Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-vrlCdp834C_92OAArsTr9PnEc.roa
File: W-vrlCdp834C_92OAArsTr9PnEc.roa (raw, json)
Hash identifier: RCBYw+ZhQXR1zbJQk/Fvnqb8/QZAREfmGCrI4S2M0DI=
Subject key identifier: 5B:EB:EB:94:27:69:F3:7E:02:FF:DD:8E:00:0A:EC:4E:BF:4F:9C:47
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425228282E8CF44800755C86B9C4DFADB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-vrlCdp834C_92OAArsTr9PnEc.roa
Signing time: Thu 02 Jan 2025 03:50:06 +0000
ROA not before: Thu 02 Jan 2025 03:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215035
IP address blocks: 2a0e:97c0:290::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:82:82:e8:cf:44:80:07:55:c8:6b:9c:4d:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bebeb942769f37e02ffdd8e000aec4ebf4f9c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:56:6d:11:e3:85:12:99:c8:8c:80:2e:39:
fb:cc:2a:bb:64:08:c7:5d:2e:8c:7d:b1:9f:a1:41:
6d:cd:4a:e8:c1:bd:36:21:c0:64:92:d3:42:00:9e:
d8:62:69:38:02:0d:d7:b2:62:63:4b:fa:f1:be:53:
f7:fb:4c:30:bd:d8:47:9b:62:3f:e0:ac:d0:bd:b7:
e8:e1:ba:71:c5:8f:97:86:b1:15:31:28:22:3c:78:
f1:ed:60:64:31:50:10:76:9e:3b:83:ed:22:df:cd:
d1:36:80:4f:c1:ca:ca:4c:3d:ff:8c:10:17:b5:b0:
01:f3:bb:dd:f1:da:4a:3d:c5:b2:11:55:4c:ef:61:
81:9d:8c:0b:73:e0:2c:ad:21:59:54:5f:fa:32:db:
e7:6e:2b:72:b9:ec:10:f0:a2:68:7a:8f:09:16:70:
e3:38:7d:cb:87:62:b2:d1:be:0f:fd:ab:79:b8:43:
ae:4b:21:fa:dc:e4:d8:a0:c0:46:28:39:7c:81:97:
cd:2a:54:e2:4c:c3:c8:ff:3e:3a:40:ec:17:3d:99:
7a:38:35:f9:cc:fe:60:fe:90:56:d2:f6:02:e0:07:
2d:32:59:ec:64:8b:bd:cf:bc:6b:29:84:b3:2d:6d:
64:26:1b:b1:74:b9:56:da:6c:e8:4f:66:3e:76:2f:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:EB:94:27:69:F3:7E:02:FF:DD:8E:00:0A:EC:4E:BF:4F:9C:47
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W-vrlCdp834C_92OAArsTr9PnEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:290::/44
Signature Algorithm: sha256WithRSAEncryption
55:76:97:66:a5:ed:42:e9:f1:07:55:8b:d8:55:74:46:78:b7:
4c:51:5a:4a:5d:8f:44:07:f3:3f:45:f6:9a:2f:ba:c8:1f:bc:
5e:63:16:7d:aa:59:1f:97:9e:4f:f1:93:2c:a4:d0:33:60:a5:
15:e0:bf:1f:50:b9:0a:35:87:8f:ed:86:02:39:91:0f:b5:b6:
00:ca:10:d6:5b:05:30:eb:11:87:47:16:8d:68:4d:53:8b:9f:
d2:58:36:ae:f3:ec:fb:c5:72:4c:8a:7b:c8:a0:a0:a1:32:d3:
2f:74:49:7e:6f:6d:7c:45:26:d8:8c:dd:e2:ee:70:c2:d7:7e:
1b:06:61:e0:c7:0f:c8:0f:0d:36:d7:85:b7:6a:37:e4:94:5f:
c6:76:62:59:52:6d:8a:b4:16:74:f2:84:cf:d2:a3:64:ef:63:
e7:c1:d6:38:5f:42:11:04:4b:1d:37:44:70:31:e5:00:13:30:
4a:56:37:63:be:33:c6:92:26:50:3a:ec:39:7f:3b:e5:e9:62:
6d:ec:26:aa:51:ed:fe:e2:09:e5:9e:c2:e5:0c:0a:e4:67:93:
7c:a8:3e:c2:db:ae:07:66:5a:8c:09:1c:d9:e6:d3:b6:dd:5a:
af:09:c0:21:bd:28:62:31:ca:c6:cd:74:11:21:6c:7b:53:8b:
01:f7:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:34 2025 by rpki-client