Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: ClzWK8lEAz6bdjR23uOFAb6M+KiR6cdnWKW64R1SSfw=
Subject key identifier: DC:FD:29:CF:27:D6:22:05:43:2D:C7:59:F3:87:41:2C:CB:5D:EF:1E
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 483D311B4991731EB4DCC8C4B9887FB7496E9477
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa
Signing time: Wed 29 May 2024 09:29:14 +0000
ROA not before: Wed 29 May 2024 09:24:14 +0000
ROA not after: Wed 28 May 2025 09:29:14 +0000
asID: 9009
IP address blocks: 2a13:9500:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3d:31:1b:49:91:73:1e:b4:dc:c8:c4:b9:88:7f:b7:49:6e:94:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: May 29 09:24:14 2024 GMT
Not After : May 28 09:29:14 2025 GMT
Subject: CN=DCFD29CF27D62205432DC759F387412CCB5DEF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:a3:9e:0e:0e:43:62:b9:f4:28:47:27:8b:
48:b9:4c:b1:20:3d:b6:d7:c7:73:1f:b4:ae:4b:01:
15:81:81:d5:71:62:96:f6:70:3b:92:45:e5:0d:b4:
ce:b7:0a:cf:2d:5f:1b:d1:ff:57:80:92:1e:6f:dc:
a8:c4:6d:a1:97:97:d3:9d:e1:8e:5e:a8:f6:ea:fb:
39:1a:18:3f:9a:b1:7e:20:71:5b:d0:da:1f:22:87:
86:a1:41:01:a7:41:20:5d:86:30:75:8c:7d:06:69:
09:41:1f:fc:4e:37:11:64:11:6a:f8:84:c1:12:1e:
e0:f2:77:8b:5a:ab:12:44:44:06:5f:b8:24:7e:03:
5f:3a:a1:82:7d:cc:12:42:49:36:96:df:a2:c0:5e:
a6:8d:43:a2:84:eb:0b:0e:e3:7a:07:53:0f:5c:94:
70:40:4f:81:fb:aa:fa:b7:e8:f5:76:61:5f:92:9f:
87:ac:74:8e:a5:dd:8a:40:37:2e:1c:59:44:c6:12:
81:7d:4a:a6:30:e9:2c:76:38:6c:96:9a:3e:10:be:
3f:02:5f:d7:ab:7d:6d:33:1d:88:0b:32:1f:52:73:
c9:f4:92:8d:2e:59:a7:d3:36:b7:f6:be:ab:b9:a5:
a3:47:fd:85:3a:ef:7a:99:c3:ad:06:b7:77:8a:15:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FD:29:CF:27:D6:22:05:43:2D:C7:59:F3:87:41:2C:CB:5D:EF:1E
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31383a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:18::/48
Signature Algorithm: sha256WithRSAEncryption
03:7a:bf:11:f7:d1:b8:98:83:90:75:1b:5b:94:f8:92:a1:b7:
ef:8f:58:1b:00:dd:2c:7a:0f:95:47:20:53:f2:3d:99:0e:f7:
ac:0e:b7:31:d6:03:ff:6d:17:aa:15:a0:c5:ab:e1:dc:0c:fe:
3f:11:22:87:9d:8f:f8:8d:1a:ac:d4:76:f3:e8:ff:54:df:96:
e1:1c:8e:ee:9f:68:b7:0d:6e:c7:6f:cd:f5:1a:7d:2d:8c:a0:
40:91:40:d5:b7:eb:5d:9a:4d:05:68:83:1c:e6:5a:b5:ac:fa:
f6:75:2b:b6:a9:2f:eb:3c:17:43:1c:12:e0:87:64:7b:cc:6e:
26:ba:cf:a0:af:dc:29:5d:ff:b2:42:52:d0:38:fd:cd:63:19:
02:7b:49:ac:8b:68:fc:8a:53:5a:c8:c5:44:d7:94:c2:8e:4e:
b9:bf:80:34:21:13:42:03:6e:c5:c4:ec:eb:10:0e:26:61:cb:
c0:72:1a:ba:44:89:6c:03:5c:d4:0f:14:1c:d4:1f:6c:a9:e1:
7e:a5:98:2f:21:43:d2:06:0a:75:6e:0c:84:bd:03:11:b0:6d:
f1:1d:ed:cb:72:d0:25:e3:fe:eb:cf:14:8f:c8:45:0e:c6:a3:
f5:21:4d:36:f2:1b:a2:f6:9d:85:e3:f3:0f:47:b7:ff:e1:16:
4e:84:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org