Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WbfMWg3H-EII1xlkMFtYU77AcWE.roa
File: WbfMWg3H-EII1xlkMFtYU77AcWE.roa (raw, json)
Hash identifier: V2xo0j6xWSlAs7x482/Bet71g2Bq5MagXDef3hEqMuY=
Subject key identifier: 59:B7:CC:5A:0D:C7:F8:42:08:D7:19:64:30:5B:58:53:BE:C0:71:61
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8014FEBE103B782C3E49EF9475BA6ED
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WbfMWg3H-EII1xlkMFtYU77AcWE.roa
Signing time: Tue 02 Jan 2024 02:29:38 +0000
ROA not before: Tue 02 Jan 2024 02:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60404
IP address blocks: 2a0c:b642:1a01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:4f:eb:e1:03:b7:82:c3:e4:9e:f9:47:5b:a6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b7cc5a0dc7f84208d71964305b5853bec07161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:a1:b8:8c:4d:1a:45:fd:5a:5e:b2:6a:6b:
15:08:c4:ca:d2:cf:0a:7d:64:c1:80:af:4a:5b:66:
d0:7f:56:c7:86:74:67:78:e8:f7:f9:04:f9:16:22:
41:ae:88:c5:ae:99:be:00:f4:83:70:d8:8a:9c:f2:
23:b1:1f:2a:d8:8a:2d:04:f9:c6:00:52:62:62:f4:
65:fb:fa:b6:9a:aa:1c:1e:51:dc:47:e8:74:6d:ec:
77:aa:be:69:20:15:b6:99:9e:62:bd:8c:1a:e3:3f:
2b:3f:7b:d6:0f:93:dd:68:6e:07:50:36:3d:cc:b8:
2c:f0:91:0b:79:07:80:0f:97:8a:b9:99:77:77:b1:
91:65:af:c6:69:3f:08:30:13:23:bc:82:6b:00:54:
d5:23:bc:3d:fa:03:9e:50:1a:ef:80:16:37:8a:57:
8e:6f:22:bd:f9:34:a5:35:ab:2a:f6:11:21:63:86:
dd:a9:69:43:26:49:f5:a3:57:69:f8:5a:ea:ef:5c:
f5:db:3f:d3:9d:75:72:99:40:c6:41:d0:2d:9f:2c:
68:4f:3f:5a:ef:00:53:29:81:00:e8:31:bb:9a:0d:
ef:77:07:01:4c:38:ab:5a:94:3e:87:33:e5:cc:fc:
9c:b0:6d:1e:28:6d:9f:9d:ae:3a:b5:af:2e:b9:0d:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:CC:5A:0D:C7:F8:42:08:D7:19:64:30:5B:58:53:BE:C0:71:61
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/WbfMWg3H-EII1xlkMFtYU77AcWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a01::/48
Signature Algorithm: sha256WithRSAEncryption
78:4c:1d:37:ab:3b:48:6e:5d:da:60:9f:26:6b:a0:36:65:40:
34:b1:74:04:96:87:62:59:96:d2:7e:dc:e6:d2:8b:7f:b6:2b:
46:d2:4d:58:96:c5:5e:2a:f2:20:de:65:7a:94:3e:14:47:fe:
c3:13:85:18:9a:91:fa:91:f6:f7:26:99:2a:74:f5:94:3a:c2:
74:d7:e4:d5:11:a8:68:3c:02:b5:59:33:fc:2c:ff:f8:ec:3f:
24:6e:ac:45:e3:52:ed:92:2d:9e:5c:dc:85:b8:62:99:33:1c:
69:8c:d4:db:f9:cc:93:86:42:b6:05:cf:c2:31:28:99:d2:9a:
e9:88:27:6f:dc:a1:8d:db:40:92:28:48:85:93:67:1d:e2:47:
e1:4d:58:15:d3:7e:ab:a7:3d:26:ff:bf:55:12:58:4a:cb:38:
27:51:ea:c1:b1:f6:76:43:a4:12:ea:34:64:48:a0:13:5d:e9:
3a:76:10:da:d9:0e:01:9d:7f:e3:b3:40:e8:91:58:3f:9b:89:
f1:aa:aa:5e:31:5c:02:b0:01:c8:4a:82:0d:c5:00:0b:9f:80:
c0:2b:ab:8b:43:90:08:31:f6:62:fd:33:41:f3:d1:67:ce:50:
64:43:c1:a1:04:29:0e:35:e7:79:c5:de:53:2c:03:46:ac:f9:
e5:58:88:89
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAU/r4QO3gsPknvlHW6btMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjQwMTAyMDIyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWI3Y2M1YTBkYzdmODQyMDhkNzE5NjQzMDViNTg1M2JlYzA3MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLahuIxNGkX9Wl6yamsVCMTK0s8K
fWTBgK9KW2bQf1bHhnRneOj3+QT5FiJBrojFrpm+APSDcNiKnPIjsR8q2IotBPnG
AFJiYvRl+/q2mqocHlHcR+h0bex3qr5pIBW2mZ5ivYwa4z8rP3vWD5PdaG4HUDY9
zLgs8JELeQeAD5eKuZl3d7GRZa/GaT8IMBMjvIJrAFTVI7w9+gOeUBrvgBY3ileO
byK9+TSlNasq9hEhY4bdqWlDJkn1o1dp+Frq71z12z/TnXVymUDGQdAtnyxoTz9a
7wBTKYEA6DG7mg3vdwcBTDirWpQ+hzPlzPycsG0eKG2fna46ta8uuQ3PjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFm3zFoNx/hCCNcZZDBbWFO+wHFhMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvV2JmTVdnM0gtRUlJMXhsa01GdFlVNzdBY1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoB
MA0GCSqGSIb3DQEBCwUAA4IBAQB4TB03qztIbl3aYJ8ma6A2ZUA0sXQElodiWZbS
ftzm0ot/titG0k1YlsVeKvIg3mV6lD4UR/7DE4UYmpH6kfb3JpkqdPWUOsJ01+TV
EahoPAK1WTP8LP/47D8kbqxF41Ltki2eXNyFuGKZMxxpjNTb+cyThkK2Bc/CMSiZ
0prpiCdv3KGN20CSKEiFk2cd4kfhTVgV036rpz0m/79VElhKyzgnUerBsfZ2Q6QS
6jRkSKATXek6dhDa2Q4BnX/js0DokVg/m4nxqqpeMVwCsAHISoINxQALn4DAK6uL
Q5AIMfZi/TNB89FnzlBkQ8GhBCkONed5xd5TLANGrPnlWIiJ
-----END CERTIFICATE-----
Generated at Sat May 4 08:45:26 2024 by rpki-client on console-fra.rpki-client.org