Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/8WKZ2cndSbD1lRjcF44m2tsxR7g.roa
File: 8WKZ2cndSbD1lRjcF44m2tsxR7g.roa (raw, json)
Hash identifier: x8D5aSSwdHybcQNpidT1edNIcsvV9A140E9D2G5F1fA=
Subject key identifier: F1:62:99:D9:C9:DD:49:B0:F5:95:18:DC:17:8E:26:DA:DB:31:47:B8
Certificate issuer: /CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Certificate serial: 018CC3B66D26B99F7D8B1B800E23A11D9A15
Authority key identifier: 80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/8WKZ2cndSbD1lRjcF44m2tsxR7g.roa
Signing time: Mon 01 Jan 2024 06:29:21 +0000
ROA not before: Mon 01 Jan 2024 06:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209638
IP address blocks: 2a07:900::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:6d:26:b9:9f:7d:8b:1b:80:0e:23:a1:1d:9a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=805db5678139e2eeace89b5ee9982c35449c0b3b
Validity
Not Before: Jan 1 06:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f16299d9c9dd49b0f59518dc178e26dadb3147b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:94:da:b2:14:55:cc:93:b8:8b:82:60:9b:
f5:79:b8:47:a0:af:23:45:f9:70:8a:0a:b0:6c:30:
36:5a:0c:6d:68:b8:d6:fd:c3:a1:ef:69:c9:23:c9:
69:7f:e9:10:3d:57:eb:7d:df:89:75:91:e6:34:a3:
d5:2f:96:c4:00:4b:b2:52:de:0a:ad:bc:57:6a:c6:
b7:4e:b5:68:bc:12:b1:7a:4c:04:bf:ad:ad:cd:44:
c8:bd:2c:3e:a6:10:ab:7c:68:07:15:54:82:01:98:
86:8a:51:f9:ab:92:79:11:49:46:98:6c:1a:e8:85:
20:7f:66:50:64:eb:52:64:fe:03:12:23:67:c2:d2:
f2:b1:3e:26:ac:8c:66:cc:73:9c:ed:af:12:b3:e1:
2d:d7:39:96:24:19:3b:78:9f:69:be:6c:bb:ed:2d:
42:b0:89:4b:06:c2:3b:d8:b7:ed:5b:02:ce:49:a1:
4f:ef:b8:89:20:7e:2f:72:9e:36:ea:bc:37:14:71:
51:dc:7a:95:f2:34:f9:2c:3d:b7:01:81:8f:ac:1d:
52:8b:2e:41:4e:ce:19:ed:dc:a1:bd:2d:c5:cb:71:
ef:6a:e8:55:e5:7a:6a:41:60:55:5e:f1:f9:d2:38:
e2:3f:3a:c8:0a:4b:f3:45:5a:2e:c6:2e:1f:d5:7a:
cd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:62:99:D9:C9:DD:49:B0:F5:95:18:DC:17:8E:26:DA:DB:31:47:B8
X509v3 Authority Key Identifier:
keyid:80:5D:B5:67:81:39:E2:EE:AC:E8:9B:5E:E9:98:2C:35:44:9C:0B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gF21Z4E54u6s6Jte6ZgsNUScCzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/8WKZ2cndSbD1lRjcF44m2tsxR7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3dd082-c503-45b8-9b07-922923e898e6/1/gF21Z4E54u6s6Jte6ZgsNUScCzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:900::/29
Signature Algorithm: sha256WithRSAEncryption
79:d9:ab:18:ed:ff:7e:44:ea:61:5e:83:c7:22:3d:e3:66:0f:
c7:fe:c0:3b:20:0c:76:84:65:ee:45:a5:98:e1:b6:d2:91:03:
3a:88:a5:70:78:87:b3:22:7c:a0:81:95:90:f8:e6:4b:36:93:
dd:b6:f7:f4:9e:0d:a3:1e:26:76:e8:c3:b3:ad:41:7a:cb:5c:
1a:d4:42:d9:ed:f4:5a:f0:70:21:7b:8d:41:98:0b:14:8d:6e:
a0:9b:87:44:b5:4d:9b:08:e2:21:fe:3a:bc:61:5d:31:64:d2:
35:32:a8:c1:f9:63:71:8d:dd:93:cd:93:c7:48:54:47:68:1e:
66:9a:9e:19:d1:c0:9d:02:4f:04:ea:1d:21:07:4e:bc:e8:bb:
e7:fe:e4:55:a6:9a:38:9c:ad:6d:2c:6a:ac:4f:d2:8a:ba:90:
83:8f:20:9e:fe:d4:e8:18:7c:8a:7f:45:57:22:9c:1b:ad:52:
aa:ed:a4:ae:a0:9b:70:46:f9:31:98:32:f1:41:99:2d:65:ca:
42:fe:3c:d0:a0:93:21:40:6e:11:4c:89:50:11:2e:c1:76:4c:
fd:55:65:9b:07:20:96:7c:52:c5:96:51:aa:58:e1:f4:05:e9:
7e:9f:71:84:54:3e:c5:8e:41:41:15:71:97:0e:a5:c9:cf:24:
fa:36:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:38:52 2024 by rpki-client on console-ams.rpki-client.org