Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a3a2f33362d3438203d3e20323134323033.roa
File: 326131343a373538343a3a2f33362d3438203d3e20323134323033.roa (raw, json)
Hash identifier: odleKQi76nENz1dYEDV/I5+eofgR0o/hl5ER248Gigw=
Subject key identifier: 7A:59:1E:85:8D:FD:04:D0:2F:F2:BA:B8:A4:A5:92:41:2D:72:57:93
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1273896626EA722E3F0FF82EEFE869D5D8D5AB56
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a3a2f33362d3438203d3e20323134323033.roa
Signing time: Mon 11 Nov 2024 13:58:56 +0000
ROA not before: Mon 11 Nov 2024 13:53:56 +0000
ROA not after: Mon 10 Nov 2025 13:58:56 +0000
asID: 214203
IP address blocks: 2a14:7584::/36 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:73:89:66:26:ea:72:2e:3f:0f:f8:2e:ef:e8:69:d5:d8:d5:ab:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Nov 11 13:53:56 2024 GMT
Not After : Nov 10 13:58:56 2025 GMT
Subject: CN=7A591E858DFD04D02FF2BAB8A4A592412D725793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:f1:62:d7:c1:ed:24:eb:ef:10:e8:ff:1a:
1d:85:da:44:f8:dc:45:d6:6b:d3:77:da:f1:2a:47:
2c:63:8d:08:a5:ad:3d:f4:77:c2:c5:40:35:4a:d1:
c0:06:40:28:5f:e7:e1:63:47:ee:ba:1d:b0:f2:09:
f9:bf:63:af:05:c5:d4:17:2c:44:d6:a4:52:89:f6:
54:7f:31:ce:94:a5:45:d2:77:86:63:a3:18:a9:2d:
8c:15:7b:0f:b6:42:f7:e1:81:37:d5:32:6a:97:aa:
f8:76:9d:8f:db:45:29:75:fd:9f:23:03:7d:3f:5e:
00:5d:ec:0b:07:6f:59:02:ed:60:b7:d2:f3:2d:e9:
1a:b3:ce:74:db:19:e9:a3:f7:e3:be:0a:c3:59:fc:
cd:2d:b2:62:10:3f:15:e6:09:bf:5b:ad:e8:e9:c3:
38:2d:e4:02:5a:fc:97:f8:a1:43:29:e0:aa:9d:07:
2a:bd:08:6d:b6:5a:3a:37:ca:b3:36:2c:62:dd:bb:
8e:7c:57:c9:65:59:d1:17:8b:fc:0a:46:24:7c:56:
87:82:7e:dc:0c:29:82:ce:59:4c:1e:f5:f8:b3:30:
f1:a7:dd:7e:23:11:0e:42:82:77:dc:2d:79:a8:cf:
2a:1d:64:75:05:52:d0:47:88:14:c5:ac:6a:a1:0f:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:59:1E:85:8D:FD:04:D0:2F:F2:BA:B8:A4:A5:92:41:2D:72:57:93
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538343a3a2f33362d3438203d3e20323134323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584::/36
Signature Algorithm: sha256WithRSAEncryption
78:2d:83:04:f9:7d:de:e5:ce:fd:45:d3:dc:9b:28:b6:e9:6a:
a2:6f:ee:35:25:0e:8b:11:1c:41:5a:2d:32:b7:7b:43:d3:27:
31:b6:20:b2:5a:5d:a6:29:06:2b:99:90:02:c0:0f:bc:70:28:
51:28:8b:fd:21:ef:56:00:13:c7:55:c1:45:df:79:86:7d:49:
e8:77:9a:43:75:a3:35:40:47:27:c9:46:9f:3b:03:71:9e:0f:
fa:ed:c4:d9:b4:a9:c8:27:f4:18:15:91:4d:e4:71:74:1a:d6:
eb:7f:19:72:54:16:67:21:2e:39:c8:55:c3:f8:68:05:82:b1:
4d:01:d8:8a:cb:2c:18:1d:23:81:51:d2:c1:70:90:6b:63:31:
a0:f1:d9:6e:f2:6c:bc:31:02:ea:b0:62:f8:87:4f:90:0a:b2:
f5:a2:d0:69:7b:35:2d:d8:5b:6d:bc:31:ae:70:1e:63:52:97:
b8:e5:c2:39:6e:46:42:9b:3c:d0:8c:8e:a3:ec:1d:e0:be:af:
1b:88:29:7c:6c:41:0a:b4:d7:9b:28:0c:d4:b7:9e:68:60:77:
6b:91:1b:cc:f2:e9:12:f2:7a:1a:f4:64:18:03:5d:86:09:e2:
be:ff:b7:78:7b:c4:4c:65:a2:3e:00:8b:91:75:b1:e8:2a:cb:
c6:81:01:d8
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUEnOJZibqci4/D/gu7+hp1djVq1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTgzZDQ4NjUyZjNiMmRmNzRmNmJmOWJhYThhOWMxNzRj
Y2ZkMzc3MjAeFw0yNDExMTExMzUzNTZaFw0yNTExMTAxMzU4NTZaMDMxMTAvBgNV
BAMTKDdBNTkxRTg1OERGRDA0RDAyRkYyQkFCOEE0QTU5MjQxMkQ3MjU3OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChofFi18HtJOvvEOj/Gh2F2kT4
3EXWa9N32vEqRyxjjQilrT30d8LFQDVK0cAGQChf5+FjR+66HbDyCfm/Y68FxdQX
LETWpFKJ9lR/Mc6UpUXSd4ZjoxipLYwVew+2QvfhgTfVMmqXqvh2nY/bRSl1/Z8j
A30/XgBd7AsHb1kC7WC30vMt6RqzznTbGemj9+O+CsNZ/M0tsmIQPxXmCb9brejp
wzgt5AJa/Jf4oUMp4KqdByq9CG22Wjo3yrM2LGLdu458V8llWdEXi/wKRiR8VoeC
ftwMKYLOWUwe9fizMPGn3X4jEQ5CgnfcLXmozyodZHUFUtBHiBTFrGqhD7npAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUelkehY39BNAv8rq4pKWSQS1yV5MwHwYDVR0j
BBgwFoAUqD1IZS87LfdPa/m6qKnBdMz9N3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2Yz
ODI0LzAvQTgzRDQ4NjUyRjNCMkRGNzRGNkJGOUJBQThBOUMxNzRDQ0ZEMzc3Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FEMUlaUzg3TGZkUGFfbTZxS25CZE16
OU4zSS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMt
YTNmZS00Mjk5LWIwNzktMzA5ZWQ5N2YzODI0LzAvMzI2MTMxMzQzYTM3MzUzODM0
M2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzMTM0MzIzMDMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYE
KhR1hAAwDQYJKoZIhvcNAQELBQADggEBAHgtgwT5fd7lzv1F09ybKLbpaqJv7jUl
DosRHEFaLTK3e0PTJzG2ILJaXaYpBiuZkALAD7xwKFEoi/0h71YAE8dVwUXfeYZ9
Seh3mkN1ozVARyfJRp87A3GeD/rtxNm0qcgn9BgVkU3kcXQa1ut/GXJUFmchLjnI
VcP4aAWCsU0B2IrLLBgdI4FR0sFwkGtjMaDx2W7ybLwxAuqwYviHT5AKsvWi0Gl7
NS3YW228Ma5wHmNSl7jlwjluRkKbPNCMjqPsHeC+rxuIKXxsQQq015soDNS3nmhg
d2uRG8zy6RLyehr0ZBgDXYYJ4r7/t3h7xExloj4Ai5F1segqy8aBAdg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org