Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538363a3a2f33322d3438203d3e203533363637.roa
File: 326131343a373538363a3a2f33322d3438203d3e203533363637.roa (raw, json)
Hash identifier: mwD7fiIZwIYWhsewrY7lFVr8Gaw6i1eb1oaFQC8AVNk=
Subject key identifier: ED:E5:2D:B9:20:51:D5:47:B6:C2:91:74:B1:12:84:0F:80:E2:A5:1B
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 1E43FD60C5AD45374B0F8BAEE8B274FAFD8551B6
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538363a3a2f33322d3438203d3e203533363637.roa
Signing time: Sat 01 Jun 2024 02:02:31 +0000
ROA not before: Sat 01 Jun 2024 01:57:31 +0000
ROA not after: Sat 31 May 2025 02:02:31 +0000
asID: 53667
IP address blocks: 2a14:7586::/32 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:43:fd:60:c5:ad:45:37:4b:0f:8b:ae:e8:b2:74:fa:fd:85:51:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Jun 1 01:57:31 2024 GMT
Not After : May 31 02:02:31 2025 GMT
Subject: CN=EDE52DB92051D547B6C29174B112840F80E2A51B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:ea:64:32:9e:11:d7:4e:4b:54:43:7d:9d:
7f:c5:e6:73:9c:af:3a:81:c5:1a:c3:90:63:86:5b:
51:0b:f7:b6:0a:cf:1c:04:3f:41:64:9c:30:0a:75:
96:6a:23:c2:6d:cc:c8:03:80:d7:b5:68:1e:4d:81:
f1:23:7e:dc:85:e8:8c:1c:af:54:63:3c:81:89:e3:
97:e6:39:9c:fc:52:88:5c:1a:1f:26:49:32:83:6c:
f8:f8:99:ec:ef:b3:73:3d:cf:7b:2e:6f:18:d9:55:
2f:db:a9:38:ed:51:fd:1a:95:14:fe:48:ee:8a:25:
43:7a:3d:ad:e3:0d:a4:38:f4:1e:b8:dd:59:4b:fb:
61:ed:70:7a:83:e4:ec:0d:df:07:d3:76:e2:80:81:
e1:8e:da:21:18:d3:a2:42:ac:30:34:ee:2c:a7:fd:
8f:9d:42:d2:af:2e:1f:f2:65:e9:52:e0:e5:ca:ca:
ef:ed:44:19:01:7e:80:39:f4:58:87:20:ce:79:e1:
aa:d1:a6:85:cb:50:75:6e:6b:86:ee:29:43:3e:4e:
80:4f:91:39:8b:43:30:47:8e:36:ac:b9:f5:94:33:
91:b9:86:ed:3e:79:08:56:7b:33:2f:17:f3:07:3e:
43:43:17:0e:c3:f1:16:c1:70:af:7d:97:d8:89:97:
3e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E5:2D:B9:20:51:D5:47:B6:C2:91:74:B1:12:84:0F:80:E2:A5:1B
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/326131343a373538363a3a2f33322d3438203d3e203533363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7586::/32
Signature Algorithm: sha256WithRSAEncryption
87:ee:0d:78:ce:f0:90:33:db:96:d1:d9:ce:0c:06:44:27:d8:
0c:16:41:09:a8:9f:29:0c:23:b8:5d:48:8d:99:8f:dd:34:ec:
56:b1:86:07:c3:4d:d5:1d:1f:ee:65:65:8f:c4:a7:52:ba:eb:
17:41:db:f8:50:f3:58:fb:b2:a8:6c:37:9f:c2:c7:0f:cb:62:
67:89:6d:75:f1:c9:d4:ec:8b:a2:9e:ab:d7:21:2e:15:d8:50:
4c:54:78:02:29:b8:6b:24:7e:11:79:6a:6e:44:c9:68:40:a2:
80:28:c5:51:d7:85:2d:85:8a:4d:53:d2:92:ad:8a:8c:be:41:
fb:9b:44:cf:e8:03:b5:a7:5c:22:66:e1:c1:8a:ce:1a:56:3e:
57:17:ab:10:ed:52:4c:79:6c:ca:75:af:86:97:b9:eb:94:75:
2c:70:fc:db:5a:29:ed:2a:3c:c3:45:34:c1:6d:c6:a4:05:6f:
c3:4c:99:91:a0:f6:a1:59:e2:cf:cc:4e:3d:51:fe:b0:bc:98:
c2:89:a0:a7:96:c6:1e:fd:ca:62:56:77:81:37:b9:39:b7:0a:
af:95:b3:88:43:73:59:98:23:4e:48:39:62:28:18:35:7a:26:
d1:66:d8:a7:05:e0:26:3d:87:48:4c:b5:ae:d7:7d:c9:e8:03:
93:c8:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 18:12:45 2024 by rpki-client on console-fra.rpki-client.org