Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a383a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: uQKV1RJRmHkT+RqFUJ8ojZAeJqZtuBjDboHogo2Y8ro=
Subject key identifier: 47:C2:5E:70:92:96:2E:7A:51:D8:BB:75:76:82:0A:5B:9B:10:98:CE
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 4B7DF64E986D738D37AFF6A041CF1CED983FD295
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a383a3a2f34382d3438203d3e2039303039.roa
Signing time: Tue 04 Jun 2024 11:56:32 +0000
ROA not before: Tue 04 Jun 2024 11:51:32 +0000
ROA not after: Tue 03 Jun 2025 11:56:32 +0000
asID: 9009
IP address blocks: 2a13:9500:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:7d:f6:4e:98:6d:73:8d:37:af:f6:a0:41:cf:1c:ed:98:3f:d2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Jun 4 11:51:32 2024 GMT
Not After : Jun 3 11:56:32 2025 GMT
Subject: CN=47C25E7092962E7A51D8BB7576820A5B9B1098CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:1f:3b:f4:d0:b3:a5:d4:e6:1a:b5:40:30:
64:35:48:ad:53:78:7e:dd:11:a5:f7:9c:e8:34:4f:
82:94:c5:a4:69:02:e9:fd:92:90:19:de:71:bc:f3:
6a:23:48:00:b7:4a:73:e8:21:e4:a7:ab:f9:6c:36:
42:49:04:11:d2:f3:22:91:3d:5e:4b:eb:eb:b5:10:
c5:d2:74:ca:15:fa:b4:89:4b:e2:40:d6:6a:c9:8e:
dc:c4:ca:e6:fa:34:d6:53:a6:21:85:70:fc:a1:bc:
93:f9:84:38:a5:7b:7c:67:e9:fe:5c:16:f9:3b:45:
63:8a:3c:a1:9c:d9:dd:92:47:1e:82:91:cb:2b:54:
a1:e5:3c:99:8e:f3:d4:b5:a7:d4:cb:b0:e0:e3:01:
dc:a9:e5:06:87:2e:8d:44:fd:0f:9d:68:2d:6e:59:
e7:ef:8b:c6:4d:7a:40:f6:84:d1:a3:98:01:ae:34:
d6:15:43:d6:7c:fe:88:1c:a2:6f:40:28:fa:c9:77:
b8:a3:40:d5:2b:c4:9b:af:4d:b3:ce:2f:9d:99:77:
d2:e1:a0:38:08:f8:e4:af:c9:0d:03:05:08:0e:91:
8e:94:cb:5f:31:2a:c2:66:f3:ee:e4:40:cb:9b:58:
0a:6a:24:f0:7f:2e:23:01:dd:f0:87:d1:1a:48:2c:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C2:5E:70:92:96:2E:7A:51:D8:BB:75:76:82:0A:5B:9B:10:98:CE
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a383a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:8::/48
Signature Algorithm: sha256WithRSAEncryption
04:2f:d4:28:fb:bf:3f:d9:bb:ff:f6:04:93:1b:c9:18:0e:9c:
8a:29:6e:71:39:0a:ea:07:45:ce:7d:ea:41:26:8a:df:99:bb:
d7:04:d7:de:1f:f7:29:ca:a9:97:68:13:5b:4c:ee:35:8d:bb:
e8:8b:0d:51:4d:2e:ba:f7:59:22:45:f2:63:62:92:a5:08:2f:
a4:29:78:50:7a:aa:66:35:3e:87:ad:61:00:81:c8:bc:1d:95:
86:b5:1d:a0:9f:f7:20:3a:9f:18:04:ea:66:34:e8:3d:cf:0d:
42:13:69:ed:ae:19:83:9a:28:2e:c3:30:0f:09:f8:34:25:e9:
71:e5:1d:03:ec:2f:8d:94:5b:07:c7:1e:c2:f2:c7:53:d2:24:
b1:d6:13:a1:68:6b:e2:f1:46:53:7c:1c:c2:c8:92:0f:09:a8:
43:7f:80:32:fa:8d:58:9f:0e:8f:39:10:fa:e4:ec:e8:e8:cc:
96:fa:c6:a0:4f:d5:9e:0b:93:f9:9f:b5:f9:bf:c5:75:b5:21:
fd:f9:58:68:fa:dc:82:47:31:6b:1e:c6:29:33:84:65:12:52:
1c:9b:ff:f5:7a:60:0e:3f:0c:1b:62:68:9b:ec:63:66:5d:32:
0d:82:40:16:f2:98:37:ff:00:60:61:7d:30:36:21:6f:bc:75:
51:53:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org