Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa
File: 326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa (raw, json)
Hash identifier: i7ycL1VdQKdj6JlBhzbSnK6agd5/KvQ/v8/9VlHoQSo=
Subject key identifier: 6A:CF:2A:74:23:57:C9:24:76:A1:F6:45:CD:1B:56:B0:91:4D:4B:A7
Certificate issuer: /CN=fc59950e49df88985ab0727278320c684d2074be
Certificate serial: 7F78A7CF22E5331232BD6D2BF232D1522E1CEC74
Authority key identifier: FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa
Signing time: Sat 27 Apr 2024 15:41:51 +0000
ROA not before: Sat 27 Apr 2024 15:36:51 +0000
ROA not after: Sat 26 Apr 2025 15:41:51 +0000
asID: 215751
IP address blocks: 2a0b:4e04:42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.crl
rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:78:a7:cf:22:e5:33:12:32:bd:6d:2b:f2:32:d1:52:2e:1c:ec:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc59950e49df88985ab0727278320c684d2074be
Validity
Not Before: Apr 27 15:36:51 2024 GMT
Not After : Apr 26 15:41:51 2025 GMT
Subject: CN=6ACF2A742357C92476A1F645CD1B56B0914D4BA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:2a:1a:ed:76:0c:42:f5:66:16:c3:53:64:
88:f1:cd:ec:c3:f5:70:b0:25:36:cd:3e:7b:db:6a:
95:c1:2b:35:91:de:85:c2:0a:29:61:86:24:83:9a:
a3:9d:e5:d3:43:a1:95:ba:59:8c:23:de:9f:84:42:
c3:90:2f:c0:93:ee:d0:da:15:06:b4:50:28:3b:38:
1f:a6:55:9f:10:2f:c0:ba:5e:2f:7e:26:58:1b:4d:
b4:46:02:bc:8b:f3:b0:a4:77:14:2a:67:73:60:96:
b4:e4:3f:85:ee:c7:ae:9a:05:a5:11:30:99:e5:1b:
4a:c6:9f:df:87:a6:ff:b2:e7:bc:17:6d:8d:76:70:
2f:9c:df:e5:5f:99:71:c9:d0:d8:8a:1e:eb:01:9f:
74:c4:3d:81:d0:3a:32:2e:3b:10:83:4b:4c:f8:e6:
66:d8:96:c9:b4:8c:88:67:54:ef:7b:14:a7:f5:71:
b3:a5:6e:67:3e:ef:4b:74:66:6d:44:a4:a0:b4:11:
68:a7:27:2f:db:19:87:d6:3a:f2:4c:23:db:87:4a:
b4:ac:ee:eb:ab:0d:92:6a:21:9b:14:36:6e:45:8c:
96:4c:9b:f9:2a:49:80:f2:c0:66:11:6b:a8:5d:70:
76:f6:8d:b4:a3:0f:b0:e0:f4:ab:95:db:9e:5c:15:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CF:2A:74:23:57:C9:24:76:A1:F6:45:CD:1B:56:B0:91:4D:4B:A7
X509v3 Authority Key Identifier:
keyid:FC:59:95:0E:49:DF:88:98:5A:B0:72:72:78:32:0C:68:4D:20:74:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/FC59950E49DF88985AB0727278320C684D2074BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FmVDknfiJhasHJyeDIMaE0gdL4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fb30d3de-e574-4a23-a1bd-5f1fa05c53be/0/326130623a346530343a34323a3a2f34382d3438203d3e20323135373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04:42::/48
Signature Algorithm: sha256WithRSAEncryption
74:50:42:06:af:51:08:e5:96:da:30:10:d0:09:11:ba:9f:a8:
a8:78:a6:3e:53:37:a2:15:6c:8e:83:11:11:ad:9d:26:aa:5c:
14:e6:25:7c:1b:cd:d8:cf:0d:0e:de:f7:eb:60:da:24:f2:b6:
bf:cb:05:1f:03:90:b5:42:c9:54:cb:d6:4c:f0:0d:2f:29:06:
68:b1:b7:a1:c0:cf:61:81:3b:be:6f:d8:f6:3b:d8:0a:94:60:
bf:3f:ff:82:53:87:ec:64:c8:b5:79:aa:6d:6f:f8:99:61:e2:
c7:f6:43:83:38:38:17:53:54:cb:02:bc:47:f5:03:05:9f:5c:
39:04:a6:d7:e5:3f:a9:9e:4c:08:09:d6:0f:44:64:d1:80:99:
95:3f:83:4b:2d:70:fa:10:b2:cc:9f:92:03:35:61:55:44:da:
ac:d6:97:3b:eb:88:07:7e:60:e5:69:19:5c:1d:38:93:76:26:
bb:51:cc:b6:db:ed:af:80:4b:1e:16:96:0d:bf:27:4b:f4:91:
8f:4c:dd:b2:b4:27:50:94:fb:79:54:2e:12:be:fe:57:08:f5:
5e:d2:cf:c4:70:61:47:fb:60:c0:d9:83:6c:ac:1a:ac:6c:a8:
2f:cc:a7:71:ca:91:66:dc:10:e0:e9:fc:86:39:fc:51:60:c8:
f8:de:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:48:18 2024 by rpki-client on console-ams.rpki-client.org