Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WboxGk_HVp8rxw4MCeYJb96y_q8.roa
File: WboxGk_HVp8rxw4MCeYJb96y_q8.roa (raw, json)
Hash identifier: IXfrqfc7erei9X9rJjhbDal/YJKU86R4WwFcR9jWODM=
Subject key identifier: 59:BA:31:1A:4F:C7:56:9F:2B:C7:0E:0C:09:E6:09:6F:DE:B2:FE:AF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019229FC3DB0B00D5C55F5AD181D6C1363D3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WboxGk_HVp8rxw4MCeYJb96y_q8.roa
Signing time: Wed 25 Sep 2024 16:20:49 +0000
ROA not before: Wed 25 Sep 2024 16:20:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214344
IP address blocks: 2a10:ccc6:6660::/44 maxlen: 48
2a10:ccc6:6661::/48 maxlen: 48
2a10:ccc6:6662::/48 maxlen: 48
2a10:ccc6:6666::/48 maxlen: 48
2a10:ccc6:666d::/48 maxlen: 48
2a10:ccc6:666e::/48 maxlen: 48
2a10:ccc6:666f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:fc:3d:b0:b0:0d:5c:55:f5:ad:18:1d:6c:13:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 25 16:20:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ba311a4fc7569f2bc70e0c09e6096fdeb2feaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:52:38:1d:17:5d:2a:1e:3a:df:d4:a0:0f:
b4:9e:99:b0:3a:fa:97:fa:86:7d:ba:90:d0:c3:cb:
df:b1:03:37:e2:a1:7a:18:b1:5c:a0:6d:b3:7b:57:
4e:b1:62:29:66:be:8b:17:75:c2:90:75:4e:2f:d7:
e1:56:ef:b4:34:c2:ed:2e:68:9e:d3:eb:19:90:17:
cf:a2:44:33:fa:21:c9:7f:09:e0:68:1a:98:4c:db:
ad:06:34:29:d3:d9:25:36:9e:40:af:49:ae:c8:f3:
30:0e:bd:49:d5:56:cf:85:98:d5:eb:f8:b1:f7:64:
d5:d5:7f:5d:43:96:12:b3:e7:86:97:cf:27:f9:76:
6d:fc:d1:98:8e:ea:d4:00:01:9f:74:73:d0:fc:93:
32:17:c7:e3:23:05:a1:50:c5:f1:c4:d7:35:74:17:
c4:f0:f6:8c:cb:88:7c:53:02:cf:fb:38:16:a5:d7:
4f:80:f5:9c:39:25:70:05:3f:ef:9e:91:27:e3:9e:
e7:4e:d9:2a:40:1f:fb:ce:c4:5a:b2:a8:7e:02:05:
ec:d2:d1:01:23:b3:29:f8:96:6e:37:4e:49:66:af:
96:b2:04:31:bf:e9:ba:16:41:64:37:75:36:7e:8e:
1f:6b:ad:da:05:3b:88:ef:40:de:d1:9e:2e:b1:99:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:31:1A:4F:C7:56:9F:2B:C7:0E:0C:09:E6:09:6F:DE:B2:FE:AF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WboxGk_HVp8rxw4MCeYJb96y_q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc6:6660::/44
Signature Algorithm: sha256WithRSAEncryption
ca:3c:81:04:44:62:83:93:18:6b:fa:f9:4d:e0:d3:e3:66:e1:
96:35:f8:62:2c:3b:da:11:5c:4a:57:7d:e5:fe:0d:c4:ab:89:
b9:4c:18:86:74:39:1a:31:0c:ff:5d:1c:d7:f0:7e:00:f6:c8:
01:4b:b9:b2:e8:6f:98:30:9a:65:c2:c3:c6:29:89:33:da:cf:
33:fd:db:d5:27:de:50:ca:80:ab:16:8e:a8:7c:dd:eb:50:2e:
00:81:56:eb:ec:c6:25:9e:77:d4:36:de:bd:b2:7d:4d:ac:fc:
a4:57:c4:0b:55:13:db:aa:4a:58:06:f7:92:59:79:88:54:bb:
e9:ff:ea:92:82:29:29:c0:a1:7a:4c:d3:bb:dc:6c:63:ca:44:
ae:17:3d:3c:ef:6f:4b:ad:a1:28:af:fe:80:06:d8:f4:41:fa:
5d:67:27:0f:30:59:40:56:28:d4:50:28:4d:3f:d0:09:c8:19:
56:c3:9c:4b:a7:e8:5a:73:9e:51:7f:53:2f:78:0d:d6:59:d3:
f9:f3:3b:c0:70:d8:f8:ba:7c:7e:4f:a1:34:15:99:6a:76:d7:
48:35:dc:72:fe:d9:df:dd:3c:9b:f4:e6:60:ce:be:07:ce:c7:
82:b2:02:83:0c:4c:f0:94:77:d0:32:97:3d:2d:3d:32:d6:ce:
49:4d:7f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:57 2024 by rpki-client on console-ams.rpki-client.org