bf:86:fe:15:d5:a2:0a:07:77:de:b5:91:da:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jul 5 08:12:31 2024 GMT
Not After : Jul 4 08:17:31 2025 GMT
Subject: CN=8BBC2E79D17737DA09A27A3938D9D85D11679A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:6c:54:d2:36:09:0c:2b:b9:51:85:f5:23:
1b:f1:d4:a7:b3:4a:20:be:56:56:99:f4:f1:4b:8b:
68:e0:8a:d3:fb:9c:58:fe:96:2a:91:df:e6:40:90:
10:9e:15:05:5e:0f:80:b4:e7:bf:8c:c8:bf:b3:b8:
36:c4:e4:80:d2:25:8f:29:6c:77:9c:44:6d:5c:26:
3f:4f:62:27:3c:ca:3b:b8:fd:77:f6:9e:02:03:c0:
0d:c6:53:cb:27:60:31:20:93:e0:d7:9d:ce:a3:d8:
bd:e5:bf:26:5c:05:4c:bb:fc:6f:b3:f3:80:02:96:
04:93:00:6b:0a:a4:8a:f2:b8:51:c2:7c:ad:c2:02:
f9:30:f3:fc:fd:1f:b8:6d:f1:ed:f1:fe:8e:38:1c:
84:20:37:ba:4f:2a:fe:ca:ae:30:f6:63:75:b6:72:
19:36:7f:a7:34:d8:a3:ba:a2:08:60:be:11:a8:78:
5c:76:f5:91:81:7f:33:b0:55:c2:a1:05:00:8e:0f:
3a:f8:86:01:46:a3:45:ec:e3:1a:17:76:f0:c8:fa:
11:b8:14:f0:67:5f:08:df:76:35:d6:66:d4:57:a3:
62:61:0d:e1:4b:48:b5:b3:0b:6a:dc:90:5a:25:42:
bc:b9:2a:c6:be:10:27:36:9a:54:ee:fe:23:9a:a9:
ef:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:2E:79:D1:77:37:DA:09:A2:7A:39:38:D9:D8:5D:11:67:9A:9B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538313a6666663a3a2f34382d3438203d3e203537343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7581:fff::/48
Signature Algorithm: sha256WithRSAEncryption
7c:da:be:08:54:23:24:c8:95:b2:ff:de:18:09:24:f0:27:b3:
37:68:52:39:c7:c9:ec:0b:1d:81:f8:5d:33:e0:7c:3d:df:ee:
c5:de:25:f7:e3:8b:a9:7e:26:7f:5f:36:47:7c:23:9d:6b:86:
b6:93:70:2e:ee:23:9c:54:dd:47:ca:61:e4:04:54:6a:62:7c:
50:ec:2d:80:19:fd:1b:43:76:7b:b4:09:5d:7c:42:b9:a3:a3:
ee:a7:be:78:b7:8d:6a:35:91:1b:70:be:8d:6f:53:bc:59:76:
5f:63:39:5d:71:52:60:df:1e:20:68:19:80:72:50:d9:e9:ca:
09:89:50:22:ef:b3:46:79:b0:05:1d:f1:d0:6c:6e:48:8c:e3:
e7:b3:79:2a:65:18:fb:92:78:38:5d:98:f9:9f:1b:26:51:97:
86:b7:60:b7:a4:85:4f:bc:df:93:da:3b:80:80:a1:f6:da:a9:
c1:c7:fa:b6:e2:c0:b5:28:05:66:c8:a1:65:fd:bf:42:28:26:
c8:1b:e3:33:f4:09:d3:7f:62:bf:1d:2d:fd:49:26:7f:b5:07:
a3:bc:42:87:7b:ba:68:7c:96:f2:de:5c:17:e0:ef:bc:64:d7:
5a:82:d6:ae:3d:3a:e3:9f:d0:ac:46:95:ae:46:35:3d:0d:da:
2e:1b:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org