Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/wjjnppJ7-HKX51cklBGQrtzsilQ.roa
File: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (raw, json)
Hash identifier: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=
Subject key identifier: C2:38:E7:A6:92:7B:F8:72:97:E7:57:24:94:11:90:AE:DC:EC:8A:54
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C71F0F6F55D75AB2DC7043C6B7C40
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/wjjnppJ7-HKX51cklBGQrtzsilQ.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213809
IP address blocks: 2a14:67c1:50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:f0:f6:f5:5d:75:ab:2d:c7:04:3c:6b:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c238e7a6927bf87297e75724941190aedcec8a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:df:fe:74:0e:96:19:be:3d:64:07:d4:5a:
56:03:d1:15:a7:71:15:85:a3:82:93:e3:ac:4d:7f:
ea:47:ff:e7:59:3a:bf:b5:6d:90:ab:ac:19:93:3c:
f9:30:fc:74:6c:f8:7a:07:fc:5e:0b:46:bd:e9:aa:
83:c4:48:3e:58:bb:8d:2d:7b:1d:b3:85:92:f6:ad:
33:4d:2a:f6:41:50:c5:f4:47:74:3b:2b:ca:0c:8d:
e4:14:9c:93:b8:ab:0f:7f:6a:0c:8f:87:f8:58:1d:
27:dd:31:00:6b:92:d6:98:56:a1:d0:3b:1b:da:dd:
d0:27:07:22:85:a1:f1:10:9f:64:ce:6f:64:a5:0c:
32:78:bd:db:19:cd:c6:a3:e4:e8:e7:9b:19:6f:bc:
71:5b:e4:3d:54:11:96:75:c2:45:7d:91:28:21:4b:
90:e3:25:0b:60:48:40:f6:f5:8b:ca:a5:5f:25:4b:
39:ea:ca:e1:5c:77:e9:c6:93:1e:ef:47:02:35:ca:
ce:d2:61:2e:1d:d4:c8:56:ab:42:87:3d:14:c8:c1:
e0:ce:af:db:63:9c:2c:8f:55:c2:fd:27:6a:ce:21:
0d:9f:23:ce:ce:e8:94:2d:1d:b1:2f:7a:ca:52:a5:
85:99:90:8b:3c:17:a7:14:6e:8f:73:4f:26:b2:8c:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:E7:A6:92:7B:F8:72:97:E7:57:24:94:11:90:AE:DC:EC:8A:54
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/wjjnppJ7-HKX51cklBGQrtzsilQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:50::/44
Signature Algorithm: sha256WithRSAEncryption
b6:b9:74:2d:75:0a:e3:6c:52:b6:b4:40:3b:e6:e9:75:0d:cc:
96:da:47:00:0c:7f:2a:19:43:aa:e3:2b:30:89:aa:38:ef:7e:
cd:af:f3:95:e6:b9:d4:eb:a9:bf:10:07:68:f7:f9:29:8d:3b:
fd:77:ba:a6:c0:ac:ba:6d:20:e6:09:17:d4:1c:dd:2d:0f:cf:
fb:49:db:0a:6c:11:a0:b0:6b:d9:b5:b9:8f:e9:68:d2:ee:d2:
37:86:44:c8:2b:a8:3a:95:3a:9f:66:37:57:3a:9b:6c:50:4d:
bf:3f:3e:5f:d1:50:0d:83:b1:3f:5c:39:b1:24:f0:c7:69:6a:
d6:e9:18:46:db:41:29:14:e3:92:61:60:fd:d7:e3:a9:e9:53:
b6:0f:38:9c:39:9f:4c:62:c6:03:2d:fd:37:94:6c:d6:75:fb:
2a:d7:99:d4:81:69:32:e5:e5:fe:fa:5d:16:4d:79:18:43:5f:
1a:ba:06:eb:56:3e:e1:92:0f:51:0e:9b:f1:f2:21:5f:51:1f:
0a:29:f2:fc:40:24:ca:45:5c:15:c5:29:bd:04:13:b9:78:cd:
fb:c1:95:a5:cf:c0:4a:b2:cf:64:ed:9b:53:4d:46:f5:4b:10:
19:e6:8f:e1:05:f5:d4:c8:eb:05:af:27:43:67:53:63:97:8c:
7a:84:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:05 2025 by rpki-client