Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31313a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a31313a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: Yvd67Lde+yYwXyeVw9lsoGQCYoQdNxEqgTTBYDj30fs=
Subject key identifier: 39:F7:B0:57:AB:73:32:6E:BB:F9:A8:5A:94:D1:FF:91:C4:49:9E:02
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 1516CD02A6B7BB87F6B544C2B7E6699A47197FEA
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31313a3a2f34382d3438203d3e2039303039.roa
Signing time: Wed 15 May 2024 12:02:31 +0000
ROA not before: Wed 15 May 2024 11:57:31 +0000
ROA not after: Wed 14 May 2025 12:02:31 +0000
asID: 9009
IP address blocks: 2a13:9500:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:16:cd:02:a6:b7:bb:87:f6:b5:44:c2:b7:e6:69:9a:47:19:7f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: May 15 11:57:31 2024 GMT
Not After : May 14 12:02:31 2025 GMT
Subject: CN=39F7B057AB73326EBBF9A85A94D1FF91C4499E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:ef:1b:26:ca:2b:e5:25:fd:7c:48:64:0d:
23:47:4e:40:dc:39:69:dd:79:8e:6f:3d:27:19:82:
15:e8:3a:44:71:17:aa:01:cd:58:42:b6:aa:1f:28:
73:6d:c7:c3:6a:91:ed:6a:4d:1a:17:62:0e:37:0b:
88:c6:f6:59:61:01:7f:f2:cb:f9:f4:69:4f:fe:9b:
fa:17:28:ad:ae:98:a2:8a:bd:33:42:02:a7:8f:ee:
31:11:83:59:70:1e:00:49:cb:5a:11:95:22:bc:be:
83:5e:8d:5e:36:02:13:0b:81:72:f7:9c:6c:f8:f4:
90:00:2a:05:dd:a6:ee:1f:83:b1:02:d9:38:72:23:
c1:cb:64:1d:0c:80:3f:ce:73:54:c4:79:72:76:a0:
5f:da:6e:c5:92:92:0b:df:20:d1:06:99:84:b7:e9:
1f:82:a0:ad:ce:8d:e3:ca:61:3e:fa:70:3a:4d:e4:
fb:a0:cd:08:f8:62:54:0c:df:92:6d:8e:08:70:7c:
6e:ac:31:77:91:a1:19:5b:12:9a:16:79:9d:d0:23:
da:9c:11:31:b4:c2:70:1b:33:91:4a:24:a1:af:22:
0f:03:b0:4b:f6:f3:8f:09:94:c0:5b:1a:c9:c1:b1:
07:b3:96:23:bf:f1:00:c0:71:12:6e:ce:ef:47:79:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F7:B0:57:AB:73:32:6E:BB:F9:A8:5A:94:D1:FF:91:C4:49:9E:02
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31313a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:11::/48
Signature Algorithm: sha256WithRSAEncryption
86:dd:a5:c5:72:e7:2a:00:07:d0:e3:f0:0c:9f:12:b4:e1:12:
b5:91:53:b0:48:b2:19:0a:bf:a6:60:89:ab:d0:db:f9:84:84:
52:ca:a6:99:0f:96:d1:a9:ba:ff:d6:3a:39:8a:ed:49:2a:4d:
9d:12:8b:d7:53:31:07:7e:55:c1:c0:1d:0a:84:e5:d5:bd:86:
d1:d3:9b:6f:ed:91:a9:c6:8b:94:8f:05:f2:69:47:4d:7d:f3:
aa:70:ea:43:5d:1f:d2:56:50:77:3c:2c:34:6b:07:64:ab:2d:
77:ef:2d:ce:b5:e7:48:d2:b7:1c:d9:f7:8b:f2:8a:63:f5:8e:
a0:6d:27:d2:ab:b7:ba:60:20:fd:17:41:a9:0a:ca:54:b0:53:
3a:86:19:20:a1:3e:56:e1:91:66:14:51:8f:eb:70:62:18:3e:
3f:d6:c3:43:72:3e:45:9c:49:c0:81:78:4f:ac:d6:5a:ec:86:
27:7e:6f:2c:29:65:2e:fb:c1:77:a6:81:29:4f:d1:4c:6a:f8:
1f:32:92:e4:52:72:7e:aa:41:aa:97:18:29:65:f0:6c:89:6e:
0a:4b:89:4c:fe:0b:6c:f3:58:10:ef:23:e1:de:1f:e7:b4:18:
94:1a:7b:1e:1b:5b:98:32:7f:0a:4c:f9:3b:fe:97:64:fb:5b:
06:64:c3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:49:45 2024 by rpki-client on console-ams.rpki-client.org