Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa
File: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (raw, json)
Hash identifier: TMlytZ8X0slW9x4jJKyuBdUnUnMpROm7M/wSYhg+WrM=
Subject key identifier: 01:75:D3:2E:2A:E1:D6:83:8D:CF:D4:22:3C:72:AC:71:78:1C:57:A9
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 5A9EA7E14C5A9A63E09634D73695EEC1A5CE009C
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa
Signing time: Tue 25 Jun 2024 15:49:18 +0000
ROA not before: Tue 25 Jun 2024 15:44:18 +0000
ROA not after: Tue 24 Jun 2025 15:49:18 +0000
asID: 200198
IP address blocks: 2a11:5701:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9e:a7:e1:4c:5a:9a:63:e0:96:34:d7:36:95:ee:c1:a5:ce:00:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Jun 25 15:44:18 2024 GMT
Not After : Jun 24 15:49:18 2025 GMT
Subject: CN=0175D32E2AE1D6838DCFD4223C72AC71781C57A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:b8:f6:14:82:09:90:81:f7:b4:b5:ad:3e:
ff:d1:44:8a:37:bf:77:eb:66:27:1f:dd:09:a3:5a:
77:50:5a:4c:ec:a8:4e:2e:19:db:67:7a:d7:6a:44:
62:99:da:cf:2b:1f:0f:ac:4c:3f:63:22:b0:0e:94:
ea:67:81:7d:eb:01:8b:f0:76:f3:71:58:c3:2c:6f:
ab:1c:e5:e5:f7:3d:2e:0c:be:39:eb:f9:c6:87:56:
fb:b9:fc:cf:51:c9:fb:d6:47:78:77:6f:a2:f3:2f:
6b:9b:4d:65:39:46:fb:3e:d4:8c:cf:82:96:3c:c1:
67:e2:5d:be:ab:de:56:99:3f:6b:bf:25:fd:69:e2:
3e:26:d0:30:7c:09:f0:ba:c7:1e:de:22:74:44:e3:
c8:25:a1:57:e0:c1:70:5a:08:a1:15:b4:25:2d:e0:
19:0f:35:e9:72:13:25:b9:7e:40:3b:45:92:78:19:
0a:f7:95:30:ff:de:fc:0e:6f:2d:65:d0:1b:5d:00:
a1:82:ee:91:9f:2a:ad:be:44:ca:cc:c7:96:3a:37:
8c:73:60:4e:9b:e5:2c:20:0a:15:e1:5e:bc:26:eb:
5b:e2:6d:15:14:dc:77:77:72:df:12:9f:ec:70:f5:
bd:e5:a8:2b:c7:80:25:bb:0d:c0:51:fe:3f:bd:66:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:D3:2E:2A:E1:D6:83:8D:CF:D4:22:3C:72:AC:71:78:1C:57:A9
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5701:10::/44
Signature Algorithm: sha256WithRSAEncryption
84:69:d7:ce:b3:45:e1:49:58:03:6b:30:58:e3:41:a5:95:48:
18:75:28:a3:e3:ee:9d:17:1e:b8:71:da:9d:f3:4d:cf:f4:6f:
16:c0:9f:22:98:fe:61:e7:67:89:da:bf:91:88:44:3f:00:43:
8f:97:bd:52:cc:8e:f1:d3:ac:55:b7:dd:f4:74:cb:5c:cc:38:
82:a3:bc:ee:bf:55:dd:ea:ea:8b:50:f7:98:f9:b1:a3:d5:b3:
e6:a5:07:1f:d0:aa:24:e2:65:e0:83:73:d8:5f:45:e7:dc:74:
31:4c:5c:47:aa:f6:20:a6:d9:ca:0b:f5:f2:b5:cb:db:fd:a9:
82:83:03:bf:b0:7f:e3:ff:4c:c0:58:5a:e0:4f:35:7b:38:85:
16:a4:21:1e:e9:0c:05:3c:6a:5d:37:3e:44:62:1e:60:7d:46:
2f:19:35:23:38:f4:f0:f1:4f:37:15:5b:14:11:ae:6e:0f:e7:
a7:73:b3:0a:7a:79:4c:b3:f3:3a:ee:74:17:f4:8f:16:c6:80:
9b:78:fe:ec:13:a6:f7:0a:1b:1b:a6:ed:04:28:3f:c6:b6:1d:
87:aa:52:18:27:a8:e0:71:6c:a8:80:67:1c:3f:3f:e9:a6:d7:
87:28:ca:53:76:3a:d3:5a:d2:82:c2:97:01:a9:46:02:c3:56:
5a:f2:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:51 2025 by rpki-client