Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a353a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: Aj3jOO/tQ5Ym3aMlHEdc12ewosqbn7hPYcNSN7UWxT8=
Subject key identifier: C1:54:7E:AD:2A:66:F0:C6:22:7B:1B:3D:42:8E:B4:08:46:A6:81:F5
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 294537581AFC227F5F9AF5DC5F1092DD2774ACC5
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a353a3a2f34382d3438203d3e2039303039.roa
Signing time: Wed 15 May 2024 12:02:29 +0000
ROA not before: Wed 15 May 2024 11:57:29 +0000
ROA not after: Wed 14 May 2025 12:02:29 +0000
asID: 9009
IP address blocks: 2a13:9500:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:45:37:58:1a:fc:22:7f:5f:9a:f5:dc:5f:10:92:dd:27:74:ac:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: May 15 11:57:29 2024 GMT
Not After : May 14 12:02:29 2025 GMT
Subject: CN=C1547EAD2A66F0C6227B1B3D428EB40846A681F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:45:fa:80:26:8d:b1:b1:2c:76:45:05:d4:
b3:f5:aa:01:35:ab:b5:b5:57:6c:14:04:27:c0:f5:
6a:de:f7:ad:6d:63:08:2f:39:13:ec:f1:df:23:5d:
33:b8:f1:8a:b9:c7:c1:0c:13:68:2a:c3:eb:91:1d:
f6:17:c1:1c:f2:a9:94:c9:39:4c:64:73:d0:65:03:
25:99:13:9b:48:e8:01:d9:ce:fa:d7:43:ac:d2:7f:
f2:08:4a:62:35:89:23:d5:2a:47:a2:70:05:80:8a:
86:7d:95:1f:12:db:d5:53:78:b4:c1:59:95:99:96:
20:f8:e3:67:a5:55:e1:7f:1d:36:c5:b9:b5:d8:81:
c3:77:07:a1:2f:4e:2f:4b:79:92:af:18:a4:cd:8c:
8c:a6:7d:f6:1c:f7:c9:a2:ec:a5:9e:5a:50:81:44:
8e:e7:28:8c:d6:32:fd:be:0c:8c:ff:96:56:f7:a3:
69:e4:d4:4d:e6:46:1d:86:bc:ea:3e:19:f9:fa:f2:
76:82:76:6c:38:c8:11:a6:24:f6:3b:85:e1:8b:a6:
e0:57:42:bf:00:1a:85:29:68:7b:47:3f:4b:ed:f8:
25:b4:94:ee:eb:33:eb:d5:45:69:1a:64:6a:df:cc:
82:96:c3:59:53:52:03:15:6a:97:24:39:b3:b1:c9:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:54:7E:AD:2A:66:F0:C6:22:7B:1B:3D:42:8E:B4:08:46:A6:81:F5
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a353a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:5::/48
Signature Algorithm: sha256WithRSAEncryption
8b:9d:a7:c8:fa:97:a3:ea:08:fe:42:b2:21:92:a4:c5:77:be:
ad:e0:ac:a5:d4:f2:d5:95:bc:ad:c7:5c:58:f3:7f:c2:37:42:
62:08:f5:11:8b:f1:4c:d1:13:2b:9f:97:3f:d2:52:31:5c:a4:
fc:fd:5b:03:b3:6b:db:b8:6a:03:3d:c9:2d:f4:a7:4e:8d:19:
d9:b9:e1:2c:cf:7b:c3:4d:8d:01:84:25:e4:a3:29:8b:23:3d:
a5:84:ad:6c:38:e0:9b:c2:1c:a0:2c:a0:e0:de:50:dc:8d:70:
f8:79:c3:c9:14:7a:31:6a:ba:4e:36:ef:00:75:37:b7:69:b6:
af:ed:77:ca:e3:27:01:a6:30:19:c4:42:be:64:11:22:9e:3b:
ec:17:ba:27:e7:81:2d:c2:11:33:70:13:16:b8:b0:40:ee:e7:
d4:09:4e:dd:b2:dd:39:4b:5e:9c:0e:34:78:9b:26:35:28:94:
12:12:3e:a7:49:23:f3:4c:1e:26:3d:cc:3d:29:6e:86:21:58:
6b:fa:00:7c:57:4d:76:0b:b7:92:51:48:23:42:de:15:1f:c2:
aa:0b:8b:f5:07:cc:68:75:47:0e:f7:51:d3:e5:77:1a:d1:30:
c0:9a:27:29:19:57:e9:b7:30:71:88:b6:26:8a:dc:63:d4:02:
ad:ff:c3:47
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUKUU3WBr8In9fmvXcXxCS3Sd0rMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiMjljZjFiN2U3Yjk0ZjYzNmVkYTc1ZTIyOTk4NzM2
NGE0MGQ0ZDAeFw0yNDA1MTUxMTU3MjlaFw0yNTA1MTQxMjAyMjlaMDMxMTAvBgNV
BAMTKEMxNTQ3RUFEMkE2NkYwQzYyMjdCMUIzRDQyOEVCNDA4NDZBNjgxRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcv0X6gCaNsbEsdkUF1LP1qgE1
q7W1V2wUBCfA9Wre961tYwgvORPs8d8jXTO48Yq5x8EME2gqw+uRHfYXwRzyqZTJ
OUxkc9BlAyWZE5tI6AHZzvrXQ6zSf/IISmI1iSPVKkeicAWAioZ9lR8S29VTeLTB
WZWZliD442elVeF/HTbFubXYgcN3B6EvTi9LeZKvGKTNjIymffYc98mi7KWeWlCB
RI7nKIzWMv2+DIz/llb3o2nk1E3mRh2GvOo+Gfn68naCdmw4yBGmJPY7heGLpuBX
Qr8AGoUpaHtHP0vt+CW0lO7rM+vVRWkaZGrfzIKWw1lTUgMVapckObOxyQRrAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUwVR+rSpm8MYiexs9Qo60CEamgfUwHwYDVR0j
BBgwFoAU6LKc8bfnuU9jbtp14imYc2SkDU0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2M4ZmY3YTktNTRiYi00MmE1LWI1ODQtMWM2Njg0MDYy
ZDhhLzAvRThCMjlDRjFCN0U3Qjk0RjYzNkVEQTc1RTIyOTk4NzM2NEE0MEQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMS2M4YmZudVU5amJ0cDE0aW1ZYzJT
a0RVMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2M4ZmY3YTkt
NTRiYi00MmE1LWI1ODQtMWM2Njg0MDYyZDhhLzAvMzI2MTMxMzMzYTM5MzUzMDMw
M2EzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM5MzAzMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KhOVAAAFMA0GCSqGSIb3DQEBCwUAA4IBAQCLnafI+pej6gj+QrIhkqTFd76t4Kyl
1PLVlbytx1xY83/CN0JiCPURi/FM0RMrn5c/0lIxXKT8/VsDs2vbuGoDPckt9KdO
jRnZueEsz3vDTY0BhCXkoymLIz2lhK1sOOCbwhygLKDg3lDcjXD4ecPJFHoxarpO
Nu8AdTe3abav7XfK4ycBpjAZxEK+ZBEinjvsF7on54EtwhEzcBMWuLBA7ufUCU7d
st05S16cDjR4myY1KJQSEj6nSSPzTB4mPcw9KW6GIVhr+gB8V012C7eSUUgjQt4V
H8KqC4v1B8xodUcO91HT5Xca0TDAmicpGVfptzBxiLYmitxj1AKt/8NH
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org