Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa
File: 326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa (raw, json)
Hash identifier: GLrga7I6TmqAcqHZCyQLyo7wEkxzFEUlvkIYE9Jlscs=
Subject key identifier: 2A:D7:A7:A4:E3:1E:51:06:FA:75:B5:71:06:78:4F:33:09:48:2B:B7
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 5B54560810C8A872B381CA6A66A1A225A48B18C4
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa
Signing time: Thu 22 Aug 2024 15:50:19 +0000
ROA not before: Thu 22 Aug 2024 15:45:19 +0000
ROA not after: Thu 21 Aug 2025 15:50:19 +0000
asID: 215664
IP address blocks: 2a0d:b287:ecc0::/42 maxlen: 42
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Nov 2024 15:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:54:56:08:10:c8:a8:72:b3:81:ca:6a:66:a1:a2:25:a4:8b:18:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Aug 22 15:45:19 2024 GMT
Not After : Aug 21 15:50:19 2025 GMT
Subject: CN=2AD7A7A4E31E5106FA75B57106784F3309482BB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:fe:e6:01:7c:75:82:6a:40:3f:ed:d3:69:
52:f3:f5:e1:3d:45:da:77:af:11:7e:fb:da:0b:85:
e7:3b:5f:8d:41:ed:d1:b0:06:94:6b:d2:c2:a3:7f:
dc:6a:cc:6d:67:b7:cf:6c:52:fc:17:74:4c:d2:14:
a5:02:a6:7c:23:04:f6:8b:8c:b4:a1:aa:b8:1c:ed:
ef:33:e0:f4:6f:53:52:2b:f8:ef:ed:67:3a:14:2c:
ed:20:13:dd:f9:1d:fe:a4:54:70:53:a2:7a:31:2d:
3c:83:e1:d4:16:74:4d:a8:b7:ae:65:7e:95:94:98:
16:2b:5f:01:f7:02:4c:a3:9b:0c:56:e3:7f:b6:f8:
6b:42:f0:a3:04:e8:f1:f4:f2:d2:76:39:87:76:67:
ab:87:b0:f1:fa:b6:29:24:0b:a4:e3:1e:20:90:15:
0e:95:db:5d:e7:f5:7c:16:2e:2e:47:63:72:71:52:
01:79:52:e1:98:3a:47:89:a8:43:00:6b:41:7c:a0:
48:bb:c0:bd:dd:4f:0a:63:dc:e3:ba:4e:c8:89:49:
cb:4f:16:70:0e:20:f8:b9:10:77:51:0d:55:30:8a:
e4:69:b1:25:5f:a8:f9:16:ad:49:98:5a:67:1a:7d:
4a:2b:9e:99:e3:c5:f4:29:e3:33:ba:9e:6c:e8:02:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:A7:A4:E3:1E:51:06:FA:75:B5:71:06:78:4F:33:09:48:2B:B7
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/326130643a623238373a656363303a3a2f34322d3432203d3e20323135363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ecc0::/42
Signature Algorithm: sha256WithRSAEncryption
56:85:11:e1:53:71:0e:64:21:4c:66:d8:95:6a:54:f0:63:ff:
40:e6:6c:0d:9b:5c:c7:7f:a6:26:0c:ea:a8:1f:81:22:56:d6:
40:55:fe:6b:f3:b6:de:65:9f:6f:e4:91:5e:f9:af:0c:58:30:
a7:7f:1b:66:c4:f2:39:e0:36:72:c7:b9:b3:1c:fa:93:7e:15:
0c:f4:f7:60:53:8b:b1:30:b6:48:6b:9b:49:82:dc:2a:1e:0c:
e3:f5:40:67:79:a3:3a:c3:e3:34:94:74:b3:54:5b:6a:e7:52:
2a:47:f9:7b:f1:a0:ec:b7:98:5d:67:ce:c9:53:3d:cb:df:15:
3c:3e:7e:2d:5c:f9:59:47:5d:d4:83:b6:ea:43:9a:39:f0:cb:
12:b7:bc:db:38:24:01:e4:75:b4:f4:f4:95:31:43:48:56:ac:
35:64:bc:c6:cc:f9:9b:d7:ba:c0:6b:88:af:6d:8e:53:9a:9b:
b9:ab:e2:d8:2f:6d:35:60:df:6e:0e:8d:95:7a:47:fc:7c:12:
cc:c2:fa:d8:94:68:07:1c:6f:bf:45:62:1b:72:1c:6c:ca:3e:
88:25:79:80:09:a2:b2:f0:ac:7d:97:d6:f2:0b:fb:a5:0b:f5:
84:b7:3a:a8:91:a6:5f:e6:cc:b2:ff:2c:56:6f:68:23:a4:d0:
7e:15:b9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:15:05 2024 by rpki-client on console-fra.rpki-client.org