Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34623a3a2f34382d3438203d3e20323133393832.roa
File: 326131313a323963303a34623a3a2f34382d3438203d3e20323133393832.roa (raw, json)
Hash identifier: X2nNYBujG87RIaRNkG+Uou3WlJH6odhKiUGhN1ERNB8=
Subject key identifier: 5B:E5:68:BE:1E:6A:C8:BD:15:97:8A:35:15:D9:D5:31:04:ED:A5:46
Certificate issuer: /CN=e96d85996e9354d1005e44c781d38adcf1082873
Certificate serial: 065BEC672FC188D92F0AB24AA6281A748876B952
Authority key identifier: E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34623a3a2f34382d3438203d3e20323133393832.roa
Signing time: Mon 14 Apr 2025 21:09:38 +0000
ROA not before: Mon 14 Apr 2025 21:04:38 +0000
ROA not after: Mon 13 Apr 2026 21:09:38 +0000
asID: 213982
IP address blocks: 2a11:29c0:4b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.mft
rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 18:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5b:ec:67:2f:c1:88:d9:2f:0a:b2:4a:a6:28:1a:74:88:76:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96d85996e9354d1005e44c781d38adcf1082873
Validity
Not Before: Apr 14 21:04:38 2025 GMT
Not After : Apr 13 21:09:38 2026 GMT
Subject: CN=5BE568BE1E6AC8BD15978A3515D9D53104EDA546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:e8:36:12:82:7a:30:60:03:c5:44:5a:de:
26:77:88:f4:e1:86:0a:74:14:e8:04:dc:a5:10:a5:
19:68:5b:78:2a:97:a7:d7:86:f4:61:ec:bc:2c:4a:
fc:ac:53:1c:f0:86:b8:a7:2e:f3:36:78:71:5e:29:
be:3c:1f:8e:c3:81:dc:19:54:8b:64:ed:d1:58:f6:
f1:31:ab:e7:97:4f:f1:57:29:89:83:ba:bc:b7:d2:
3d:12:18:e1:54:b9:9b:06:30:f1:ff:65:12:1d:6d:
d3:7e:f2:a9:84:30:83:f8:bd:97:84:2e:24:74:16:
9c:a2:3c:08:9a:12:04:45:d7:5e:1d:38:1c:de:64:
1c:35:35:fb:16:25:a9:33:e9:1d:99:22:6c:17:3b:
70:43:5e:ca:8e:c2:b7:08:72:73:98:4b:55:ff:50:
7c:76:59:ad:56:ff:34:1b:bf:dd:f8:86:02:10:31:
fe:cc:d9:09:00:56:4d:ae:e8:92:97:bd:1f:28:ca:
bb:60:e7:34:9c:cc:6a:2e:da:31:2a:f9:21:b7:6c:
81:91:b2:eb:5a:41:ed:65:d7:49:ee:3d:76:41:59:
c3:ab:48:b6:91:cb:c4:bc:7a:ba:ce:d7:2e:dc:f7:
c9:6e:47:de:f4:2b:1b:aa:c9:43:b8:b0:d3:2b:2a:
46:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:68:BE:1E:6A:C8:BD:15:97:8A:35:15:D9:D5:31:04:ED:A5:46
X509v3 Authority Key Identifier:
keyid:E9:6D:85:99:6E:93:54:D1:00:5E:44:C7:81:D3:8A:DC:F1:08:28:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/E96D85996E9354D1005E44C781D38ADCF1082873.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6W2FmW6TVNEAXkTHgdOK3PEIKHM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/326131313a323963303a34623a3a2f34382d3438203d3e20323133393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:4b::/48
Signature Algorithm: sha256WithRSAEncryption
50:ee:c5:de:6e:eb:7b:8c:a3:01:d6:8b:63:73:04:b8:98:9c:
53:f1:e5:3a:8c:7c:e4:9b:32:21:a7:36:63:b5:e1:9e:d0:21:
65:9a:f0:73:f5:70:3d:5f:b8:91:a4:d3:d5:69:8e:44:30:1f:
36:c2:d7:b2:d5:e5:9c:cd:65:3d:14:20:6c:ef:58:1d:86:71:
17:a7:29:f7:0e:89:15:5e:01:28:c9:9c:d1:e5:65:fa:0d:e0:
22:7d:b2:21:ec:6f:b7:3a:ad:d8:d9:c8:98:ae:2d:6a:45:14:
ad:8f:25:21:32:7a:6e:a3:d2:1e:99:a0:a5:14:4c:a6:2b:13:
3e:f9:84:0d:ad:93:50:92:f2:5f:39:78:40:2a:92:e8:d2:8d:
77:6c:2c:73:1c:f4:f0:6a:c7:6b:6f:04:c6:c5:8c:62:1f:d6:
f1:2b:57:7c:a1:df:94:94:74:0b:41:fa:79:92:04:c3:72:0e:
21:7c:ad:12:93:ee:1d:9d:dd:a4:69:e5:8b:02:d2:70:a0:25:
ea:bd:4b:43:37:ef:ad:92:f0:27:e9:3e:55:fc:fb:8f:75:18:
ce:02:ca:df:87:73:71:c7:0f:16:a3:47:f3:93:45:b0:59:62:
ef:9a:4f:56:7c:09:3f:5a:a9:23:67:b5:5e:1b:29:1b:41:5a:
fd:16:cf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:25:06 2025 by rpki-client