Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/KyOsOL4D9eEPjsmTbByq1PkKZds.roa
File: KyOsOL4D9eEPjsmTbByq1PkKZds.roa (raw, json)
Hash identifier: 3sy4S4/yLlpIFYW5jT8fBCztibnQkn7ujmkA73mt2AA=
Subject key identifier: 2B:23:AC:38:BE:03:F5:E1:0F:8E:C9:93:6C:1C:AA:D4:F9:0A:65:DB
Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial: 018E13BD0F3655309CAD8BB95B413C05BCCB
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/KyOsOL4D9eEPjsmTbByq1PkKZds.roa
Signing time: Wed 06 Mar 2024 12:29:01 +0000
ROA not before: Wed 06 Mar 2024 12:29:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215655
IP address blocks: 2a14:1600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:bd:0f:36:55:30:9c:ad:8b:b9:5b:41:3c:05:bc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Validity
Not Before: Mar 6 12:29:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b23ac38be03f5e10f8ec9936c1caad4f90a65db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:96:6c:0b:f1:6c:96:58:47:12:b4:e9:d7:99:
33:ea:a1:5d:fb:cf:05:73:c3:9e:e0:c8:57:93:52:
8d:84:ee:91:b4:48:40:36:7c:26:b0:88:8c:a0:fa:
9f:37:b2:58:ae:76:3a:c8:5c:05:8a:2f:62:04:14:
9b:e3:f4:4f:58:92:2e:f3:f3:78:5f:a7:6f:a5:74:
f5:4e:71:3c:8f:e2:3f:aa:f0:d9:06:13:08:34:68:
99:21:8c:d7:e1:32:ba:5d:ca:80:38:d4:f6:41:6a:
45:c8:19:35:7b:7d:89:b0:fa:94:77:56:eb:bc:3d:
b9:6c:18:0d:c1:c2:bd:8f:e8:06:ea:2b:f6:99:6e:
ce:f5:24:f7:04:23:ec:6a:dd:6e:1f:64:63:50:98:
ea:8d:e9:c3:2f:c3:b0:69:06:86:d6:0a:f3:72:ff:
60:08:ba:c8:4b:b2:ec:e2:0c:7d:df:93:0c:f3:88:
22:d0:24:b5:63:27:b1:23:84:da:0c:b9:c3:21:cc:
85:3a:00:69:93:28:8b:ba:d0:46:e3:52:92:dd:11:
46:92:d9:71:eb:36:a2:9b:d1:58:93:74:00:6b:5a:
07:ea:a2:68:ea:68:36:4e:ea:94:82:6f:14:97:7c:
94:04:7c:01:e4:58:99:a3:e2:eb:48:b1:c1:7f:f8:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:23:AC:38:BE:03:F5:E1:0F:8E:C9:93:6C:1C:AA:D4:F9:0A:65:DB
X509v3 Authority Key Identifier:
keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/KyOsOL4D9eEPjsmTbByq1PkKZds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1600::/29
Signature Algorithm: sha256WithRSAEncryption
82:04:5e:35:0c:0d:62:69:0f:e0:2b:44:51:85:58:95:18:94:
84:2b:c5:af:7b:97:72:2c:68:46:70:ca:3b:85:28:63:fc:cd:
f5:fb:b6:6d:c9:cd:56:ff:67:15:99:4d:a9:3e:5e:09:d4:56:
83:e3:e1:6f:b1:40:31:da:29:86:5c:78:f5:bf:b3:7e:81:97:
12:76:b5:f9:9f:7d:80:18:6c:81:99:f6:36:5e:e2:fa:9f:ae:
75:32:aa:da:22:53:68:f5:00:91:96:3f:7b:8b:16:bb:44:d7:
7b:11:b1:96:f5:fd:0e:9f:11:31:7f:66:5e:fb:b0:12:30:7a:
36:b1:d9:b7:fb:fd:3d:e3:67:14:ce:9e:c0:db:09:94:f5:be:
df:1f:6a:c9:e4:68:9e:50:3d:8c:13:20:4c:3b:33:7e:f3:1c:
3f:6c:13:94:b3:5d:35:c2:18:2f:bd:66:47:f8:c6:88:99:f9:
04:01:7b:2d:2b:1a:42:91:6a:3d:8b:0b:fa:f7:aa:6d:92:9a:
5e:5b:27:52:fd:64:3e:63:5d:a7:cb:4a:0f:75:2e:c8:d0:84:
99:99:ac:95:72:83:f5:33:25:35:61:33:c1:6a:1e:6d:fb:d5:
c9:28:78:53:8e:b5:36:5d:a4:fc:43:91:f5:a4:fb:9e:88:cd:
d2:75:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:57 2024 by rpki-client on console-fra.rpki-client.org