Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa
File: 326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa (raw, json)
Hash identifier: LJ4TxqwylUP4O6xsTnx4l7XsNo+DoQtxF6Vm43wdwUY=
Subject key identifier: 67:EC:A2:5C:04:93:6A:82:18:B2:E6:C3:1A:55:E9:E0:3E:A5:92:B4
Certificate issuer: /CN=87d48146623246673056151f64abb8d1ee6b7727
Certificate serial: 178DD6BFFD197E1BDAE06207CFDC0ECD201E0944
Authority key identifier: 87:D4:81:46:62:32:46:67:30:56:15:1F:64:AB:B8:D1:EE:6B:77:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa
Signing time: Mon 15 Jan 2024 15:37:26 +0000
ROA not before: Mon 15 Jan 2024 15:32:26 +0000
ROA not after: Mon 13 Jan 2025 15:37:26 +0000
asID: 210617
IP address blocks: 2a0d:d740:107::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.crl
rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:8d:d6:bf:fd:19:7e:1b:da:e0:62:07:cf:dc:0e:cd:20:1e:09:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d48146623246673056151f64abb8d1ee6b7727
Validity
Not Before: Jan 15 15:32:26 2024 GMT
Not After : Jan 13 15:37:26 2025 GMT
Subject: CN=67ECA25C04936A8218B2E6C31A55E9E03EA592B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:2b:c3:cd:8a:92:b3:b8:d4:3c:57:cd:53:
c9:7f:a8:21:6c:21:1e:35:6a:c5:99:e1:92:9d:ed:
15:13:5c:33:d5:c7:09:3d:d7:4e:1c:78:8d:f9:70:
5e:77:45:62:1f:03:ce:23:19:7d:72:30:8c:6f:75:
9d:b0:e4:71:46:41:3d:10:49:9e:d9:69:8e:ab:f8:
ba:c2:a3:09:e6:64:1c:c0:15:56:65:76:a4:52:1e:
3b:1b:26:20:57:bd:78:06:98:a2:22:ad:c3:b8:1c:
5e:ae:5e:36:48:ac:88:51:66:1e:fc:4c:ac:05:c5:
6a:35:81:b8:27:5c:b3:69:c6:17:72:0b:78:a4:50:
a2:e3:93:52:ba:8d:2d:15:be:d0:e8:9f:98:c8:02:
56:fc:5c:bd:a8:87:51:8a:85:07:27:1d:ad:b9:bd:
0c:83:43:dd:74:2a:43:df:45:0e:3e:00:d0:ba:2d:
36:7f:d8:c0:db:7a:1a:9f:2b:d5:55:63:9c:4d:bf:
67:6b:7a:4c:fa:de:b0:78:ef:0d:56:2d:98:00:18:
9b:64:ca:b3:9c:01:bc:c4:76:00:cc:31:f8:77:91:
e6:bb:f4:93:27:91:07:b3:04:3a:48:12:37:3b:81:
e7:c4:df:44:33:e5:90:c1:af:7f:a0:96:92:66:4e:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EC:A2:5C:04:93:6A:82:18:B2:E6:C3:1A:55:E9:E0:3E:A5:92:B4
X509v3 Authority Key Identifier:
keyid:87:D4:81:46:62:32:46:67:30:56:15:1F:64:AB:B8:D1:EE:6B:77:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d740:107::/48
Signature Algorithm: sha256WithRSAEncryption
70:db:a7:af:79:40:10:0e:cd:7a:40:8b:64:a8:78:99:56:99:
c7:f0:7e:8b:3e:95:1a:b9:2e:b2:92:b0:8e:a5:ff:ba:6f:6b:
81:7c:78:b6:4e:31:ea:e3:9c:1e:42:4f:cd:58:66:cb:8d:89:
cb:af:53:29:6f:8d:b4:ba:5d:4a:6f:7e:57:ba:48:7e:11:11:
f5:a9:59:46:d5:8a:52:60:e5:88:ee:a4:1e:ab:fc:e8:7a:b9:
1c:7b:2f:c7:84:b9:e1:aa:89:46:30:81:c7:f0:b0:42:5d:63:
e3:be:d2:3a:f9:5b:68:4a:1d:6c:fd:1e:33:60:16:80:82:a2:
b1:cf:79:de:23:a1:56:bd:00:dc:35:dc:83:47:bb:3a:cb:f3:
12:fa:75:5c:fa:e2:5c:38:35:90:a5:00:1d:39:ad:2d:65:a0:
f8:19:97:35:4e:13:b4:71:9c:ad:7d:9a:5c:3d:cd:76:73:29:
62:dc:cb:6f:75:f4:9e:9a:4f:65:5b:cf:2a:ea:5e:dd:1d:41:
90:38:db:27:ef:62:d6:c1:c3:2d:09:c6:af:ac:77:32:04:b6:
11:88:05:76:09:f7:37:d5:4a:6d:af:15:af:67:af:db:a8:1c:
4e:e1:b3:57:c0:7a:ce:42:7b:24:93:10:04:c4:28:b8:10:29:
46:99:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:39:55 2024 by rpki-client on console-ams.rpki-client.org