Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/wpFQ7Cu6ShUYOHTKd54ze2XY9CE.roa
File: wpFQ7Cu6ShUYOHTKd54ze2XY9CE.roa (raw, json)
Hash identifier: yAAsLgkY47Kat3PMGMM6NMNnv2XuHqF6+q80/v1TxUk=
Subject key identifier: C2:91:50:EC:2B:BA:4A:15:18:38:74:CA:77:9E:33:7B:65:D8:F4:21
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01934569021817E1F1494EF28E406DEE9FCC
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/wpFQ7Cu6ShUYOHTKd54ze2XY9CE.roa
Signing time: Tue 19 Nov 2024 17:12:09 +0000
ROA not before: Tue 19 Nov 2024 17:12:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208022
IP address blocks: 2a0a:280::/29 maxlen: 32
2a11:3780::/29 maxlen: 32
2a12:ef40::/29 maxlen: 32
2a13:63c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:45:69:02:18:17:e1:f1:49:4e:f2:8e:40:6d:ee:9f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Nov 19 17:12:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c29150ec2bba4a15183874ca779e337b65d8f421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:d5:6d:5e:60:bf:06:9e:7f:2f:02:95:39:
ca:c1:a2:57:28:c4:e0:c8:88:1b:04:37:e9:d8:4c:
50:5c:8d:9f:83:fe:a8:73:fc:85:24:64:95:4e:d7:
9d:ef:7d:e3:eb:f1:fc:cc:01:39:29:4d:ba:1f:d6:
9d:b0:3c:79:0b:10:bc:43:4e:a0:9f:56:18:e4:50:
96:74:2e:5c:5f:ab:13:f4:3f:08:a4:78:89:79:da:
eb:b1:97:22:2d:7f:b1:02:29:9a:51:3d:80:b8:82:
3c:da:8a:01:12:8a:39:5c:53:e9:ea:6e:ef:35:61:
e9:1c:72:14:ed:da:0c:42:99:2f:c8:88:34:29:99:
a5:1c:f1:1b:c8:b3:55:bb:be:91:0b:65:19:8a:ba:
b1:4d:87:10:e3:f8:9a:b1:9a:da:65:5a:4b:d8:b9:
32:ef:d1:72:97:0c:cd:57:25:6b:8a:dd:db:f3:9a:
de:b5:a5:1d:6d:32:f2:ce:aa:aa:6a:9b:d7:96:32:
89:e3:1c:da:02:37:04:c2:8d:20:45:0b:b8:01:2a:
e7:6e:e2:22:c4:2a:11:44:e0:17:9b:f8:57:cd:ab:
cc:4f:18:d5:d3:13:05:47:1e:a0:b4:ba:f4:dd:0d:
87:9d:3a:40:40:5c:e6:bb:cf:67:ae:8f:a1:7d:ce:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:50:EC:2B:BA:4A:15:18:38:74:CA:77:9E:33:7B:65:D8:F4:21
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/wpFQ7Cu6ShUYOHTKd54ze2XY9CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280::/29
2a11:3780::/29
2a12:ef40::/29
2a13:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:30:8a:b4:52:17:10:87:ac:d6:e6:99:ac:0f:07:b2:e2:d2:
0b:70:30:96:e8:f0:15:43:e8:37:56:b3:a5:4a:ff:0b:53:bf:
6a:b2:dd:1c:dd:a2:83:f9:f2:76:c8:66:65:39:ed:d4:3f:af:
1d:f5:d0:66:12:04:a9:a9:bc:ce:a8:fc:a5:ce:f1:51:06:3e:
80:13:e7:68:83:bb:ff:60:18:7d:49:18:d1:c9:18:f4:8b:ac:
d0:95:36:e5:53:53:22:36:60:3a:7b:42:89:0c:22:b4:07:30:
bb:9a:a3:b5:e8:be:a4:e5:aa:a3:5d:c8:ca:e5:17:26:9b:e2:
f5:0d:a4:0f:de:32:42:95:51:49:16:90:c3:3c:77:eb:38:5b:
22:01:d1:ff:62:13:51:34:0a:98:73:e4:22:cf:12:f1:6f:b7:
83:ae:eb:71:1c:f5:7e:c2:83:99:28:cc:60:2d:b9:06:5f:8c:
33:9a:c4:15:fa:89:c1:1b:16:d9:2f:5c:e0:50:b7:25:8f:af:
de:f2:1c:a1:c3:68:d4:51:c6:07:97:3a:e9:5d:c6:5f:a2:e7:
2e:c5:21:e0:65:17:c7:2c:6a:6d:c9:d0:9c:bc:97:e3:27:1b:
15:f1:2f:4a:4b:9a:ec:35:c4:12:20:f5:f5:62:62:92:39:d3:
c9:09:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:22 2024 by rpki-client on console-fra.rpki-client.org