Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wf0Q1jwukhkR-489oaDeeCmfZpg.roa
File: wf0Q1jwukhkR-489oaDeeCmfZpg.roa (raw, json)
Hash identifier: UBicaI6TwXQ8yZzlGyQ+CtkJGksvEmkZwFZ2eDYTAew=
Subject key identifier: C1:FD:10:D6:3C:2E:92:19:11:FB:8F:3D:A1:A0:DE:78:29:9F:66:98
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018EE6271DA487700795FA357F026B57D6FF
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wf0Q1jwukhkR-489oaDeeCmfZpg.roa
Signing time: Tue 16 Apr 2024 09:05:06 +0000
ROA not before: Tue 16 Apr 2024 09:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2a13:1300::/30 maxlen: 30
2a13:1304::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:27:1d:a4:87:70:07:95:fa:35:7f:02:6b:57:d6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Apr 16 09:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1fd10d63c2e921911fb8f3da1a0de78299f6698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0c:47:16:9b:56:1e:48:e5:65:0e:1d:68:86:
cd:ea:86:03:ed:bf:d4:0c:e7:49:12:39:68:00:ba:
27:fa:33:0b:db:ca:48:a1:e9:78:db:a9:af:e5:7e:
0e:b7:b3:53:38:d0:ca:25:bc:43:eb:2c:9f:28:c2:
4c:5f:24:48:68:24:ae:d5:a8:b7:90:6b:7f:fb:b5:
69:25:ff:a8:c5:49:ed:5a:26:ca:66:31:32:0f:65:
ab:ee:82:3f:be:af:1c:10:19:b6:37:4d:7e:1f:d2:
d0:1d:b9:a7:19:37:0d:7b:09:34:57:8d:1b:83:10:
3d:f1:3c:79:d4:a1:af:af:30:b4:0d:84:96:01:65:
3e:ec:92:22:8b:8f:79:c6:6c:0e:d9:26:03:51:db:
ab:cb:90:52:db:cd:10:9d:4f:b3:dc:0d:51:e4:ed:
3d:11:3f:82:c1:b7:28:6c:4d:47:79:1f:a5:f7:9c:
be:dc:7c:08:cb:73:1e:0d:65:2e:ba:60:68:68:ec:
aa:f0:5d:f4:35:9c:a2:41:f6:f9:36:50:ad:14:5e:
81:25:71:f9:84:52:d5:8e:1b:2f:61:a8:95:81:22:
b2:13:1b:61:6a:70:72:a0:b6:e8:39:20:41:1d:d5:
51:36:69:9d:af:d8:dc:e5:3c:ed:6a:b4:20:ca:93:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:10:D6:3C:2E:92:19:11:FB:8F:3D:A1:A0:DE:78:29:9F:66:98
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wf0Q1jwukhkR-489oaDeeCmfZpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1300::/29
Signature Algorithm: sha256WithRSAEncryption
97:46:f3:9d:f1:e1:58:7d:ed:37:c3:ed:de:e5:af:e9:c3:e6:
58:06:75:7a:16:d8:ba:38:ea:0e:60:37:e4:65:bb:64:a6:27:
3e:d6:2b:6e:95:6b:f5:87:a1:29:2a:99:e2:15:15:ea:a4:e1:
92:34:5c:ad:7f:30:d4:8c:25:97:c2:46:4b:3f:e3:e1:cf:24:
c5:7e:42:6c:57:de:ba:25:26:d6:9d:06:22:17:e2:9e:9b:9f:
03:3e:81:ae:5d:ef:08:d9:4e:46:3a:ac:58:42:30:40:ff:66:
00:d4:66:3b:d1:2b:ea:6f:ed:a9:5b:f3:8c:ae:93:39:9f:91:
20:70:09:cf:51:59:3c:ae:f9:d4:0a:9b:e2:6d:63:ae:cd:35:
29:6a:ba:d0:8d:2f:64:97:81:13:bf:f9:5c:91:64:9f:18:3d:
41:b9:a1:90:fb:63:f7:00:cc:7a:8e:8e:6e:eb:b4:12:04:68:
84:51:e3:d9:71:f8:51:69:95:75:fb:52:c8:88:81:94:6a:e3:
46:9f:c0:05:1e:38:ae:3d:62:c1:67:7c:c5:5f:8b:00:ae:9e:
38:80:0b:7f:f6:97:40:40:9d:e0:63:24:32:6a:53:db:64:47:
af:97:ad:90:db:26:18:bc:ea:a3:ca:5a:aa:90:a8:65:5a:de:
b1:05:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:56:57 2024 by rpki-client on console-ams.rpki-client.org