Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/WMBT7V-1Kpn_U_N4_8KcVCtYcQY.roa
File: WMBT7V-1Kpn_U_N4_8KcVCtYcQY.roa (raw, json)
Hash identifier: Vfnakmon2WXVeUOzIRI6eIZrooj0gpRB9g4oSAmI52s=
Subject key identifier: 58:C0:53:ED:5F:B5:2A:99:FF:53:F3:78:FF:C2:9C:54:2B:58:71:06
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 018CCA2A64E304B49F818694F49C964D2A0E
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/WMBT7V-1Kpn_U_N4_8KcVCtYcQY.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196610
IP address blocks: 2a02:c50:db8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:64:e3:04:b4:9f:81:86:94:f4:9c:96:4d:2a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58c053ed5fb52a99ff53f378ffc29c542b587106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e6:3d:e8:43:a0:0f:ba:15:54:03:cd:aa:72:
de:86:83:cd:37:4d:41:cb:0a:24:36:b8:07:e6:16:
93:a3:62:08:d5:7b:7d:b9:9a:d6:8d:f7:40:76:33:
ac:d2:b9:0e:cb:85:75:a4:b0:de:20:ac:b1:7f:e6:
3a:57:14:62:52:05:e7:a4:c4:88:a5:ea:3b:14:60:
5a:6a:b8:8b:d0:7f:78:5d:f5:5d:90:5d:74:30:a6:
53:55:24:b2:9c:c0:d8:6b:cd:31:7a:64:89:23:80:
15:78:7a:c8:cb:c3:f5:88:6f:1f:c2:b2:e9:d6:f7:
d0:5b:c4:56:64:21:98:cd:e4:fe:32:88:82:ad:60:
71:14:9a:e6:ca:41:50:76:2c:68:59:c6:1b:08:29:
a8:85:dd:32:8c:8f:ce:a5:be:02:9d:f0:d2:b5:e0:
c5:fe:d5:de:17:7b:ca:d4:f2:d1:ef:f9:fc:11:07:
b8:24:c8:80:86:df:59:b9:c1:e2:68:ba:40:01:fd:
ed:59:48:e8:f5:ba:09:72:bf:b6:b8:ba:67:47:6b:
73:32:a5:a1:f8:1e:b4:6b:a4:a0:16:ec:0f:02:e7:
53:69:c5:00:e2:f8:71:87:74:5b:83:b5:e2:f5:0e:
ab:02:f7:00:cd:9a:6e:15:f0:dc:7a:17:8b:95:1f:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:53:ED:5F:B5:2A:99:FF:53:F3:78:FF:C2:9C:54:2B:58:71:06
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/WMBT7V-1Kpn_U_N4_8KcVCtYcQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:c50:db8::/48
Signature Algorithm: sha256WithRSAEncryption
b0:e4:7d:4a:1f:8b:83:6d:44:69:07:88:8e:c3:e8:31:f5:27:
ab:13:d5:25:52:79:a4:9f:90:53:b5:4b:e3:73:ba:71:d0:97:
21:72:88:26:21:37:03:48:cd:78:05:fb:2b:01:40:ed:29:6c:
75:f2:2c:a3:c1:9a:b8:ef:f2:53:e7:07:f0:b1:cd:fa:2c:ad:
8c:34:63:4d:f5:27:9a:61:94:6c:22:37:03:58:0c:7d:c7:61:
af:5e:7f:b8:84:8b:43:c5:3a:75:d3:cf:14:79:a5:44:12:25:
cc:49:f3:39:9d:84:ce:04:3e:fb:40:8c:4f:0d:db:99:77:d3:
d5:8d:3a:85:dc:7f:16:20:c9:00:53:00:de:1a:93:e7:17:8b:
1e:e9:09:0b:56:e5:88:b8:cd:44:4b:2f:2f:a6:f7:91:06:ca:
99:1c:5a:78:ce:27:c8:95:c0:37:69:f7:60:dc:6a:30:f6:45:
aa:8c:56:f7:c0:ae:29:f2:38:f0:ed:c2:74:90:d1:c6:76:9d:
53:98:88:e2:e9:fa:12:33:74:43:36:db:a5:30:d7:a3:b9:68:
a8:98:32:3e:87:e6:a2:23:18:2b:47:11:62:2b:5a:5a:17:d8:
e7:57:32:d1:23:58:67:11:61:95:37:54:ff:a4:82:a0:14:c3:
b5:7d:75:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:10:29 2024 by rpki-client on console-fra.rpki-client.org