Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/wwz-AUDmLYkyhLjksYbw8VqF7pY.roa
File: wwz-AUDmLYkyhLjksYbw8VqF7pY.roa (raw, json)
Hash identifier: gadWW6auzNMGhekgyjhMBJUORBF2PwPNJ3dSYSBqafU=
Subject key identifier: C3:0C:FE:01:40:E6:2D:89:32:84:B8:E4:B1:86:F0:F1:5A:85:EE:96
Certificate issuer: /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial: 019291919B81875B7C4246711F19C3001F14
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/wwz-AUDmLYkyhLjksYbw8VqF7pY.roa
Signing time: Tue 15 Oct 2024 19:04:51 +0000
ROA not before: Tue 15 Oct 2024 19:04:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8821
IP address blocks: 62.171.0.0/17 maxlen: 17
77.245.176.0/20 maxlen: 20
82.136.64.0/18 maxlen: 18
151.248.128.0/17 maxlen: 17
158.181.96.0/19 maxlen: 19
185.42.244.0/22 maxlen: 22
185.244.112.0/22 maxlen: 22
212.4.64.0/19 maxlen: 19
217.194.48.0/20 maxlen: 20
2a01:760::/29 maxlen: 29
2a01:8b80::/29 maxlen: 29
2a01:8b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:91:91:9b:81:87:5b:7c:42:46:71:1f:19:c3:00:1f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Validity
Not Before: Oct 15 19:04:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c30cfe0140e62d893284b8e4b186f0f15a85ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:50:81:cc:61:ed:f4:6f:68:a6:e9:d3:a9:
db:60:49:d5:76:cb:4c:f9:b3:2e:74:5d:98:18:e8:
77:b8:3b:ff:d2:56:62:e0:4c:0d:b7:eb:be:d3:8b:
ae:87:92:09:e5:2c:25:24:28:ea:4b:91:62:4e:6d:
74:36:b3:63:d6:f3:5f:ba:b9:04:3a:92:5c:c9:0a:
67:22:ec:e5:26:e8:13:6f:d8:97:37:56:82:9a:29:
6a:c2:dc:f9:44:1f:b4:dc:37:1c:b6:8d:3e:a9:a3:
e3:d2:f7:ba:00:9b:bb:f0:f6:27:84:f0:62:92:8a:
58:32:1b:c1:b0:8c:f8:13:3d:73:a5:8e:9e:87:61:
be:19:d8:db:30:1d:0a:45:af:b3:26:db:9e:bd:95:
db:c0:17:1f:1c:57:2c:c7:68:fc:6d:c7:85:9b:01:
7b:6d:25:8c:d5:ae:27:0b:f2:15:5d:87:97:8e:01:
4c:ca:30:e9:1a:91:eb:ba:f6:c8:80:83:97:ee:04:
c9:29:be:b4:fe:f8:bb:aa:ac:12:97:53:b6:03:2d:
8c:53:06:60:17:fd:f8:d2:11:5b:da:f9:12:d0:04:
d6:c1:3b:1b:c1:92:68:ac:2d:59:16:d0:4b:15:66:
7d:9f:17:0b:79:90:51:10:9b:a8:a7:5f:4d:49:da:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:FE:01:40:E6:2D:89:32:84:B8:E4:B1:86:F0:F1:5A:85:EE:96
X509v3 Authority Key Identifier:
keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/wwz-AUDmLYkyhLjksYbw8VqF7pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.0.0/17
77.245.176.0/20
82.136.64.0/18
151.248.128.0/17
158.181.96.0/19
185.42.244.0/22
185.244.112.0/22
212.4.64.0/19
217.194.48.0/20
IPv6:
2a01:760::/29
2a01:8b80::/29
Signature Algorithm: sha256WithRSAEncryption
1c:a5:d0:7d:54:bd:c6:8c:b7:5d:7c:43:9a:99:f9:d8:f8:58:
6f:23:f6:f6:7d:73:96:85:8f:10:88:55:18:bb:66:ed:cb:f9:
af:2f:15:2d:8b:b9:96:73:38:15:c2:a7:a3:f5:8c:80:0e:6d:
a2:2f:e5:a0:c7:8a:50:74:47:15:28:58:ff:df:c3:00:df:22:
79:65:6f:80:ea:f2:dd:f3:6f:f7:c8:08:4e:27:a3:9f:7e:54:
c4:19:21:58:c1:8b:ea:57:20:cf:35:09:f5:18:fb:8a:fd:3b:
83:c6:cc:3a:60:79:3c:90:87:2d:dc:37:43:cf:6d:d1:b3:fe:
32:24:41:05:2d:9e:f8:64:3f:82:6b:6e:1a:07:8d:53:0e:81:
a8:73:45:2d:e9:53:ee:b4:c1:34:1b:e9:ea:f8:1e:3e:04:37:
5f:ec:63:74:e6:ef:53:1d:b8:53:e8:65:1a:b1:a9:87:dd:d8:
45:5b:46:d6:9d:48:87:95:be:fd:84:e6:ce:5f:b4:d8:fd:e4:
f6:c6:af:51:02:cd:29:db:4b:5a:dd:b2:30:0a:fd:13:ed:df:
08:ca:80:30:fd:b6:51:1e:ed:bf:92:62:86:a7:40:be:1e:22:
5e:31:72:da:5c:85:f5:e8:fd:24:35:35:ab:98:b9:8f:46:0e:
94:04:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:41 2024 by rpki-client on console-ams.rpki-client.org