Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/WKR81Ddoq7fdT8t5hfMBat_BaD4.roa
File: WKR81Ddoq7fdT8t5hfMBat_BaD4.roa (raw, json)
Hash identifier: Z0DrvXLrHjp2tBoqh8W7yzW3sggjhBwe4Yu0f+z9rI8=
Subject key identifier: 58:A4:7C:D4:37:68:AB:B7:DD:4F:CB:79:85:F3:01:6A:DF:C1:68:3E
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 019333CB1F2D016C312FEB745B462DDA9D35
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/WKR81Ddoq7fdT8t5hfMBat_BaD4.roa
Signing time: Sat 16 Nov 2024 07:06:09 +0000
ROA not before: Sat 16 Nov 2024 07:06:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215137
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:33:cb:1f:2d:01:6c:31:2f:eb:74:5b:46:2d:da:9d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Nov 16 07:06:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a47cd43768abb7dd4fcb7985f3016adfc1683e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:6c:a2:13:ff:cb:5b:10:79:2e:86:87:4d:
56:ad:29:d6:3e:0e:51:13:b7:c2:6a:34:3a:68:e6:
87:93:e8:6e:57:c8:50:47:0f:7f:63:06:64:58:f9:
15:93:ec:0a:79:d3:d5:99:86:ec:9b:7f:f7:6b:69:
bc:ff:db:08:1b:fd:0f:09:8e:9f:db:76:89:97:98:
4e:bc:e9:1c:51:ab:bd:ae:08:92:bc:ce:cd:e6:e7:
8c:86:78:00:07:71:ad:dc:9b:21:17:d3:f8:f7:e7:
d1:56:a8:58:f4:e3:64:95:9b:dd:62:50:f1:06:e6:
f3:38:4c:0e:f7:dc:5b:73:72:24:cf:4c:8b:d4:d2:
d8:56:71:ed:ad:46:80:de:32:79:73:f8:40:3d:9c:
66:0b:25:7b:19:1a:f4:8e:af:60:a8:cf:27:7c:6b:
87:41:7c:a4:58:77:0d:78:57:8d:0c:84:0b:51:98:
12:c4:61:67:48:f5:46:82:e5:be:87:7c:cd:b3:86:
4b:17:04:cc:12:e4:1f:ed:9c:5b:03:ff:e2:0e:24:
f3:40:98:14:c3:ce:20:73:a9:77:ef:13:7a:43:e6:
04:e4:52:2f:1a:40:9c:61:94:bd:1c:8f:f5:83:df:
c5:3a:8f:c0:16:0e:35:70:96:af:e8:58:fa:b4:f9:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A4:7C:D4:37:68:AB:B7:DD:4F:CB:79:85:F3:01:6A:DF:C1:68:3E
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/WKR81Ddoq7fdT8t5hfMBat_BaD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
1f:b0:6c:9c:b6:b4:b1:0d:78:b7:1c:ad:ab:ea:cb:39:d5:10:
20:11:0d:f5:53:03:d0:30:1b:31:b2:0e:cf:bc:fc:86:05:63:
e2:ab:e4:15:0c:4a:27:f7:88:2e:ba:db:79:e1:6b:ed:d8:57:
6d:3c:0f:aa:2c:a3:f0:6d:d7:31:34:c8:a7:22:17:35:70:bb:
0a:58:84:5d:3d:1f:de:5d:f1:95:6d:16:50:1a:c0:78:cd:7d:
cb:c4:f2:73:f4:6e:b5:af:c7:b1:c1:12:86:88:4a:c0:13:94:
59:49:df:29:ca:76:5a:5d:c8:48:33:76:b2:ed:13:d6:63:94:
0e:17:c5:e1:e3:b5:97:4e:8e:bf:e1:d9:78:47:2a:f5:36:c9:
91:a6:b4:4d:83:56:8f:16:cf:f1:42:7f:aa:d8:52:34:7c:c3:
0b:a3:ce:8b:80:7d:27:45:53:84:46:6e:cc:9e:30:bc:a5:1b:
40:79:8f:9e:0d:a9:99:bc:5a:53:6c:9b:d1:96:a8:05:2d:4f:
10:fb:32:82:98:d6:20:d3:6b:9e:43:4f:30:3a:1e:dd:19:a3:
04:b8:08:b9:28:9a:7d:13:d4:99:c7:fb:5c:3d:f1:40:b8:16:
6d:6c:71:81:79:37:c8:97:62:3b:16:30:96:b5:47:7e:7b:1c:
39:bd:d2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:28:43 2024 by rpki-client on console-ams.rpki-client.org