Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa
File: 326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier: hymd14tlB2C/8Gtuuj9bTCeMegjZNpc7msIAOP6SIpI=
Subject key identifier: 49:C5:7B:7A:5C:56:15:CF:5C:F2:6D:BC:D9:21:7A:BD:B9:1D:EC:75
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 623C758D630F04127EE239853ECD30F4AE6787B2
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa
Signing time: Tue 11 Jun 2024 10:02:04 +0000
ROA not before: Tue 11 Jun 2024 09:57:04 +0000
ROA not after: Tue 10 Jun 2025 10:02:04 +0000
asID: 396356
IP address blocks: 2a13:9500:1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3c:75:8d:63:0f:04:12:7e:e2:39:85:3e:cd:30:f4:ae:67:87:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Jun 11 09:57:04 2024 GMT
Not After : Jun 10 10:02:04 2025 GMT
Subject: CN=49C57B7A5C5615CF5CF26DBCD9217ABDB91DEC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:10:a8:46:bd:5c:70:67:ad:ac:37:69:43:
2d:17:b4:1e:19:b3:ed:b4:cc:fc:4b:9b:72:1d:e1:
60:ee:c8:47:17:d0:84:bd:c6:62:2a:4e:f0:ea:26:
db:1e:3b:d5:a7:57:ab:63:d5:90:88:05:d3:f1:33:
67:41:76:af:e2:e8:e5:df:95:3d:75:10:b9:58:48:
b2:1d:80:4a:b6:16:f3:06:65:29:5d:9c:86:cf:29:
88:60:fc:83:ee:6f:55:0c:ed:91:e1:ea:10:d5:eb:
d2:68:ab:1f:41:8b:06:e2:9c:15:56:7b:7d:87:10:
bc:6b:85:79:ee:04:b9:71:22:73:5d:9a:00:65:00:
a1:f6:24:a6:d8:02:d8:4e:68:93:f8:a9:66:77:ef:
69:e8:39:25:26:83:05:7e:fd:a8:1c:e1:a0:72:f0:
6f:9c:94:30:63:79:45:f7:42:9c:6f:a2:f0:0b:9b:
20:e1:f2:a4:21:79:2c:00:9f:c2:a9:89:86:5e:62:
54:19:85:f9:77:52:3a:2f:9e:4a:b9:14:0b:c0:6b:
ee:9a:30:67:03:ec:6b:f1:b6:db:e8:26:3a:22:28:
29:ef:eb:04:89:cd:7b:40:6e:7e:05:c8:a7:4c:2a:
c8:e2:06:cf:42:f3:e4:77:1b:ae:53:88:d4:fe:05:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C5:7B:7A:5C:56:15:CF:5C:F2:6D:BC:D9:21:7A:BD:B9:1D:EC:75
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a31633a3a2f34382d3438203d3e20333936333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:1c::/48
Signature Algorithm: sha256WithRSAEncryption
62:44:0c:b1:4e:01:e0:aa:d1:d2:4a:fb:cd:bb:f0:0a:96:24:
84:1f:9a:b1:02:e9:bb:62:77:7c:19:3e:5d:29:d5:c7:a1:4b:
57:5d:4f:56:e0:03:35:3b:0c:eb:a2:69:9d:5c:35:60:56:07:
99:d6:65:68:10:98:1a:7e:c2:8e:1d:5d:6d:02:f1:f9:08:e3:
d0:d1:9d:98:7e:b6:da:46:fc:86:1b:0c:66:b5:8d:51:7a:4f:
2a:92:d2:cf:89:66:ff:10:4a:18:28:8e:bc:a2:ec:31:9b:04:
d9:f1:99:06:3a:62:6b:da:2b:15:a5:ef:63:cf:5e:b9:6d:71:
13:25:71:4f:a2:fa:78:32:71:1e:18:d5:81:6c:00:88:d0:c7:
1c:de:99:dd:e8:1c:16:9d:45:b9:9f:f1:08:08:47:19:73:ff:
33:b4:bd:8b:28:5e:2b:60:54:a1:d3:c1:92:81:89:71:db:e4:
a6:f6:8f:b4:68:8b:d4:78:3d:23:7d:72:4d:0f:2b:cd:48:09:
7f:18:7f:8b:b8:af:2d:e7:f4:11:1c:fe:c1:d4:a7:5a:90:99:
6b:31:12:2b:9a:01:36:d0:c5:78:f2:15:2c:9e:ed:cb:7b:19:
5e:87:00:5c:4b:b8:b6:4b:7b:0e:8c:f2:81:c7:c1:73:91:78:
e9:32:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org