Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
File: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (raw, json)
Hash identifier: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=
Subject key identifier: F5:F9:B7:F8:B2:44:6C:13:F1:29:E2:52:60:97:2E:51:E2:63:A7:33
Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Certificate serial: 558704951C068006064C8583A074DB11613C33CB
Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
Signing time: Fri 13 Sep 2024 20:09:37 +0000
ROA not before: Fri 13 Sep 2024 20:04:37 +0000
ROA not after: Fri 12 Sep 2025 20:09:37 +0000
asID: 202881
IP address blocks: 2001:67c:2be8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Nov 2024 15:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:87:04:95:1c:06:80:06:06:4c:85:83:a0:74:db:11:61:3c:33:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8
Validity
Not Before: Sep 13 20:04:37 2024 GMT
Not After : Sep 12 20:09:37 2025 GMT
Subject: CN=F5F9B7F8B2446C13F129E25260972E51E263A733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:d5:37:ea:4a:e5:16:1d:91:39:82:6b:b3:
42:ba:1f:a9:f0:ab:50:62:5a:5b:66:24:fe:22:ff:
9c:88:f1:2f:73:1c:f8:a6:08:5c:b5:7d:7e:fc:95:
7f:ba:ff:3e:cf:3e:dd:af:94:46:47:a7:61:8c:8b:
44:3d:88:39:e4:6b:ea:6d:66:1a:69:2e:b1:06:25:
f6:b1:82:54:c4:40:8b:4b:66:f7:3f:5a:76:6b:ad:
1e:40:cd:9b:7a:30:e8:b3:49:57:a7:9b:0f:22:b8:
2a:f2:e1:0a:8e:08:d0:fc:9b:0c:76:96:0e:2e:f0:
e7:75:25:9e:e2:78:67:7c:06:34:be:f1:67:a0:d6:
6e:cd:6e:da:5c:c9:b3:3c:e0:4e:43:d7:c8:6e:e5:
3e:ca:ab:5e:b1:c5:a7:2e:81:d4:83:e2:e4:e5:c6:
51:2b:56:fc:c5:bc:42:55:12:ee:81:9e:0c:b8:4b:
ee:4a:21:98:29:6b:94:85:e8:a3:50:e6:a5:ba:60:
00:77:0f:3d:1e:73:b0:50:ca:74:a5:41:ed:23:de:
f9:be:f5:6e:48:53:0b:be:32:21:3a:7b:d6:5c:a3:
b4:ad:66:a5:17:7c:1f:a1:93:1b:e5:d4:96:f2:30:
8c:87:80:8c:e0:da:55:fc:14:80:68:a7:ef:6e:2f:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:B7:F8:B2:44:6C:13:F1:29:E2:52:60:97:2E:51:E2:63:A7:33
X509v3 Authority Key Identifier:
keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2be8::/48
Signature Algorithm: sha256WithRSAEncryption
27:87:e7:70:d5:7e:54:55:62:03:db:91:55:5d:aa:a3:07:76:
d9:d0:a6:fc:5e:3d:30:50:f6:0a:e3:ae:78:14:25:69:8e:04:
64:bd:94:94:fc:7e:71:2d:f7:aa:04:04:66:96:2e:86:0f:72:
a2:43:4a:4a:ec:3d:7d:a3:1d:05:aa:e3:a1:b8:1b:e1:23:47:
e8:5e:bf:e8:a6:ce:b1:3e:b6:63:29:75:fb:09:a9:75:ee:a1:
96:f6:1f:2d:da:a8:fe:94:23:99:b4:48:4e:70:e8:7e:5a:13:
1d:81:3c:a3:9d:d3:3d:fb:4f:d3:cc:6d:ef:bc:bb:04:8a:8f:
89:c9:a3:6e:e2:a4:17:15:b5:f3:8a:33:12:07:01:1d:38:b5:
ac:b5:e4:dd:2e:62:76:b1:72:91:13:aa:9b:53:1a:9b:59:78:
9a:b0:a6:c9:2d:21:e4:bb:22:cb:07:d0:3c:a0:80:d9:0b:1b:
14:95:33:86:8d:ce:4f:e6:98:3f:54:7a:e5:bc:ab:fb:8e:75:
94:3f:15:d7:48:79:05:b4:48:bd:fc:f9:84:49:77:69:7d:17:
f0:95:13:d8:a5:db:ed:8f:5d:a8:32:b4:be:82:07:a1:40:49:
23:ce:57:31:9a:62:aa:9b:1e:73:36:cc:54:73:ce:5d:fe:58:
92:c0:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:55:34 2024 by rpki-client on console-fra.rpki-client.org