Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/wgBR-EGpbemgYALq7Awz02jQUZs.roa
File: wgBR-EGpbemgYALq7Awz02jQUZs.roa (raw, json)
Hash identifier: xB5AXpI3xcnJ6CvJgtrIzjbFvW1zLucQKegXiSgDv5U=
Subject key identifier: C2:00:51:F8:41:A9:6D:E9:A0:60:02:EA:EC:0C:33:D3:68:D0:51:9B
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 018CC87041DE04D86BEE4865EF441B94444B
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/wgBR-EGpbemgYALq7Awz02jQUZs.roa
Signing time: Tue 02 Jan 2024 04:30:49 +0000
ROA not before: Tue 02 Jan 2024 04:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 2a0a:c640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:41:de:04:d8:6b:ee:48:65:ef:44:1b:94:44:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Jan 2 04:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c20051f841a96de9a06002eaec0c33d368d0519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:d9:c4:fe:77:9e:06:80:30:99:d4:aa:23:
24:69:3a:67:60:da:e6:4a:6f:f6:d1:b3:3e:73:89:
b5:4e:54:df:eb:c9:0f:b9:e3:d3:02:19:21:0b:a7:
11:43:90:fa:20:2e:50:38:33:fb:da:56:d7:d9:63:
7c:b6:40:33:93:82:d6:08:7e:b5:1c:70:cd:40:cf:
b8:33:ca:ba:1d:72:bd:a9:c6:e6:99:3c:7c:1a:53:
96:ff:71:8c:38:3d:57:e1:ba:84:85:b9:cc:a0:9e:
18:5a:64:d5:51:37:b2:50:7e:c3:68:45:02:b5:4b:
68:53:5f:f7:b9:31:32:ec:aa:d1:60:4d:15:06:c8:
ff:04:07:c0:87:5b:df:0e:47:fd:29:77:ec:38:c3:
28:c1:f8:b6:1a:8a:f6:ba:a9:e7:51:2a:1e:a7:5e:
96:d7:97:a4:0b:6f:b0:ff:ab:dd:39:5c:ef:65:59:
e2:4d:f5:a7:5b:94:3d:c1:74:bc:12:de:75:1b:04:
00:d4:3f:87:ca:5a:91:08:03:2e:8d:a1:1b:b5:fd:
9e:c5:d7:45:c0:62:9b:4a:fd:67:98:ce:2d:32:02:
a0:73:e5:85:bc:c0:5e:f0:22:c6:37:55:d4:16:c1:
c8:d9:f8:62:9a:64:9a:31:5c:af:f6:56:ac:c3:a0:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:00:51:F8:41:A9:6D:E9:A0:60:02:EA:EC:0C:33:D3:68:D0:51:9B
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/wgBR-EGpbemgYALq7Awz02jQUZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c640::/29
Signature Algorithm: sha256WithRSAEncryption
12:43:87:22:a1:50:ff:e8:73:a8:6f:e9:d0:2f:6d:93:f1:eb:
70:ec:6c:e3:b8:d0:84:b6:d7:01:f5:3b:0b:b1:5b:1e:89:7a:
71:79:f6:f1:e9:9f:27:fe:d0:ad:ba:64:13:85:14:24:af:17:
41:9a:09:9d:f4:94:ef:30:55:eb:a3:57:89:2e:c0:a0:7c:1e:
67:3b:6f:5e:18:d0:0a:9d:f5:b1:b6:66:c8:2d:a7:20:aa:1a:
16:99:19:25:ee:bc:7d:84:36:43:82:d3:fc:52:f0:8b:cf:9b:
19:b7:ab:1d:06:50:df:40:41:cc:da:5e:44:47:1a:82:4d:cb:
90:f0:60:7a:cd:6f:ac:9a:db:15:44:4a:3a:a4:c8:d9:68:70:
6e:a9:c2:7a:2c:0c:13:a5:88:3b:b8:41:78:1e:f9:06:7c:ed:
a0:5e:58:ab:fc:23:02:13:56:e0:73:56:5f:8f:e0:39:2f:60:
10:63:ab:a5:bd:67:0c:37:aa:1c:bf:3f:1b:a7:c4:25:ba:3c:
fd:86:64:8d:c5:96:e1:e3:96:77:b6:be:56:a6:a4:ef:cd:a1:
7f:93:2a:7e:2d:34:c1:af:72:9a:5b:67:e1:87:99:ea:b5:41:
8c:47:bc:0d:87:e3:b9:0c:10:5f:38:d3:42:26:7f:78:ca:eb:
d1:e9:e8:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzIcEHeBNhr7khl70QblERLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzgwYzhiNGU1NWU1OTA4MWFmNzNhYTE5MzVlMTBhMDEy
MDU3ZmEwHhcNMjQwMTAyMDQzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjAwNTFmODQxYTk2ZGU5YTA2MDAyZWFlYzBjMzNkMzY4ZDA1MTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS7ZxP53ngaAMJnUqiMkaTpnYNrm
Sm/20bM+c4m1TlTf68kPuePTAhkhC6cRQ5D6IC5QODP72lbX2WN8tkAzk4LWCH61
HHDNQM+4M8q6HXK9qcbmmTx8GlOW/3GMOD1X4bqEhbnMoJ4YWmTVUTeyUH7DaEUC
tUtoU1/3uTEy7KrRYE0VBsj/BAfAh1vfDkf9KXfsOMMowfi2Gor2uqnnUSoep16W
15ekC2+w/6vdOVzvZVniTfWnW5Q9wXS8Et51GwQA1D+HylqRCAMujaEbtf2exddF
wGKbSv1nmM4tMgKgc+WFvMBe8CLGN1XUFsHI2fhimmSaMVyv9lasw6AiYQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMIAUfhBqW3poGAC6uwMM9No0FGbMB8GA1UdIwQY
MBaAFGw4DItOVeWQga9zqhk14QoBIFf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt
MDhmMDk0ZGFmMjQ3LzEvd2dCUi1FR3BiZW1nWUFMcTdBd3owMmpRVVpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3
LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgrGQDAN
BgkqhkiG9w0BAQsFAAOCAQEAEkOHIqFQ/+hzqG/p0C9tk/HrcOxs47jQhLbXAfU7
C7FbHol6cXn28emfJ/7QrbpkE4UUJK8XQZoJnfSU7zBV66NXiS7AoHweZztvXhjQ
Cp31sbZmyC2nIKoaFpkZJe68fYQ2Q4LT/FLwi8+bGberHQZQ30BBzNpeREcagk3L
kPBges1vrJrbFURKOqTI2WhwbqnCeiwME6WIO7hBeB75BnztoF5Yq/wjAhNW4HNW
X4/gOS9gEGOrpb1nDDeqHL8/G6fEJbo8/YZkjcWW4eOWd7a+Vqak782hf5Mqfi00
wa9ymltn4YeZ6rVBjEe8DYfjuQwQXzjTQiZ/eMrr0enoaw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:41:48 2024 by rpki-client on console-fra.rpki-client.org