Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WZILJpSx2MEPkWBOmkKjpHgEOYM.roa
File: WZILJpSx2MEPkWBOmkKjpHgEOYM.roa (raw, json)
Hash identifier: X8c8KgxI39k02sk79wJZjlwzlk6CM50V1ReUAJ3POJM=
Subject key identifier: 59:92:0B:26:94:B1:D8:C1:0F:91:60:4E:9A:42:A3:A4:78:04:39:83
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194252296547C37D032981877EF6F876CA7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WZILJpSx2MEPkWBOmkKjpHgEOYM.roa
Signing time: Thu 02 Jan 2025 03:50:11 +0000
ROA not before: Thu 02 Jan 2025 03:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216112
IP address blocks: 2a0e:97c0:de0::/44 maxlen: 48
2a0e:97c0:de1::/48 maxlen: 48
2a0e:97c0:de2::/48 maxlen: 48
2a0e:97c0:de3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:96:54:7c:37:d0:32:98:18:77:ef:6f:87:6c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59920b2694b1d8c10f91604e9a42a3a478043983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:ac:09:a3:68:fb:fe:27:b6:43:2b:3f:de:
39:0d:9e:d0:3c:27:3b:0e:17:f9:30:f2:7b:60:07:
87:63:3f:fc:4f:7c:b1:d0:0c:0b:1c:d3:2e:fe:fb:
4d:84:35:1d:02:a4:6d:f0:21:76:fc:36:52:c0:38:
f1:92:1c:a0:55:2d:6a:8a:a1:ea:9a:49:f9:72:ab:
4b:f9:22:df:85:ed:f3:ea:47:5b:14:98:43:d2:67:
27:93:e0:ab:fd:72:93:11:bd:97:42:e5:1d:a6:a1:
5c:c7:bd:c8:e5:7a:63:c7:53:d9:cb:50:27:7d:5c:
a8:76:e6:9a:d5:94:2a:0d:2c:71:42:e2:b4:c1:9d:
05:57:dd:a9:93:e4:d5:ef:18:be:e9:5a:d4:aa:28:
e2:49:a4:33:7a:0f:b8:ae:b8:10:38:c4:ae:8f:04:
6a:da:b1:dd:e9:9e:4f:d8:31:12:9f:9b:7d:b0:69:
27:68:44:47:29:3b:d8:8c:6c:20:8f:9c:0d:fa:c0:
49:71:1a:25:77:11:c3:4f:5d:e3:cc:3a:6c:7c:14:
af:54:62:31:d6:ba:2a:56:de:c3:c6:1c:03:ae:38:
e6:80:dc:4e:fa:8d:28:43:43:08:ff:b0:f1:c0:33:
9a:c0:a5:6a:e8:f9:ad:a9:60:21:cf:35:f9:2b:81:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:92:0B:26:94:B1:D8:C1:0F:91:60:4E:9A:42:A3:A4:78:04:39:83
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WZILJpSx2MEPkWBOmkKjpHgEOYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:de0::/44
Signature Algorithm: sha256WithRSAEncryption
30:8e:9a:68:70:24:54:ce:f6:0c:45:36:da:0d:d5:b1:76:88:
d1:2d:74:02:20:78:be:35:54:d1:26:2d:70:e0:8e:a6:92:12:
ae:7b:e7:ce:4f:0d:80:69:8b:f2:8d:75:c8:21:ce:5c:16:59:
78:02:99:b3:c9:80:99:46:4e:fd:fb:cc:b2:5b:b5:a7:d4:f8:
b3:4e:4d:6a:68:b9:5f:5e:70:4b:c6:4c:23:26:28:91:fa:c6:
3c:c3:33:59:59:7e:7f:64:ef:2e:87:9f:ce:ea:82:98:92:b5:
0e:25:4b:4e:cb:6e:e0:7d:cd:c1:b3:ff:b7:98:15:b5:8b:21:
03:e2:3a:6e:d2:ef:08:fe:28:25:83:b7:6c:be:f8:f7:8c:0d:
c4:f3:eb:c7:85:65:53:b3:f0:29:a5:8d:dc:df:6b:5f:50:df:
af:79:28:32:e7:2a:e7:2d:95:82:69:6f:62:37:34:ed:11:98:
d0:aa:7c:50:0e:62:50:73:27:e4:dd:b4:0f:de:01:63:7d:66:
01:b7:68:d5:4a:1b:5f:d0:6a:e7:01:70:a2:8d:16:64:be:00:
bf:34:93:38:77:33:49:cc:6f:58:a3:6d:2c:a8:88:c4:b4:d9:
2f:78:ee:49:26:91:f3:07:33:8b:5f:a6:88:ed:e5:b3:25:3f:
a6:ec:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:59:34 2025 by rpki-client