Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a613a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a613a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: /5S+W9QCtJwOfe7wq86kTj0lV5XpwFqPxGCvMqIpS5o=
Subject key identifier: 0C:AF:A1:C7:0F:59:79:7B:2B:FD:62:68:6D:48:35:38:59:76:2E:08
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 4B29D2FF12A6982CE562AB57A3509F9907CEBADF
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a613a3a2f34382d3438203d3e2039303039.roa
Signing time: Fri 14 Jun 2024 09:59:01 +0000
ROA not before: Fri 14 Jun 2024 09:54:01 +0000
ROA not after: Fri 13 Jun 2025 09:59:01 +0000
asID: 9009
IP address blocks: 2a13:9500:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:29:d2:ff:12:a6:98:2c:e5:62:ab:57:a3:50:9f:99:07:ce:ba:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Jun 14 09:54:01 2024 GMT
Not After : Jun 13 09:59:01 2025 GMT
Subject: CN=0CAFA1C70F59797B2BFD62686D48353859762E08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:79:d5:3b:bb:ba:21:df:87:8a:17:4c:b5:
fb:60:79:ab:cd:39:6a:19:6b:4b:4f:b0:88:54:a1:
f5:29:9e:a8:e7:54:b2:57:0b:dd:a3:35:19:f3:b5:
96:b1:6b:79:86:38:95:2b:2f:a5:23:35:79:ff:17:
32:8b:5b:7d:2d:8d:c8:7a:98:55:85:c8:ed:7f:c4:
1f:4c:f3:a3:fc:51:a4:ed:51:f0:f7:ec:8a:c3:54:
1b:91:ee:59:6d:57:aa:3c:0a:b4:a2:f1:ad:86:14:
38:f0:b8:b5:fc:c1:0c:b4:a0:3a:f7:aa:1c:09:52:
a6:3d:21:bf:dd:45:cd:80:8f:15:c9:00:9f:a8:91:
ef:8b:df:02:76:6d:c6:ca:04:5f:1f:57:dc:c5:8f:
42:d9:8a:ba:f8:fb:51:7b:51:3f:b1:88:6f:d4:69:
6e:f2:58:3c:e9:9b:90:73:da:7b:0d:09:5b:61:d8:
ea:88:7f:df:d7:79:f7:e6:73:42:f8:b0:86:13:62:
ce:47:99:ba:df:2d:35:c7:51:af:08:b4:9c:ab:50:
03:7f:4e:f5:b7:40:5c:c6:9a:c9:e5:e1:f1:aa:6d:
89:76:11:08:02:7f:2c:7e:12:d4:29:6b:26:bb:a7:
19:5c:97:b6:34:c8:b1:ba:59:f1:ed:7a:63:84:9f:
df:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AF:A1:C7:0F:59:79:7B:2B:FD:62:68:6D:48:35:38:59:76:2E:08
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a613a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:a::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1d:6c:4d:ce:ff:a1:a2:9d:e3:53:67:3c:b0:d3:0c:fc:54:
9d:34:fa:d0:20:48:15:54:16:56:47:77:b2:97:a8:00:b2:2a:
c1:1e:b4:10:dd:d9:70:94:74:4e:36:6c:a0:d1:30:6b:50:b2:
77:a0:50:93:11:a8:96:f1:3e:b6:1f:77:85:9f:9e:0f:e3:89:
4d:37:60:0f:c6:04:c5:65:44:53:d4:cf:b8:bb:09:27:eb:bc:
c1:57:0e:6d:7a:79:0d:d4:6f:de:70:01:fd:97:ac:e7:b7:8a:
43:b5:75:94:a1:3f:6d:bb:65:ab:5f:41:2d:81:1b:88:e4:b5:
55:63:81:79:8c:21:09:58:09:22:39:67:55:c5:01:bd:b9:6e:
ca:c1:d7:ee:bb:e8:96:58:54:ae:64:fa:39:64:25:b1:41:bc:
c9:cc:71:a0:ed:0f:a1:5b:6c:b7:43:76:08:55:8d:01:f3:76:
79:b6:5e:13:21:4a:ca:62:63:c3:70:21:09:e4:28:97:90:6a:
0f:11:65:45:f8:0b:bc:cb:db:87:20:a8:48:9d:c7:57:91:2d:
9a:6b:f3:88:ac:50:aa:8b:ce:87:f5:0a:8e:fd:8f:5a:6a:6e:
2b:df:69:47:67:34:b3:40:a0:6d:41:54:55:b0:08:09:39:47:
44:03:fb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org