Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WDIZ6GwHInKOvBW0E3cp5f6yWsM.roa
File: WDIZ6GwHInKOvBW0E3cp5f6yWsM.roa (raw, json)
Hash identifier: 2iGu637nr+p/gFp5VUzw4xYvx8gfrwuPnBwx+YDBafw=
Subject key identifier: 58:32:19:E8:6C:07:22:72:8E:BC:15:B4:13:77:29:E5:FE:B2:5A:C3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521D216B89CEFFB876A28BF539C155F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WDIZ6GwHInKOvBW0E3cp5f6yWsM.roa
Signing time: Thu 02 Jan 2025 03:49:20 +0000
ROA not before: Thu 02 Jan 2025 03:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47422
IP address blocks: 2a0e:b107:620::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:d2:16:b8:9c:ef:fb:87:6a:28:bf:53:9c:15:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583219e86c0722728ebc15b4137729e5feb25ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:36:12:f9:e4:85:43:0f:9f:d5:29:ae:1c:
9f:20:c0:9b:cd:c6:95:98:96:93:aa:d6:04:c8:9d:
90:36:08:fb:58:64:59:2e:ba:b6:0e:3f:e1:a6:23:
a5:72:a0:ea:50:eb:85:8a:5f:d7:6d:f9:02:ad:46:
40:f7:36:e2:08:e3:68:00:9f:d3:99:0e:3a:b1:72:
ec:35:06:4e:3f:4a:9c:0e:59:df:3b:0a:52:4a:21:
08:89:a1:ee:6c:ac:68:c1:51:4b:ba:22:a6:90:e5:
9a:e5:3d:9b:a1:5c:a4:62:e8:72:4b:11:8b:b4:20:
6a:15:15:5e:f9:42:e2:38:32:61:15:19:1c:fe:5a:
b6:d7:71:85:2a:2d:ad:19:15:ac:2a:5d:46:e5:b9:
d7:7c:02:6f:5e:9a:8d:00:4a:af:ae:8a:96:21:1b:
13:63:e8:eb:8e:8a:cf:2d:69:86:64:42:8a:94:c0:
28:3f:f7:28:14:ab:5e:ea:a8:e0:3f:da:48:b7:ef:
d1:a3:b0:dc:63:83:8b:e9:7f:40:34:82:73:45:c5:
34:01:1f:22:04:0d:2c:1b:e8:25:b1:2b:4c:85:d8:
13:99:eb:07:ec:21:94:12:04:4a:51:93:84:e4:c9:
c5:94:52:34:98:b3:28:cc:31:a8:c8:6d:a9:59:70:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:19:E8:6C:07:22:72:8E:BC:15:B4:13:77:29:E5:FE:B2:5A:C3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WDIZ6GwHInKOvBW0E3cp5f6yWsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:620::/44
Signature Algorithm: sha256WithRSAEncryption
89:11:42:bd:37:e1:14:37:de:50:b4:f0:a1:05:5d:55:96:98:
63:1d:0c:a5:6e:f3:38:b9:be:a7:c0:c8:9f:84:d5:0b:61:dc:
74:86:cf:68:db:85:a0:f5:04:74:ea:64:ad:80:af:d1:a0:d1:
e9:71:37:94:ce:83:2a:99:a5:97:0a:a6:e1:a2:0c:ed:41:07:
c8:83:84:34:cf:f5:41:6c:ac:dd:10:3a:d7:21:9b:1b:72:04:
94:24:11:16:73:45:9c:56:24:56:8f:f4:71:80:58:bb:e4:12:
05:87:0a:ff:31:0f:dd:b7:36:37:9e:c8:99:2c:01:03:85:62:
84:13:d7:46:da:ab:c8:d1:f4:31:1d:9c:18:9b:0d:f7:55:07:
fe:2e:92:bb:a9:85:91:5a:6f:bc:e6:1c:86:d5:24:ea:38:a8:
4b:66:d5:3d:b4:6d:c3:db:c2:1b:15:b8:ce:f3:f0:e1:a5:3d:
fe:cf:07:b2:53:62:fa:22:a0:4f:72:18:dd:88:ec:80:e7:c8:
d2:4a:7a:2e:97:58:25:4d:a3:65:be:82:21:38:f5:ae:79:17:
e7:a9:67:57:9d:db:40:cb:9c:2e:2b:eb:d6:d6:92:cf:f5:1b:
d6:b8:c4:78:99:fb:4b:be:f4:c4:04:8b:c6:37:98:2b:85:7f:
bb:bd:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:39:35 2025 by rpki-client