Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
File: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (raw, json)
Hash identifier: Qw2OI9+MD5VqriO6WOxSInNdtJa74AfRdb+iWLHcqXs=
Subject key identifier: CC:ED:42:3A:FE:1D:66:65:44:C0:1E:E0:91:42:A6:F6:AC:83:0B:B7
Certificate issuer: /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial: 1A3C3576FE77622E88025B0986489CC272F18D64
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
Signing time: Sun 30 Jun 2024 12:15:19 +0000
ROA not before: Sun 30 Jun 2024 12:10:19 +0000
ROA not after: Sun 29 Jun 2025 12:15:19 +0000
asID: 207960
IP address blocks: 2001:678:fc8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3c:35:76:fe:77:62:2e:88:02:5b:09:86:48:9c:c2:72:f1:8d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
Validity
Not Before: Jun 30 12:10:19 2024 GMT
Not After : Jun 29 12:15:19 2025 GMT
Subject: CN=CCED423AFE1D666544C01EE09142A6F6AC830BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:00:6a:8a:4f:57:1b:59:e8:63:fa:6e:c7:
7d:89:24:77:31:75:08:21:af:66:be:5b:1c:35:ed:
b4:19:12:95:ab:74:25:e7:a1:db:16:6b:38:60:b8:
bd:a5:d3:ce:72:d1:d0:29:61:7e:79:53:1b:af:a8:
4d:26:ab:1a:8c:2b:bb:54:c0:3b:c7:01:1f:33:be:
1b:cb:50:d0:8f:fd:1d:58:27:aa:60:0d:18:3b:4f:
13:35:92:60:7d:b2:eb:cf:72:95:b2:83:07:25:d5:
1f:bf:c8:9e:3c:60:73:b9:21:9a:6a:f6:54:48:ae:
8f:c3:d1:33:09:e7:63:4f:68:00:93:3b:8c:bb:6b:
da:a6:09:c3:13:cf:22:21:47:82:7f:61:61:34:61:
f4:72:ec:d4:38:02:b8:f7:16:84:07:e7:04:b0:c5:
88:eb:32:34:c4:52:b0:56:ef:b5:ee:0c:f2:b6:07:
a1:ee:3e:95:80:1c:ac:25:cd:b7:d3:69:19:f4:f1:
51:05:93:61:ea:1f:f3:1f:5b:3e:f7:01:85:94:5c:
de:55:2b:3e:29:b6:3f:75:a9:b8:f6:4f:4b:34:83:
25:b1:3a:00:4b:da:58:e3:a7:95:f1:01:d5:9d:64:
3f:eb:31:b3:04:6d:ae:b2:31:2e:0d:3e:ec:bf:12:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:ED:42:3A:FE:1D:66:65:44:C0:1E:E0:91:42:A6:F6:AC:83:0B:B7
X509v3 Authority Key Identifier:
keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:fc8::/48
Signature Algorithm: sha256WithRSAEncryption
53:aa:b1:fe:9b:27:77:02:26:28:d1:24:4e:61:5f:e4:f5:6b:
3d:a8:5a:af:2a:7f:a3:06:e9:dd:ce:2b:08:cd:37:47:8a:01:
f6:56:57:3e:b3:e5:c9:63:73:4c:35:ab:8c:37:8f:68:d6:9c:
32:fb:bb:2c:df:dd:68:7c:6e:19:e7:4f:be:17:7a:78:fb:26:
c8:07:7f:35:fc:44:6c:a3:2e:61:5e:0d:34:ec:ba:a7:a3:46:
07:5f:a0:76:07:e9:d0:8d:67:c8:72:b9:b8:39:ed:35:d5:27:
72:d1:48:59:29:3a:a7:77:ae:50:45:c9:1a:2e:23:26:be:e7:
73:f6:65:b7:44:4e:b6:21:f8:bc:3d:60:39:3c:b5:36:3c:cf:
ba:81:86:88:0e:71:04:bf:5e:2a:44:4d:c7:dc:c2:77:d1:1c:
84:ba:46:64:8a:0f:bd:33:a9:fb:4e:28:70:02:ac:e3:48:ef:
f3:da:70:da:7e:ff:c6:0a:4d:8f:d7:35:7d:ec:fb:62:ff:0b:
21:f1:84:d2:86:21:cb:dd:47:9b:ac:6c:55:14:10:d8:3a:d5:
e1:f6:18:c2:ba:93:f3:f5:fd:65:e5:e8:93:e1:a1:33:a9:44:
22:4d:ec:4b:fb:7d:f5:8d:8b:2f:0f:f2:dd:3a:0a:42:fc:7f:
45:5d:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 18:17:57 2024 by rpki-client on console-fra.rpki-client.org