Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa
File: 326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier: CqhLchBcwteTA2UPmKctbcElkZjqTuDjTDMOvO0SMqA=
Subject key identifier: A1:EB:95:D9:EC:C7:BE:3F:06:39:61:00:C0:94:58:B1:5B:F9:54:4C
Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial: 78C1FB46F1BFBEA8FF67E1272C1EC6761CBAFC0E
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa
Signing time: Thu 06 Mar 2025 13:30:28 +0000
ROA not before: Thu 06 Mar 2025 13:25:28 +0000
ROA not after: Thu 05 Mar 2026 13:30:28 +0000
asID: 31898
IP address blocks: 2a0a:6044:6d00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c1:fb:46:f1:bf:be:a8:ff:67:e1:27:2c:1e:c6:76:1c:ba:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Validity
Not Before: Mar 6 13:25:28 2025 GMT
Not After : Mar 5 13:30:28 2026 GMT
Subject: CN=A1EB95D9ECC7BE3F06396100C09458B15BF9544C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:5c:ac:c1:fb:e3:ab:4b:58:2d:9d:0a:b9:
d8:d4:e9:89:65:71:36:b9:74:4c:81:f4:a8:1a:e4:
a1:67:4a:63:05:fd:80:66:c7:14:bb:aa:bd:13:44:
2a:99:fa:ef:9e:8d:0a:71:00:7a:4a:1a:37:55:f0:
04:da:38:8c:fd:7e:cb:e2:2c:78:bf:de:06:f1:6e:
aa:83:f3:b4:e8:ba:4c:08:cd:d8:68:b1:e7:92:3f:
a8:68:63:f0:9c:55:fb:90:da:63:45:27:12:0d:6a:
87:77:7c:23:7e:07:4f:26:99:d4:31:b6:57:44:5d:
7d:60:ac:e1:43:dc:e0:4f:4e:32:5b:84:97:62:9c:
7b:e7:71:65:c6:18:20:af:45:36:32:78:19:96:ce:
45:90:38:47:c7:20:31:e8:34:4e:82:f6:a0:62:b9:
16:a3:1c:c3:c2:0e:f5:09:03:c0:15:fe:cd:e1:b2:
a7:f1:3a:b5:4e:84:a1:ad:0d:54:f1:93:95:a3:ce:
f7:f8:51:9d:fa:bc:cc:9e:5f:d9:06:9c:a4:04:a3:
51:56:f1:f4:fe:7b:60:32:27:54:22:8f:89:13:21:
85:fb:fe:3d:22:b7:a5:5a:5b:23:66:c4:8b:2b:7b:
b6:e5:b4:5b:9d:66:b1:dd:3a:60:d8:ad:06:65:0c:
b9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:95:D9:EC:C7:BE:3F:06:39:61:00:C0:94:58:B1:5B:F9:54:4C
X509v3 Authority Key Identifier:
keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130613a363034343a366430303a3a2f34382d3438203d3e203331383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:6d00::/48
Signature Algorithm: sha256WithRSAEncryption
a5:af:c0:0d:34:19:ba:8a:ea:c6:2e:69:7f:73:41:82:9d:69:
98:34:08:e5:fa:4a:ee:3c:79:19:8c:01:fd:15:df:76:7e:d5:
9c:35:35:b3:fb:46:68:06:51:96:88:fc:53:dc:21:84:e5:a9:
cf:63:6c:9a:ff:31:2e:1e:0b:03:1c:22:a9:e0:70:01:df:ac:
c5:23:0d:c4:8b:4d:5b:13:be:e7:c2:c7:b9:4e:bc:b0:8e:04:
02:68:42:08:c2:bb:bf:6f:28:52:8e:ac:a1:06:74:dd:34:c8:
2c:c1:ef:2c:fd:b8:99:36:00:bf:76:e2:ff:12:e2:ed:ed:a2:
cd:4f:78:92:6a:2e:1b:93:c4:f3:c6:2f:54:39:9b:39:5f:74:
b7:3a:d1:70:5b:b1:7d:ec:ce:22:72:7b:f4:e4:44:c7:ee:19:
3a:dc:3b:1d:24:8a:e9:3b:39:c2:b0:b2:3c:e4:56:4e:b5:2a:
eb:60:75:46:ef:ad:48:23:68:b6:e4:e3:0e:74:b3:c1:6c:b3:
bd:59:c2:01:64:a8:41:31:ce:c7:93:93:1d:19:7c:ec:bc:26:
c3:16:26:10:ef:db:4e:9c:c7:3d:1e:3a:1b:be:b3:e3:9f:01:
ca:35:48:bb:82:f7:60:fa:78:4e:9c:18:e4:d8:74:ff:fa:1a:
0c:af:6f:a5
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUeMH7RvG/vqj/Z+EnLB7Gdhy6/A4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMx
OEMyM0IzNjAeFw0yNTAzMDYxMzI1MjhaFw0yNjAzMDUxMzMwMjhaMDMxMTAvBgNV
BAMTKEExRUI5NUQ5RUNDN0JFM0YwNjM5NjEwMEMwOTQ1OEIxNUJGOTU0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiwVyswfvjq0tYLZ0KudjU6Yll
cTa5dEyB9Kga5KFnSmMF/YBmxxS7qr0TRCqZ+u+ejQpxAHpKGjdV8ATaOIz9fsvi
LHi/3gbxbqqD87ToukwIzdhoseeSP6hoY/CcVfuQ2mNFJxINaod3fCN+B08mmdQx
tldEXX1grOFD3OBPTjJbhJdinHvncWXGGCCvRTYyeBmWzkWQOEfHIDHoNE6C9qBi
uRajHMPCDvUJA8AV/s3hsqfxOrVOhKGtDVTxk5Wjzvf4UZ36vMyeX9kGnKQEo1FW
8fT+e2AyJ1Qij4kTIYX7/j0it6VaWyNmxIsre7bltFudZrHdOmDYrQZlDLlHAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUoeuV2ezHvj8GOWEAwJRYsVv5VEwwHwYDVR0j
BBgwFoAUzNXTvklFb31ItzIQKciG8xjCOzYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjc5NDg3MzgtMzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5
OTVkLzMvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMyM0IzNi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvQ0NENUQzQkU0OTQ1NkY3RDQ4QjczMjEwMjlDODg2RjMxOEMy
M0IzNi5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjc5NDg3Mzgt
MzI1NS00OWY5LTliNmMtOWM5ZjM4OTg5OTVkLzMvMzI2MTMwNjEzYTM2MzAzNDM0
M2EzNjY0MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzEzODM5Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqCmBEbQAwDQYJKoZIhvcNAQELBQADggEBAKWvwA00GbqK6sYuaX9z
QYKdaZg0COX6Su48eRmMAf0V33Z+1Zw1NbP7RmgGUZaI/FPcIYTlqc9jbJr/MS4e
CwMcIqngcAHfrMUjDcSLTVsTvufCx7lOvLCOBAJoQgjCu79vKFKOrKEGdN00yCzB
7yz9uJk2AL924v8S4u3tos1PeJJqLhuTxPPGL1Q5mzlfdLc60XBbsX3sziJye/Tk
RMfuGTrcOx0kiuk7OcKwsjzkVk61KutgdUbvrUgjaLbk4w50s8Fss71ZwgFkqEEx
zseTkx0ZfOy8JsMWJhDv206cxz0eOhu+s+OfAco1SLuC92D6eE6cGOTYdP/6Ggyv
b6U=
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:06:35 2025 by rpki-client