Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/WWFa4p7aYxIKgibgXdQCGDjolsw.roa
File: WWFa4p7aYxIKgibgXdQCGDjolsw.roa (raw, json)
Hash identifier: 6tV3JKuKoxqxFn5L2Iypo2LBH2tThcTJ+hy4wbXqyLU=
Subject key identifier: 59:61:5A:E2:9E:DA:63:12:0A:82:26:E0:5D:D4:02:18:38:E8:96:CC
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018CC94DD2944CCBB3FA446FBB8F28CD9A39
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/WWFa4p7aYxIKgibgXdQCGDjolsw.roa
Signing time: Tue 02 Jan 2024 08:32:49 +0000
ROA not before: Tue 02 Jan 2024 08:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216243
IP address blocks: 2a13:a5c7:1500::/40 maxlen: 48
2a13:a5c4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:d2:94:4c:cb:b3:fa:44:6f:bb:8f:28:cd:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 08:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59615ae29eda63120a8226e05dd4021838e896cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:47:70:2f:46:58:60:35:6f:61:94:62:56:
6d:d6:8d:a3:9a:70:8b:78:b7:76:bb:33:d0:1c:02:
41:4c:40:1e:4b:17:16:83:8a:96:b2:0c:4f:89:97:
35:15:3b:f3:3c:cf:c5:ce:d8:49:49:de:44:84:ef:
d9:d0:31:2d:2c:e3:df:3d:ca:be:90:f3:7d:bc:67:
cc:65:4a:d7:f8:e8:19:09:fa:c8:de:8f:b9:ca:98:
80:b4:f1:01:4a:16:f4:8c:af:11:53:53:ea:03:c1:
0a:0a:cc:d9:54:88:c1:67:e9:69:bb:8d:f2:d0:9d:
70:39:60:b3:37:69:8f:be:46:2d:9f:2b:9e:30:e6:
a5:49:6a:b7:df:60:cd:d4:ce:57:5d:82:7e:a4:c6:
11:1f:68:91:d5:9f:28:8f:c0:09:8d:9d:8d:98:1e:
6d:80:3b:53:46:f9:36:57:b9:35:ad:ae:18:46:19:
fd:3a:ed:a6:5b:12:6c:29:51:38:ed:b1:7b:2e:a0:
83:74:04:c9:1c:cc:e5:cf:17:64:5f:0b:51:3c:ef:
65:50:98:00:c2:36:9c:20:e3:1e:d6:0f:ef:e3:80:
ab:62:7b:dd:6e:a4:f3:b2:64:fb:ce:e4:c1:6e:ad:
14:08:25:79:94:9a:5a:d1:4a:94:29:26:51:85:5a:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:5A:E2:9E:DA:63:12:0A:82:26:E0:5D:D4:02:18:38:E8:96:CC
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/WWFa4p7aYxIKgibgXdQCGDjolsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c4::/32
2a13:a5c7:1500::/40
Signature Algorithm: sha256WithRSAEncryption
b7:65:7a:68:2e:ba:41:7e:aa:46:47:a6:a5:e5:b1:b5:69:55:
3c:c2:25:69:3a:4b:89:86:86:96:74:86:bd:1e:5b:56:d6:3a:
99:19:a0:0a:53:3f:5d:e9:3b:21:ef:13:36:6d:0a:fc:57:e2:
df:2c:39:7c:60:97:ac:a7:df:3d:62:82:96:f2:0a:08:b1:40:
e8:5a:1f:53:0b:e3:84:ad:1f:7f:25:21:26:53:44:9c:f1:4b:
b0:46:b3:fa:cd:36:06:8c:e1:7f:33:06:7c:bf:59:43:df:23:
b3:f6:e8:66:0c:9c:9c:48:32:cd:95:50:11:1a:e7:16:13:c2:
50:b3:26:60:de:20:bc:ea:01:ac:da:74:43:48:f6:10:cf:c7:
ce:3f:e2:d6:18:00:53:31:45:56:c1:20:55:24:be:bf:1a:73:
3a:c4:e0:1c:76:0c:9c:d3:2a:c1:78:1d:6d:42:c7:7f:ed:d8:
b8:4c:1f:86:cd:6a:cb:9f:ee:d2:26:0f:7e:57:67:6c:4c:7a:
40:62:7b:1a:20:83:86:53:bf:6e:42:66:a5:13:0f:77:5c:9d:
20:9e:c8:40:9b:61:91:1e:f0:45:e0:a6:86:21:58:33:19:29:
e7:4c:bb:a6:9c:84:85:70:cc:46:e0:6d:48:d1:cd:b7:11:45:
8f:66:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:54:13 2024 by rpki-client on console-ams.rpki-client.org