Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a643a3a2f34382d3438203d3e2039303039.roa
File: 326131333a393530303a643a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier: 1YrfGgUt1Z4kzwgvmtEN4fXajBelsHr2e2klrxQZE94=
Subject key identifier: 33:5A:88:53:C6:80:A2:B5:BD:CF:E6:A2:2E:09:86:C7:00:63:DA:E8
Certificate issuer: /CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Certificate serial: 0E3D89BBAB7B6E21D7F9E5AFE3FADC2E9F45B685
Authority key identifier: E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a643a3a2f34382d3438203d3e2039303039.roa
Signing time: Tue 11 Jun 2024 10:02:02 +0000
ROA not before: Tue 11 Jun 2024 09:57:02 +0000
ROA not after: Tue 10 Jun 2025 10:02:02 +0000
asID: 9009
IP address blocks: 2a13:9500:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:3d:89:bb:ab:7b:6e:21:d7:f9:e5:af:e3:fa:dc:2e:9f:45:b6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b29cf1b7e7b94f636eda75e229987364a40d4d
Validity
Not Before: Jun 11 09:57:02 2024 GMT
Not After : Jun 10 10:02:02 2025 GMT
Subject: CN=335A8853C680A2B5BDCFE6A22E0986C70063DAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dc:40:af:67:2c:a6:9d:a1:0f:58:4e:9f:a7:
24:57:cb:bf:2a:74:fa:58:6c:8c:b0:7d:f6:7f:34:
ac:dc:a1:9f:d8:24:28:1e:19:7a:ee:29:15:9d:c5:
44:aa:14:b0:64:1e:98:ff:af:c4:8e:d7:55:48:50:
87:4f:21:82:cb:89:07:e3:19:88:4f:6b:58:f4:33:
5c:86:e9:19:3a:74:51:f9:8e:59:18:41:44:3c:36:
35:cc:e0:11:ae:37:9c:23:38:95:b5:7c:47:aa:93:
36:74:89:5b:c9:22:42:a3:0b:1c:5b:41:d0:19:09:
e9:54:a6:a0:1c:6a:83:16:25:1f:17:04:ec:5e:c4:
d0:0b:33:73:69:1d:7c:02:5d:80:ef:8e:78:4d:46:
3a:30:cf:a9:41:5f:fb:75:c0:6e:36:b1:d1:6a:9e:
37:63:7f:78:02:80:1b:b8:90:ff:11:b6:f1:44:41:
6e:4d:f1:6e:b6:0a:3d:ca:8f:fc:40:2a:71:46:c4:
e3:ec:01:33:ad:b1:e4:47:55:db:51:89:d2:fb:17:
1c:6e:e8:4a:5d:de:51:83:d8:9d:df:3b:b4:98:0c:
fc:1f:8e:fa:a8:c6:b5:a2:26:82:1a:e8:76:9e:39:
fd:dd:ab:54:b6:38:94:d1:ee:94:7b:8e:eb:1c:58:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:88:53:C6:80:A2:B5:BD:CF:E6:A2:2E:09:86:C7:00:63:DA:E8
X509v3 Authority Key Identifier:
keyid:E8:B2:9C:F1:B7:E7:B9:4F:63:6E:DA:75:E2:29:98:73:64:A4:0D:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/E8B29CF1B7E7B94F636EDA75E229987364A40D4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LKc8bfnuU9jbtp14imYc2SkDU0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cc8ff7a9-54bb-42a5-b584-1c6684062d8a/0/326131333a393530303a643a3a2f34382d3438203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:d::/48
Signature Algorithm: sha256WithRSAEncryption
4b:34:3b:24:2e:5e:f7:5b:40:4b:25:50:4a:1f:e7:0b:55:24:
3a:69:34:8c:ea:11:2c:ff:81:ee:68:d3:7f:1f:e4:7b:38:9d:
11:62:a8:89:5e:e0:89:6a:dd:6f:7f:0b:60:ae:54:a9:52:5d:
91:2a:d7:94:9b:61:4c:0d:56:12:2a:83:b8:bf:a8:c9:e5:c7:
bb:52:a4:dd:73:ea:a9:1d:48:0d:b8:d9:c7:67:9a:52:cd:99:
b8:ac:0d:a6:c7:bc:6a:e4:7c:bb:9b:3d:e3:e2:f9:26:64:3c:
01:ab:82:a8:10:65:7e:d7:a5:a4:41:7d:d9:17:9a:44:1b:00:
06:b2:10:dc:94:63:c7:ce:c6:1a:f7:9c:6e:0f:fb:66:77:2c:
94:e0:3f:ad:15:9a:4d:a6:7c:63:37:17:c7:25:c7:cb:28:3c:
92:c4:01:74:3c:a5:dd:d1:81:7c:60:b7:6a:21:82:91:b3:78:
eb:07:43:ee:b3:b1:ab:60:ce:28:7c:ba:e3:13:15:63:97:71:
3b:51:d5:cb:a4:48:23:40:97:45:c3:f3:6f:3c:e0:73:c4:2d:
a9:79:d1:ae:b7:51:34:1f:59:dd:a0:0c:d4:07:a4:98:fc:d3:
83:c2:0a:ce:86:ba:73:d1:dd:e3:5c:ad:ff:63:da:36:f4:42:
f8:4e:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org