Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qnfiDb5hi1fx5XQR4uPXsim9aFE.roa
File: qnfiDb5hi1fx5XQR4uPXsim9aFE.roa (raw, json)
Hash identifier: ivXmMmFCdyD25rflSia0FW5sec7cJ1N6qL2TOuUpor0=
Subject key identifier: AA:77:E2:0D:BE:61:8B:57:F1:E5:74:11:E2:E3:D7:B2:29:BD:68:51
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018FC50F909B277BFCD310D36FE965D3CD49
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qnfiDb5hi1fx5XQR4uPXsim9aFE.roa
Signing time: Wed 29 May 2024 15:54:42 +0000
ROA not before: Wed 29 May 2024 15:54:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200216
IP address blocks: 2a13:5040::/29 maxlen: 29
2a13:bcc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c5:0f:90:9b:27:7b:fc:d3:10:d3:6f:e9:65:d3:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: May 29 15:54:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa77e20dbe618b57f1e57411e2e3d7b229bd6851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:f6:a2:60:51:4f:9d:1a:8a:fa:30:84:4d:
e5:a4:48:ff:2b:19:d7:8e:a3:e7:06:72:fd:22:7f:
8f:0b:d8:05:b3:70:39:97:6f:84:b5:cb:05:0c:79:
1f:94:af:22:d9:0c:5d:46:27:19:e6:90:67:82:d5:
7e:e9:14:98:e7:ce:6d:97:db:23:b6:dd:60:f2:79:
f1:76:e9:c5:29:e8:60:8a:30:10:6f:c4:9b:32:15:
9a:71:c0:7d:8f:7e:2e:03:73:43:eb:d5:36:77:b8:
0a:97:52:f6:6d:89:fb:3d:f3:18:71:36:ec:9d:54:
d0:61:fe:52:96:e5:5c:b1:61:48:9a:86:2e:79:33:
35:1a:f2:21:39:f2:e4:03:58:0a:72:a0:8b:96:43:
ff:43:43:19:ac:af:48:19:f6:ef:db:0b:1d:24:3e:
7e:28:00:04:e2:3c:c5:92:2c:89:9e:61:69:49:67:
6b:2b:83:25:ea:a3:b7:b8:e8:34:e2:ae:38:d3:3e:
27:8f:39:ad:46:39:3c:33:3f:da:78:1b:da:60:bb:
0d:c9:4a:84:5d:dd:22:bf:16:13:2b:63:04:53:3f:
86:da:64:0c:b0:e4:31:a9:54:af:fb:c1:df:50:0b:
20:c9:b1:74:e1:09:59:1b:0b:83:2b:fb:80:0e:d6:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:77:E2:0D:BE:61:8B:57:F1:E5:74:11:E2:E3:D7:B2:29:BD:68:51
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/qnfiDb5hi1fx5XQR4uPXsim9aFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5040::/29
2a13:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:5c:58:7b:4d:b6:31:1f:29:a8:da:ed:2c:8b:d9:30:0f:bc:
83:aa:fc:87:46:d7:72:a9:99:a8:9c:59:0b:52:0e:d9:dd:8a:
9d:10:95:24:77:f3:2a:89:01:46:4c:c6:70:10:a7:07:99:09:
c3:e2:08:4b:69:d9:ea:4e:70:c0:46:bc:ac:ea:8b:22:87:36:
1f:fa:6d:8d:69:2a:73:65:83:b8:d9:bd:bc:e8:40:86:88:4a:
0b:a1:d5:31:97:e3:49:b7:7a:bc:1b:90:06:65:79:fc:f4:16:
3a:dc:22:b6:d5:6e:cc:c6:87:6e:0b:40:ac:ca:da:df:b6:e9:
9a:07:16:f4:10:db:e8:64:72:de:bc:62:ac:00:8d:0c:f1:c7:
f1:eb:f5:ff:67:7f:3a:7b:71:3e:bd:6a:71:0f:ea:96:17:ed:
b1:ff:d2:54:3e:38:c3:0b:2c:16:f5:3c:4e:19:88:2e:07:4f:
66:87:aa:77:35:b6:f7:0c:3e:5f:ea:df:f9:d9:22:5a:b9:39:
7b:b7:99:50:d4:9f:cf:07:1c:ba:9b:f5:5a:36:19:3a:df:25:
35:5e:ec:72:20:c5:25:0d:4b:a0:88:ac:f4:7f:3c:74:87:45:
ef:ab:89:ec:5d:e1:b1:20:eb:dd:10:d2:89:aa:42:a8:7a:00:
ec:59:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 23:25:26 2024 by rpki-client on console-ams.rpki-client.org